Wasmer is an open-source WebAssembly implementation that is focused on running sandboxed applications everywhere thanks to the power of WASM while being as performant as traditional native applications. Today marks the availability of Wasmer 4.0 as another step forward for this project...

Contents

• GNU/Linux
  • Audiocasts/Shows
  • Applications
  • Instructionals/Technical
  • Games
  • Desktop Environments/WMs
    • GNOME Desktop/GTK
• Distributions and Operating Systems
  • BSD
  • SUSE/OpenSUSE
  • Fedora Family / IBM
  • Canonical/Ubuntu Family
  • Devices/Embedded
  • Open Hardware/Modding
• Free, Libre, and Open Source Software
  • Programming/Development
    • Perl / Raku
    • Python
    • Shell/Bash/Zsh/Ksh
    • Rust
• Leftovers
  • Science
  • Education
  • Hardware
  • Proprietary/Artificial Intelligence (AI)
  • Defence/Aggression
  • Transparency/Investigative Reporting
  • Environment
    • Energy/Transportation
    • Wildlife/Nature
    • Overpopulation
  • Finance
  • Astr...

By Waqas

Service members in the United States military have been receiving unsolicited smartwatches through the mail, which unsurprisingly contain malware.

This is a post from HackRead.com Read the original post: US Military Personnel Targeted by Unsolicited Smartwatches Linked to Data Breaches

• Gemini* and Gopher

  • Personal/Opinions

    • SpellBinding: CNGHILF Wordo: HOMED

  • Politics and World Events

    • It all adds up

      I think it might seem that way by forgetting were all constantly lying/cheating/deceiving in gobs of little ways that seem harmless in and of themselves, especially when others arent looking (e.g. throw the cigarette butt out the car window), but integrated over time and masses appear as consequences incongruent with the nature of the underlying harmless in and of themselves ways.

      In other words, we posit *far* better actors as the individuals in crowds, therein becoming confounded when their collective behavior somehow doesnt reflect the individuals we posited.

  • Technology and Free Software

    • AsiaStar Redux

      Its a small mod that adds two more trains to the game. One is designed in 2005 and the other in 2015.

    • Interesting Hacker News Items

    • Internet/Gemini

      • Random Articles on Gemipedia

        I love getting feedback on the things I make. It absolutely makes my day. Its also a steady source of suggestions on how to improve things. Yesterday I got an email from Santiago asking to add a Random Article function to Gemipedia to use for discovery. This will redirect you to random articles on Wikipedia.

        So when I went to add a `GetRandomArticle()` method to our Wikipedia API client, I was surprised to find it already existed! Turns out, I had added this functionality last year without directly exposing it to the user and I had comple...

Whats a tachyscope? According to [Daniel Ross], it is an animated display from an alternate timeline circa 1880. The real ones, of course, didnt have LEDs and microcontrollers. The control unit looks like an old-timey radio, complete with Nixie tubes. The spinning part has blue and white LEDs, each accepting data from one of two serial ports. You can select to see data from one port, the other, or both. You can see the amazing contraction in the video below.

The LEDs are surface mounted and placed inside a glass test tube. Each display has its own processor. The project appears to have a PCB, but it is just a piece of fiberglass with a color print on top of it and holes drilled with a rotary tool. The board has no actual conductors everything is point-to-point wiring. The base of the unit is old cookware. The slip ring is pretty interesting, too. It uses an old video tape head, D-cell batteries cut up, and contacts from a relay.

You might remember [Daniel] from his steampunk Victorian computer project, including a punk teletype and a magic eye tube. If you want some theory on these kinds of displays, we can help. If you just want a s...

A Tesla software hacker has found an Elon Mode driving feature that seems to allow Tesla vehicles with Full Self-Driving to operate without any driver monitoring.

Tesla CEO Elon Musk might have his very own supersecret driver mode that enables hands-free driving in Tesla vehicles.

The hidden feature, aptly named Elon Mode, was discovered by a Tesla software hacker known online as @greentheonly. The anonymous hacker has dug deep into the vehicle code for years and uncovered things like how Tesla can lock you out of using your power seats or the center camera in the Model 3 before it was officially activated.

After finding and enabling Elon Mode, greentheonly ventured out to test the system More.

---

Elon Musk might be driving FSD hands-free.

A new model will allow robots to mimic human actions fast. Scientists are using this model to train robots so that they could do daily chores just like the way we do.

Are you among those who often dream of a day when a robot will do all the everyday household chores for you? A team of researchers from Carnegie Mellon University (CMU) has figured out how to turn your dream into reality.

