160 of 160 stories
Thursday, 22 October 2026
Sådan kommer det nye vandkulturhus i København til at se ud
Efter flere års byggeri er der nu sat dato på, hvornår det nye milliarddyre vandkulturhus i Københavns havn åbner for vandhunde og badedyr
Mats nåede ikke flyet til Kina efter kø-kaos i lufthavn: Billet har kostet over 50.000 kroner
Mats Edvall har netop misset sit fly til Kina.
Modular's MAX Source Code Now Fully Opened, Under New MAX License
Back in August Modular's Mojo language was open-sourced following the acquisition of Chris Lattner's company by Qualcomm.
AI er det nye supervåben
STIL SPØRGSMÅL Er du klar, hvis Danmark rammes af en krise?
Eksperter i samfundssikkerhed svarer på spørgsmål om, hvordan man bedst muligt forbereder sin husstand på en større krise.
Ukraine hit by strikes after Russia agrees to new peace talks
The three waves of Russian missiles were launched at hours after Russia said it was "ready in principle" to resume peace talks with the US and Ukraine.
Total ban on protests in Marseille and Lyon after riots
Protests will only be allowed in some towns and cities if organised by unions, and top museums will be closed on Saturday.
Max-severity GitLab bug allows remote code execution over 12 years of releases
Vendor 'strongly recommends' upgrading to a fixed version 'as soon as possible'
Ekstraordinært sikkerhedstjek i Københavns Lufthavn fører til massive køer
Alle passagerer skal gennemgå et ekstraordinært sikkerhedstjek, og lufthavnen har indkaldt yderligere personale til opgaven.
Building a VMM from scratch, #0.5: Booting Linux in 190 lines of C
Points: 4 · Comments: 0
Disgraced Indian cert issuer leaves the cert issuing business
We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out to be the number 4
Gør plads i garderoben og varm de hjemløse
Den kolde tid står for døren
Expose only share links of a private service with caddy
Comments
Ny hjemmeside skal øge trygheden blandt naboer til udrejsecenter
En online byportal i Bording skal flytte fokus fra de negative historier om byen som nærmeste by til udrejsecenter Kærshovedgård til den gode fortælling om en dejlig by.
[$] The end of __get_user() and __put_user()
Linus Torvalds rarely writes significant amounts kernel code these days, so the merging of a 48-part patch series from him is an unusual event.
PHP2Shell puts dozens of UK government services out of service
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
Ulrick har preppet siden dag et: Det er ’noget sjusk’, hvis man ikke forbereder sig
Kun 39 procent af danskerne har fulgt myndighedernes anbefalinger om at kunne klare sig selv i tre døgn under en krise.
Linux 7.4 Improves Scheduling Latency For Short-Slice Tasks, NVIDIA Vera SMT Preference
The scheduler updates have been merged for the in-development Linux 7.4 kernel to deliver several nice scheduling enhancements...
Smukfest lukker færre gæster ind til næste år
Beslutningen om at sælge færre lørdagsbilletter til Smukfest sker på baggrund af en undersøgelse blandt festivalens gæster.
Tidslinje: Sådan kom sikkerhedsbrist frem i lyset
I 2024 opdagede man en fejl i programmeringssproget PHP, som i dag - to år og meget avanceret AI-teknologi senere - kaldes et af de mest alvorlige sikkerhedshuller i software-historien.
Header Accordions: QPACK amplification attacks against HTTP/3 servers
Comments
Euforisk Christopher tager prisen for Danmarks bedste brød
Skole ændrer praksis efter Aula-nedbrud: Nu printes aftalerne ud
Elever måtte vente på at komme hjem fra skole, fordi skolens henteaftaler med forældrene ikke var tilgængelige.
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
Accepterer du homoseksualitet? Venstre vil have svar fra skoleelever i Odense
Politikerne skal passe på, at forslaget ikke fører til stigmatisering, siger Odense Pride.
Why a student protest movement is challenging 12 years of Vučić rule in Serbia
After two years of student protests, Serbians vote on Sunday in elections that could bring down the ruling party.
Hvad betyder sikkerhedsbristen for dig?
First human case of Shamonda virus detected in France, officials say
The disease, which usually affects cattle, has been identified in a patient who died in early October.
KeePassXC 2.8.0 released
Version 2.8.0 of the KeePassXC password-management application has been released. The new release brings a lot of long-awaited new features, many bugfixes, and several security updates.
x86 Kernel Shadow Stacks Being Worked On For Linux As Powerful Control Flow Protection
Linux user-space for several years had shadow stack support for hardware-enforced control-flow enforcement in defending against return oriented programming (ROP) attacks.