In their latest study, they proposed a model that allowed them to train robots to do household tasks by showing them videos of people doing ordinary activities in their homes, like picking up the phone, opening a drawer, etc.

Microsoft today announced its roadmap for building its own quantum supercomputer, using the topological qubits the companys researchers have been working on for quite a few years now. There are still plenty of intermediary milestones to be reached, but Krysta Svore, Microsofts VP of advanced quantum development, told us that the company believes that it will take fewer than 10 years to build a quantum supercomputer using these qubits that will be able to perform a reliable one million quantum operations per second. Thats a new measurement Microsoft is introducing as the overall industry aims to move beyond the current era of noisy intermediate-scale quantum (NISQ) computing.

We think More.

---

At its Ignite conference, Microsoft today put its stake in the ground and discussed its progress in building a quantum computer and giving developers tools to experiment with this new computing paradigm on their existing machines.

Theres a lot to untangle here, and few people will claim that they understand the details of quantum computing. What Microsoft has done, though, is focus on a different aspect of how quantum computing can work and that may just allow it to get a jump on IBM, Google and other competitors that are also looking at this space. The main difference between what Microsoft is doing is that its system is based on advances in topology that the company previously discussed. Most of the theoretical work behind this comes from Fields Medal-recipient Michael Freedman, who joined Microsoft Research in 1997, and his team.

What topology does is that it gives you this ability to have much better fidelity, Microsofts corporate vice president for quantum research Todd Holmdahl told me. If you look at our competitors, some of them have three nines of fidelity and we could be at a thousand or ten thousand times that. That means a logical qubit, we could potentially implement it with 10 physical qubits. What the team essentially did is use Freedmans theories to implement the error correction thats so central to quan...

DeepMinds co-founder believes the Turing test is an outdated method to test AI intelligence. In his book, he suggests a new idea in which AI chatbots have to turn $100,000 into $1 million.

A co-founder of Googles AI research lab DeepMind thinks AI chatbots like ChatGPT should be tested on their ability to turn $100,000 into $1 million in a modern Turing test that measures human-like intelligence.

Mustafa Suleyman, formerly head of applied AI at DeepMind and now CEO and co-founder of Inflection AI, is releasing a new book called The Coming Wave: Technology, Power, and the Twenty-first Centurys Greatest Dilemma.

---

Mustafa Suleyman said the original Turing Test is outdated because its unclear whether its a meaningful milestone for AI intelligence anymore.

The foremost physiological effect of psychedelics in the brain is to significantly reduce activity in multiple brain areas, which contradicts the mainstream reductionist expectation. Physicalist neuroscientists have proposed that an increase in brain noise explains the subjective richness of a psychedelic experience, but a psychedelic experience isnt akin to TV static, argues Bernardo Kastrup.

Before 2012, the generally accepted wisdom in neuroscience was that psychedelic substanceswhich lead to unfathomably rich experiential statesstimulate neuronal activity and light up the brain like a Christmas tree. Modern neuroimaging, however, now shows that they do precisely the opposite: the foremost physiological effect of psychedelics in the brain is to significantly reduce activity in multiple brain areas, while increasing it nowhere in the brain beyond measurement error. This has been consistently demonstrated for multiple psychedelic substances (psilocybin, LSD, DMT), with the use of multiple neuroimaging technologies (EEG, MEG, fMRI), and by a variety of different research groups (in Switzerland, Brazil, the United Kingdom, etc.). Neuroscientist Prof. Edward F. Kelly and I published an essay on Scientific American providing an overview of, and references to, many of these studies.

These results contradict the mainstream metaphysics of physicalism for obvious reasons: experience is supposed to be generated by metabolic neuronal activity. A dead person with no metabolism experiences nothing because their brain has no activity. A living person does because their brain does have metabolic activityor so the story goes. And since neuronal activity supposedly causes experiences, there can be nothing to experience but what can be traced back to patterns of neuronal activity (otherwise, one would have to speak of disembodied experience). Ergo, richer, more intense experiencesuch as the psychedelic stateshould be accompanied by increased activity somewhere in the brain; for it is this increase that supposedly causes the increased richness and intensity of the experience.

Cultured meat starts with the extraction of cells from an animals tissue, be it a pig, cow, chicken, fish, or any other animal we consume. The cell extraction doesnt kill or even harm the animal. The cells are mixed with a cocktail of nutrients, oxygen, and moisture inside large bioreactors. Mimicking the environment inside an animals body, the bioreactors are kept at a warm temperature, and the cells inside divide, multiply, and mature. Waste products are regularly removed to keep the environment pure.

Once the cells have reached maturitythat is, grown into small chunks of muscle-like materialtheyre harvested from the bioreactors to be refined and shaped into a final product. This can involve anything from extrusion cooking and molding to 3D printing and adding in artificial fat.

JBS says the factory its building in Spain will be able to produce more than 1,000 metric tons of cultivated beef per year, and could expand capacity to 4,000 metric tons per year in the medium term. Thats smaller than Believer Meats facility in the US, which will have an annual production capacity of 10,000 metric tons. But whats noteworthy about the JBS factory is that its focused on producing beef.

On this day 52 years ago, Neil Armstrong and Buzz Aldrin walked on the Moon. Heres what they said about The Overview Effect and how it transforms the way you think forever.

Have you heard of the overview effect? Its an interesting phenomenon that, for the time being, is exclusively reserved for astronauts. It refers to the overwhelming feeling astronauts get when witnessing for the first time the Earth from space.

It was first experienced by Yuri Gagarin in April 1961 when he became the first human to orbit the Earth. The event led him to marvel at Earths beauty, saying, People of the world, let us safeguard and enhance this beauty, and not destroy it.

Eight years later, Neil Armstrong, Buzz Aldrin, and Michael Collins, all astronauts walking on the Moon, also reported feeling a profound and stunning sense of clarity when first witnessing the Earth from so far.

Michael Collins described his experience, saying The thing that really surprised me was that it [Earth] projected an air of fragility. And why, I dont know to this day. I had a feeling its tiny, its shiny, its beautiful, its home, and its fragile.

You can imagine that this overview effect is important because it results in a tremendous desire to protect the Earth. But thats not the only reason. In our video, we explain why the overview effect is so important and how the term was first coined.

The quest to enable limited use of BPF features in unprivileged processes continues. In the previous episode, an attempt to use authoritative Linux security module (LSM) hooks for this purpose was strongly rejected by the LSM developers. BPF developer Andrii Nakryiko has now returned with a new mechanism based on a privilege-conveying token. That approach, too, has run into some resistance, but a solution for the strongest concerns might be in sight.

The proof-of-concept (PoC) exploit code for high-severity vulnerability (CVE-2023-20178) in Cisco AnyConnect Secure was published online.

A security researcher has published a proof-of-concept (PoC) exploit code for the high-severity vulnerability, tracked as CVE-2023-20178 (CVSS score of 7.8), impacting Cisco AnyConnect Secure Mobility Client and Secure Client for Windows.

AnyConnect is a secure remote access VPN (Virtual Private Network) solution developed by Cisco Systems.AnyConnect is widely used by organizations to enable their employees or students to access internal resources and services from remote locations.

An attacker can trigger the vulnerability to elevate privileges to those of SYSTEM.

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The client update process is executed after a successful VPN connection is established. reads the advisory published by the company. This vulnerability exists because improper permissions are assigned to a temporary directory that is created during the update process. An attacker could exploit this vulnerability by abusing a specific function of the Windows installer process. A successful exploit could allow the attacker to execute code with SYSTEM privileges.

The experts pointed out that during the software update process, a temporary folder is created to store copies of files that are being modified. The operation is performed to allow a rollback operation if the case of failure of the installation process.

A threat actor can use an exploit to start an update process that creates a temporary folder, then it can trigger a rollback process. At this point, the attacker code can store malicious files in the temporary folder to achieve their execution.

Cisco credited the researcher Filip Dragovic for reporting the CVE-2023-20178, the expert also released a PoC that triggers an arbitrary file delete with System privileges.

When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default permissions in following format: .tmp...

Published this week (yesterday):

Contractor links to this:

Mind the wording again (chain of pages):

Notice how they made this report:

From the body of the report:

Summary: The Linux Foundation is like an animal charity where the administrators eat meat; they keep talking about Open Source, but nobody there seems to be adopting it; theyre just using Linux for openwashing and greenwashing, even for Microsoft

AlmaLinux, the popular community-oriented distribution that was established following Red Hat's decision to discontinue development on CentOS (non-Stream) and is backed by AMD and other organizations, is trying to chart its path forward following Red Hat's latest curve ball...

Proxmox is a commercial company offering specialised products based on Debian GNU/Linux. the company's latest release is Proxmox 8.0 "Virtual Environment" which is based on Debian 12. The release announcement lists new features in the distribution: "We're very excited to announce the major release 8.0 of Proxmox Virtual....