[$] Rust features in the future
There are several Rust features that kernel developers have been hoping to stabilize, but Josh Triplett wanted to describe all of the other features that the Rust project is currently working on.
Security updates for Thursday
Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, cockpit-files, cockpit-machines, fetchmail, glycin-loaders, go-toolset:rhel8, golang, hostapd, jackson-core, kernel, kern
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
jailbreaking the switch 2
Comments
Kunstige koralrev er havets nye håb
Mesa Loosens Rules Around AI Agents For Code Comments / Commit Messages
The Mesa 3D graphics driver project has loosened its rules laid out in their AGENTS.md for AI agents to permit AI/LLM assistance in generating code comments and commit/patch messages, as long as a hum
Myrlyn 1.1 Released For SUSE/openSUSE GUI Package Manager
Myrlyn, the package manager GUI that began as YQPkg during a SUSE Hack Week and has evolved quite well, is out with version 1.1 as the first new feature update since the beginning of the year...
Datalæk fra hackerangreb: Novo rangerer tusindvis af sundhedspersoner fra A til D
Ifølge Novo er det almindelig praksis i lægemiddelindustrien at benytte databaser over sundhedspersoner.
Kit vil gøre sin by til den mest kriseklare i Danmark
STIL SPØRGSMÅL Hvad gør foreninger og organisationer, når it-systemet går ned?
Marcel Mirzaei-Fard, techanalytiker i DR, og Jens Monrad, cyberrådgiver hos Arx Insight, svarer på spørgsmål om, hvordan foreninger og organisationer bedst håndterer problemer med PHP og deres hjemmes
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours
At least four dead after storm brings flooding to southern France
The deaths include two women found drowned in a cellar in the Bouches-du-Rhône region.
Several Linux kernel vulnerabilities accidentally posted to public mailing list
Points: 228 · Comments: 80
Mesa RADV Change Satisfies More Steam Play Games On Aging AMD GFX8 GPUs
Valve landed a patch in Mesa 27.0 and to be back-ported to current Mesa stable series to satisfy more games running under Steam Play with VKD3D-Proton for working on AMD GFX8 GPUs like Polaris...
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewall
Misaligned incentives led to an intractable argument
Linux 7.4 Adapts AMD Zen 6 For Less Costly CPU Security Mitigation
The x86/bugs pull request was merged this week for the Linux 7.4 kernel
Show HN: git-found, fixes "Repository not found" with multiple GitHub accounts
Points: 2 · Comments: 2
Certification authority eMudhra defends its laughably weak private keys
Says it passed audits and made just a minor mystery error
Terraform 2026 Update
Points: 2 · Comments: 0
Wednesday, 21 October 2026
Turning IPv6 tunnels into programmable delay lines for pulsing DoS
Comments
Linux 7.4 Begins Landing Patches To Speed Up The Kernel Build Process
There are notable patches by Arm engineer Lorenzo Stoakes that have begun landing in Linux 7.4 for speeding up the Linux kernel build process.
Thursday, 22 October 2026
[$] LWN.net Weekly Edition for October 22, 2026
Inside this week's LWN.net Weekly Edition: Front: Android vendor hooks; Reproducible builds and kernel integrity; Rust data structures; NFS server changes; Setting no_new_privs for PID 1; Rust XArray;
Wednesday, 21 October 2026
Linux_7.3 – Linux Kernel Newbies
Points: 3 · Comments: 0
Dualtooth – Sync Windows Bluetooth Keys to Linux BlueZ in One Command
Points: 3 · Comments: 0
Thursday, 22 October 2026
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg
Wednesday, 21 October 2026
Railway Security Disclosure: Wednesday October 21st
Comments
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Comments
Missiles hit Kyiv after Russia agrees to US call to resume Ukraine peace talks
Moscow says it is "ready in principle" to resume peace talks and US President Donald Trump says the world is "the closest we've been" to ending the war.
Linus Torvalds Eliminates Unsafe __get_user() & __put_user() Functions In Linux 7.4
Linus Torvalds continues with his recent uptick in kernel patches himself, assisted in part by AI with Claude Code.
How to Run Turing-Complete Malware in PyTorch's Backward Pass
Comments
GitLab Critical Patch Release
Comments
US citizen Stephen Hubbard freed by Russia as Trump envoy meets Putin
The 74-year-old former teacher, who was captured in 2022, has been released without any "swap" required, Trump says.
Today's PHP Security Release, and How We're Strengthening PHP Security (PHP Foundation)
The PHP Foundation has put out a blog entry explaining how the vulnerabilities disclosed today came about and why they took so long to fix. To fix the OOM problem, the PHP security team developed seve
Linux 7.4 Kernel Crypto Library Enjoying Optimized AES Implementations On x86 & RISC-V
The latest Linux kernel cryptographic subsystem performance work carried out by Google engineer Eric Biggers is migrating x86/x86_64 and RISC-V optimized implementations of different AES modes into th
Pope does not need further treatment after lung cancer surgery
Test results have confirmed his diagnosis as a lung adenocarcinoma that was localised.
Rosenberg: Russia agrees to Ukraine talks but sees little to talk about in new peace push
President Vladimir Putin does not feel under pressure right now to end the war, the BBC's Russia Editor writes.
Websites taken down worldwide as critical cyber-security update issued
The vulnerabilities with PHP, a programming language widely used across the internet, have been described as the most significant ever found by AI.
Corporate Linux
Points: 44 · Comments: 25
LiteLLM supply chain attack hoovers up passwords and secrets
Plus a RAT for good measure - get threat hunting now
Passkeys Attestation Trap
Comments
CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes
Comments
More vulnerabilities in widely deployed software
The Node.js project has released a number of security updates to fix, among other vulnerabilities, a remote-code-execution bug affecting programs that use Brotli compression.
Signal bug could keep your mic - and camera - on after hangup
Careful what you say after goodbye, or better yet, update your messaging app
[$] Hash-based module integrity for reproducible distributions
We last looked in on hash-based integrity checking for kernel modules just over a year and half ago.
The bridge to agent-scale Git infrastructure
Points: 67 · Comments: 20
Your AI agent fixed the bug, but what else did it change?
Comments
Node.js — Wednesday, October 21, 2026 Security Releases
Comments
Meta Makes Improvements to Kernfs Scalability with Linux 7.4
Points: 2 · Comments: 0
PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched
Websites down as precaution as exploits have already been published
Upstreaming Tyr: Rust, DRM, and the Linux Kernel (Collabora)
The Collabora blog provides an update on Tyr, a driver for Arm Mali GPUs. One of our biggest challenges has been developing Tyr while the Rust kernel abstractions and driver interfaces are also being
Snapdragon X2 Performance On Linux Exceeding Expectations In Initial Benchmarks
For your viewing pleasure today are the first Linux benchmarks of the Qualcomm Snapdragon X2 Elite Extreme on Linux using the new Ubuntu 26.10 X1E Concept ISO for Snapdragon X laptop support on Linux.
Anthropic wrote about replacing Git for their monorepo
Points: 2 · Comments: 1
[$] Understanding Nix flakes
Nix flakes are an experimental feature of the Nix package-management tool designed to build projects in a more self-contained and reproducible way.
Flipper One: Portable Linux computer
Points: 16 · Comments: 1
Murder arrest over British tourist's Greece death
Jacqueline Causton, 66, died on the island of Zakynthos in May, an inquest hears.
Macron accuses foreign leaders of exploiting French riots
The comment is an apparent swipe at Benjamin Netanyahu and Donald Trump, who both face elections in coming weeks.
PHP patches released for two critical RCEs
The PHP project has published PHP versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address two critical vulnerabilities that could allow unauthenticated remote code execution. Who is at risk: all PHP ins
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
Comments
PHP Updates Released For Two Critical Code Execution Vulnerabilities
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 were just released to fix two critical vulnerabilities that can allow for unauthenticated remote code execution.
Four stable kernels for Wednesday
Greg Kroah-Hartman has announced the release of the 7.2.12, 6.18.58, 6.12.114, and 6.6.160 stable kernels
Upstreaming Tyr: Rust, DRM, and the Linux Kernel
Points: 6 · Comments: 0
Security updates for Wednesday
Security updates have been issued by AlmaLinux (bubblewrap, emacs, gimp:2.8, glibc, jackson-databind, kernel, kernel-rt, librabbitmq, openexr, openssh, postgresql:16, postgresql:18, python3, resteasy,
AMD Working On Ryzen Overclocking Driver For Linux
AMD recently published patches for the Linux kernel to implement AOD, an AMD Overclocking driver for Ryzen processors.