Security updates have been issued by Debian (avahi, hsqldb, hsqldb1.8.0, minidlna, trafficserver, and xmltooling), Oracle (.NET 6.0, .NET 7.0, 18, c-ares, firefox, kernel, less, libtiff, libvirt, python, python3.11, texlive, and thunderbird), Red Hat (c-ares, kernel, kernel-rt, kpatch-patch, less, libtiff, libvirt, openssl, and postgresql), Slackware (bind and kernel), SUSE (bluez, curl, geoipupdate, kernel, netty, netty-tcnative, ntp, open-vm-tools, php8, python-reportlab, rustup, Salt, salt, terraform-provider-aws, terraform-provider-null, and webkit2gtk3), and Ubuntu (bind9, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi, linux-azure, linux-gcp, linux-ibm, linux-kvm, linux-oracle, and linux-ibm).

Exabeam has unveiled that Adam Geller has been appointed as CEO. Michael DeCesare is stepping down as CEO and President, but will continue to serve as a Board advisor. Geller is a well-respected Silicon Valley leader who has built a 25-year career in the information security industry leading product teams that designed and delivered cutting-edge cybersecurity offerings. Under Gellers leadership as CPO for the last three years, Exabeam rearchitected its products to be cloud-native and More

The post Exabeam appoints Adam Geller as CEO appeared first on Help Net Security.

Satellite internet used to be a woeful thing. Early networks relied on satellites in geostationary orbits, with high latency and minimal bandwidth keeping user demand low. That was until Starlink came along, and provided high-speed, low-latency internet access using a fleet of thousands of satellites in Low Earth orbit.

Starlink has already ruffled feathers due to concerns around light pollution and space junk in particular. Now, it appears that China may be readying its own competing constellation to avoid being crowded out of low orbits by the increasingly-popular service.

Getting Crowded

...

Going back a few years there has been experimental development around a Vulkan back-end for KDE's KWin compositor while now a road-map is being formalized for actually bringing Vulkan support to fruition...

The Dong with the Luminous Nose. Jonny Phillips. 2021.

I was unable to locate this film anywhere for my Tilda Swinton project. If somebody knows where it can be found (either in some physical format or online), please let me know.

Posted by Demi Marie Obenour on Jun 22

glibc exports a function for this exact purpose, and sanitizers call it
precisely to avoid false leak reports. Static analyzers can also be
told to act as if that function is called.

If you have an Apple computer, watch, or smartphone you have hopefully already received a notification that you should install an update to your operating system. And yes, you really should update your devices.

Norton parent firm, Gen Digital, was the victim of a ransomware attack that exploited the recently disclosed MOVEit zero-day vulnerability.

Gen Digital Inc. (formerly Symantec Corporation and NortonLifeLock) is a multinational software company that provides cybersecurity software and services. 

The company owns multiple brands, including Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, and CCleaner.

Gen Digital said it was the victim of a ransomware attack, threat actors have exploited the recently disclosed MOVEit Transfer vulnerability CVE-2023-34362.

MOVEit Transfer is a managed file transfer that is used by enterprises to securely transfer files using SFTP, SCP, and HTTP-based uploads.

The vulnerability is a SQL injection vulnerability, it can be exploited by an unauthenticated attacker to gain unauthorized access to MOVEit Transfers database.

The Clop ransomware group recently claimed to have hacked hundreds of companies globally by exploiting MOVEit Transfer vulnerability.

The Clop ransomware gang (aka Lace Tempest) was credited by Microsoft for the campaign that exploits a zero-day vulnerability, tracked as CVE-2023-34362, in the MOVEit Transfer platform.

The ransomware gang published an extortion note on its dark web leak site claiming to have information on hundreds of businesses.

The company confirmed that the threat actors had access to the personal information of employees. Exposed data include names, addresses, birth dates, and business email addresses.

We use MOVEit for file transfers and have remediated all of the known vulnerabilities in the system. When we learned of this matter, we acted immediately to protect our environment and investigate the potential impact. We have confirmed that there was no impact to our core IT system...

Digs around the open-air sanctuary started in 2017, but the results have only just been made public.

An international team of researchers, led by University of Toronto Engineering Professor Yu Zou, is using electric fields to control the motion of material defects. This work has important implications for improving the properties and manufacturing processes of typically brittle ionic and covalent crystals, including semiconductorsa crystalline material that is a central component of electronic chips used for computers and other modern devices.