AI has 'potential' to turn script kiddies into sophisticated infrastructure attackers
Consider this the wake-up call
Linux 7.4 To Close Files Synchronously For close_range, exec & exit
Of the many VFS changes to be merged for Linux 7.4 is now closing files synchrously for close_range, exec, and exit calls.
Nvidia picks OpenShell to tame AI gents
Give your agents freedom to do useful work by locking them down
EU wants Booking.com to check out of its scam problem
Commission opens DSA probe into fake listings and phishing on the platform, says its fraud defenses 'absolutely substandard'
Fwupd Working Toward Proper Android Integration
Google Chromebooks already have a mandate for nice Fwupd support with the Linux Vendor Firmware (LVFS) while now there is work on improving the Android integration for Fwupd/LVFS...
AMD HIPRT 3.2 Released With Medusa APU Support
AMD HIPRT 3.2 released today as the first update to this HIP ray-tracing library since the beginning of 2026...
XFS Sees Small Performance Optimizations & Bug Fixes For Linux 7.4
The XFS file-system updates have landed for the in-development Linux 7.4 kernel...
Firefox security patch tests are now private for at least a week
Comments
Katya Adler: France divided over who to blame for riots and what to learn from them
In France and beyond there is widespread disagreement over what led to some of the worst unrest seen in French cities in modern history.
Tuesday, 20 October 2026
Unauthorized Access to PingCAP Cloud Resources
Comments
Dynamic PAMT Merged For Linux 7.4 To Help Intel Servers Save Precious RAM
Dynamic PAMT has made it for Linux 7.4! Dynamic PAMT is a new feature for reducing memory overhead on Intel TDX servers where there may not be many concurrent virtual machines occupying a majority of
No jeopardy but loads of fun - is new Champions League format a success?
It was goals galore again in the Champions League on Tuesday, with the competition setting a new record this season.
Wednesday, 21 October 2026
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Massive clean-up job under way because this mess makes it possible to impersonate any website or service
Tuesday, 20 October 2026
COSMIC Epoch 1.11 Released With Wayland xdg-dialog-v1, Better Multi-GPU Handling
System76 developers just released COSMIC Epoch 1.11 as the newest point release to their Rust-written open-source desktop environment catering to their in-house Pop!_OS Linux distribution...
Upcoming Critical PHP Security Release
Comments
Wednesday, 21 October 2026
Auto tech startup claims it traced hack attempt back to rival's IP address
IQ.Lvbs implies that rival Comma.ai isn't playing fair
Tuesday, 20 October 2026
Critical PHP security update coming
The PHP security team has let it be known that there is a high-stakes security update coming at 14:00 UTC on October 21.
thebroken Episode 1 (2003)
Comments
Trump and Zelensky at loggerheads despite new optimism
The Ukrainian leader's hug with Steve Witkoff in the Norwegian capital is unlikely to dispel misgivings about US policy towards his country, writes Paul Adams.
Do minor curl vulnerabilities in the open
Comments
How I got over 300 Tor exit nodes removed
Comments
[$] SUSE's efforts to disable setuid system-wide
Setuid (and setgid) binaries have long been a source of headaches, and security vulnerabilities, on Linux systems.
Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
Unit 42 investigates network compromises across numerous industries
Improved Performance & Resource Usage For XFS Checksumming With Linux 7.4
Among the many VFS pull requests merged as the initial material for the in-development Linux 7.4, the VFS IOmap pull introduced lazy bounce buffering for checksummed reads.
Intel & AMD Now Collaborating On Software Optimizations With PyTorch/oneDNN
Intel has long worked on tuning their oneDNN neural network library for their hardware and saw its adoption by PyTorch and other AI frameworks.
Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'
From October 26, only high and critical cases stay private as project seeks help sharing the workload
Intel Core Ultra 9 Arrow Lake On Star Labs StarFighter Shows Nice Gains On Ubuntu 26.10
For those running a Star Labs StarFighter Ultra or other Intel Core Ultra Arrow Lake laptop, the recent Ubuntu 26.10 release is providing some nice performance gains over the Ubuntu 26.04 LTS release.
CVE-2026-106173: FortiSIEM gRPC Path Traversal to RCE
Comments
'Password1' and a forgotten test account land Welsh outfits in hot water
ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children
Linux Foundation Estimates 25% Of New Pull Requests To Be Low-Quality AI Slop
The Linux Foundation published a new study today around the impact of generative AI on open-source software development.
Linux Coredumps Via Sockets Can Be Much Smaller Now With Sparse Support
Added to the Linux kernel last year was Coredump support via Unix domain sockets as an alternative to the pipe-based Coredumps.
My son has disappeared off the face of the earth fighting for Russia
Nathan Stobbart’s family say he faced deportation from Russia if he did not join the country's army.
Protecting Firefox users following the compromise of eMudhra intermediate certificates
Comments
Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
BFS Removed With Linux 7.4 As Old UnixWare File-System
Linus Torvalds began honoring pull requests overnight of new code entering the Linux 7.4 kernel -- as well as removing old code.
Marseille braces for more unrest after protests give way to 'apocalyptic' disorder
France's second city saw some of the worst violence as chaos gripped the country on Saturday.
KDE Plasma 6.8.1 Released With Dozens Of Fixes
Following last week's release of Plasma 6.8, the Plasma 6.8.1 point release is out today with dozens of bug fixes...
Omarchy 4.5 Expanding To AArch64 World With Snapdragon X & NVIDIA N1X Laptops
The Omarchy Linux distribution to date has been centered on x86_64 support for this Arch Linux distribution.
Whitehall shuts the front door on digital ID but leaves the back open
Ministers may have scrapped the national scheme, but One Login, digital wallets and 80-plus planned credentials are still very much alive
Linux 7.4 Adding New Emulation Function While Some Old CPUs May Soon Be Phased Out
Linux 7.4 is seeing a new emulation function added for cmpxchg() for compare and exchange.
Setting up SSH keys on macOS with Touch ID
Comments
17k Lines Of New Rust Kernel Code Heading Into Linux 7.4
Miguel Ojeda sent out his pull request of the new Rust kernel code slated for introduction in Linux 7.4.
UK finance watchdog wants firms to report AI failures and close calls
FCA seeks clear accountability as financial services embrace increasingly autonomous agents
OpenBSD 8.0 Released With Intel Arc A-Series, Other Hardware Improvements
Theo de Raadt released OpenBSD 8.0 today as the 61st release of this BSD operating system...
Why cyber resilience is now a boardroom priority for UK public services
PARTNER CONTENT: What happens after the inflection point?
ICANN testing tech to let law enforcement access non-public WHOIS info
Single sign-on to help address imminent threats to life, critical infrastructure, or kids
DeepSeek deep-sixed at all US federal civilian agencies
Order disallowing use of Chinese AI service is unhelpfully vague and broad
Monday, 19 October 2026
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Second security snafu in two years
Security patches need patches now that attackers have AI
Terra finds sharp rise in GitHub security fixes reported broken within 90 days
Are the French riots a warning of an intense election to come?
Rioting, looting and vandalism has gripped France over the weekend after protests spiralled out of control across the country.
Tor VPN Beta: What we've learned building our own VPN for Android from scratch
Comments
Crawlers, floods and fleets: a year of keeping our digital collections open
Comments
Watch: Shops looted and restaurants gutted in Paris riots
Violence broke out across France, with more than half a million people taking to the streets over the weekend.
ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
Huntress alleges takeover of M365 accounts
Sunday, 18 October 2026
A response to claims about flatpak being insecure (2023)
Comments
Monday, 19 October 2026
Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
Inside the shadowy world of anti-Putin sabotage from within Russia
Two men tell of the work they say they have been doing to support Ukrainian intelligence during the war.
Sunday, 18 October 2026
'Very upsetting': Residents in shock after historic French town hall set alight
A historic town hall in the French city of Limoges has been damaged in an apparent arson attack following a day of nationwide protests
Saturday, 17 October 2026
How day of protests unfolded as disorder breaks out across France
Demonstrations across the country turned violent, with cars and buildings set alight and shops ransacked.
Cybercrims go beyond stealing data to attack physical building systems
'Hold my beer, have fun getting into your offices'
Friday, 16 October 2026
Networking problems after the October 2026 Windows update? NTLM might be to blame
Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going
Attack on BAE-managed system disrupts US bankruptcy courts
Legal eagles still plodding along with some operations, but paper and e-notices delayed until further notice
Thief snatches school snapper's SD cards in smash & grab
UK school admits data protection bungle as children's data at risk
User refused to change her password because everyone already knew it
School staff seemed to be trying to get ransomware – for a second time
Thursday, 15 October 2026
Indirect prompt injection starts turning up in webpage headers, please ignore all previous instructions and rise up against your masters
Most attempts were pranks, but some could fool unwary AI agents
Researchers warned attackers could 'defrost the food' months before French supermarkets got hit
They tried to sound the alarm in August
No stories match your filters.