In a new study published in Nature Materials, researchers from University of Toronto Engineering, Dalhousie University, Iowa State University and Peking University, present real-time observations of dislocation motion in a single-crystalline zinc sulfide that was controlled using an external electric field.

This research opens the possibility of regulating dislocation-related properties, such as mechanical, electrical, thermal and phase-transition properties, through using an electric field, rather than conventional methods says Ph.D. candidate Mingqiang Li, the first author of the new paper.

A fascinating eVTOL project is about to come out of stealth, showcasing a breakthrough HyperDrive propulsion technology that MagLev Aero claims is dramatically more quiet, efficient, safe, sustainable and emotionally appealing to the mass market.

Representatives from the Boston-based company have made their way to the Paris Air Show, where theyre preparing to reveal a very different approach to electric vertical lift aircraft, drawing on the magnetic levitation technology used in high-speed trains.

What we appear to have here is an annular lift fan arrangement. The aircrafts cabin appears to be surrounded by a huge ring-shaped duct, into which at least one large-diameter, many-bladed fan is mounted.

By Deeba Ahmed

The vCISO Directory comes to answer the increasing need of SMBs to manage their cybersecurity and helps them

This is a post from HackRead.com Read the original post: First Directory of Virtual CISO Providers Launched by Cynomi

Losing sleep over Generative-AI apps? You're not alone or wrong. According to the Astrix Security Research Group, mid size organizations already have, on average, 54 Generative-AI integrations to core systems like Slack, GitHub and Google Workspace and this number is only expected to grow. Continue reading to understand the potential risks and how to minimize them.  Book a Generative-AI

Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study has revealed. This includes repositories from organizations such as Google, Lyft, and several others, Massachusetts-based cloud-native security firm Aqua said in a Wednesday report. The supply chain vulnerability, also known as dependency repository hijacking, is a class of attacks that

So, I was looking for Das offene Universum, a movie from 1990 (featuring Tilda Swinton) that hasnt been available for decades. But suddenly its on Vimeo! But you have to pay to watch it, so I create an account and buy it.

And look! Download link! I like that!

Of course, clicking that cloud symbol doesnt do anything, because this is Firefox and web pages usually dont work in Firefox any more. (And I love that theyve apparently had so many reports from people that they cant figure out how to download that theyve spelled it out as click the cloud to download. Instead of just having a button that says download.)

User Experience Design FTW!

Anyway, so I go to Chrome and log in and

...

Fancy $10 million? Of course you do! Well, all you have to do is provide information that helps identify or locate members of the notorious Cl0p ransomware gang.

The Chinese cyber espionage actor known as Camaro Dragon has been observed leveraging a new strain of self-propagating malware that spreads through compromised USB drives. "While their primary focus has traditionally been Southeast Asian countries, this latest discovery reveals their global reach and highlights the alarming role USB drives play in spreading malware," Check Point said in new

The industrys first-ever directory of virtual CISO (vCISO) service providers has gone live. This list of vCISO providers means that SMBs can tap the expertise of qualified cybersecurity professionals to protect their digital assets and ensure compliance. To help organizations shore up their cyberdefenses, MSPs, MSSPs, and consultancies have developed vCISO services. They enable businesses to avail themselves of the expertise and skills of a professional CISO to improve their cybersecurity posture, while only paying More

The post vCISO Directory helps SMBs manage their cybersecurity appeared first on Help Net Security.

Patients of a Beverly Hills plastic surgery clinic face the potential horror of having highly sensitive images of their bodies leaked onto the internet by hackers. Read more in my article on the Hot for Security blog.

Posted by Jyoti Raval on Jun 22

Managing Pentest (MPT: Pentest In Action) [image: HITBSecConf HITB2022SIN]
<https://conference.hitb.org/hitbsecconf2022sin/session/mpt-pentest-in-action/>

MPT aims to provide one stop solution for managing all pentests that are
running across organisation.
<https://github.com/jenyraval/MPT#why>Why?

Security penetration testing is more than necessary. If not all, most
organisations either have their own penetration testing team...

An Anonymous Coward writes:

https://www.tomshardware.com/news/micro-center-to-launch-two-stores-2024

While Best Buy, America's largest brick-and-mortar electronics retailer, has been closing stores this year among bleak PC sales, Micro Center has plans to continue expanding its retail footprint. Earlier this year, the company announced that it would be adding three new stores by the end of 2024, with the first opening in Indianapolis this summer.

Today, Micro Center has officially revealed the locations of the final two new locations, which will open in Miami and Charlotte next year. When all three new stores have opened, the company will have 28 outlets in the U.S. across 19 U.S. states, ranging from California in the west to New York, New Jersey and Massachusetts in the east. You can see a complete list of store locations on the company's site.

[...] Founded in Columbus, Ohio in 1979, Micro Center is a favorite shopping destination for anyone who builds PCs, tinkers with Raspberry Pis or does any kind of 3D printing. The company stocks more than 400 types of filament, along with 3D printers and accessories from major vendors such as Creality and AnyCubic. It's also one of the few places where you can buy Raspberry Pi boards at MSRP, provided that they are in stock.

Unlike Best Buy, Amazon and Newegg, Micro Center's business model revolves pretty-much exclusively around getting customers to come into the store. Most of the products are not available for purchase online, though you can reserve them for in-store pickup.

Micro Center is also one of the few places you can actually see and touch high-end peripherals and components. The stores stock well over 150 different gaming keyboards from brands such as Razer, Corsair and Asus. They also have about the same number of PC cases, including those from Lian Li, Fractal Design and NZXT. The Fractal Design North, our current pick for best PC case, is available to see and buy with all of its wood-paneled glory.

Can you imagine a world where you can base your purchase decisions on seeing something in person and not having to hope that what you're buying is the same as the picture you are shown on a web page?

---

Original Submission

Read more of this story at SoylentNews.

By Waqas

The NOBELIUM group is also known as Midnight Blizzard.

This is a post from HackRead.com Read the original post: Microsoft warns of rising NOBELIUM credential attacks on defence sector

Sent in today for the mainline Linux kernel -- days ahead of the expected Linux 6.4 stable release -- is a crash fix for just-released AMD Ryzen 7040 series laptops...

Xonotic 0.8.6 is out as the latest update to this long-running, open-source first person shooter game...

With regard to the Chinese government destroying the banned food crops, see: Maos Great Famine: The History of Chinas Most Devastating Catastrophe, 1958-62 by Frank Diktter Via: laowhy86:

Why Data Exfiltration Detection is Paramount? The world is witnessing an exponential rise in ransomware and data theft employed to extort companies. At the same time, the industry faces numerous critical vulnerabilities in database software and company websites. This evolution paints a dire picture of data exposure and exfiltration that every security leader and team is grappling with. This

Before the Chernobyl Nuclear Power Plant (ChNPP, spelled Chornobyl in Ukrainian) disaster in 1986, there had been little need for radiation-resistant robots to venture into high-risk zones.

...

Posted by Zdenek Dohnal on Jun 22

Hi all,

there is currently the embargoed CVE-2023-34241 in CUPS project:

Summary

Cups logs data of free memory to the logging service AFTER the
connection has been closed, when it should have logged the data right
before.

Details

The exact cause of this issue is the function httpClose(con->http) being
called in scheduler/client.c before

|httpClose(con->http); cupsdLogClient(con, CUPSDLOGWARN, "IP lookup
failed -...

Apple rolled out security updates to address actively exploited zero-day flaws in iOS, iPadOS, macOS, watchOS, and Safari.

Apple addressed a set of vulnerabilities in iOS, iPadOS, macOS, watchOS, and the Safari browser that were actively exploited in the wild.

The IT giant addressed the zero-day vulnerabilities, tracked as CVE-2023-32434 and CVE-2023-32435, exploited as part of the recently disclosed Operation Triangulation.

Recently, Kaspersky researchers dug into Operation Triangulation and discovered more details about the exploit chain employed to deliver the spyware to iOS devices. In early June, researchers from the Russian firm Kaspersky uncovered a previously unknown APT group that is targeting iOS devices with zero-click exploits as part of a long-running campaign dubbed Operation Triangulation.

The experts discovered the attack while monitoring the network traffic of their own corporate Wi-Fi network dedicated to mobile devices using the Kaspersky Unified Monitoring and Analysis Platform (KUMA).

According to Kaspersky researchers, Operation Triangulation began at least in 2019 and is still ongoing.

The attack chains commenced with a message sent via the iMessage service to an iOS device. The message has an attachment containing an exploit. The expert explained that the message triggers a remote code execution vulnerability without any user interaction (zero-click).

Below are the description for the two issues addressed by Apple:

• CVE-2023-32434  An integer overflow that resides in the Kernel, it was addressed with improved input validation.  An app may can trigger the vulnerability to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
• ...

Ahead of the Linux 6.5 merge window expected to open up next week, a patch providing sound quirks for the ASUS ROG Ally's CS35l41 audio is now queued in the sound subsystem's for-next branch...