Security updates for Monday

https://lwn.net/Articles/1065419/ #LWN #Linux #security

if you are looking for a messenger to use with the kids, take a look at #ArcaneChat

no SIM card needed, no phone number required for registration, easy setup, just set a name

kids can NOT be discovered by strangers

No public groups or channels, kids can NOT discover inappropriate content

just the family chat

#kidsonlinesafety #onlinesafetyforkids #kids #family #chat #messenger #privacy #security

[$] The many failures leading to the LiteLLM compromise

LiteLLM is a gateway library providing access to a number of large language models (LLMs); it is popular and widely used. On March 24, the word went out that the version of LiteLL [...]

https://lwn.net/Articles/1064693/ #LWN #Linux #security #Python #Git

The telnyx packages on PyPI have been compromised

https://lwn.net/Articles/1065059/ #LWN #Linux #security

Security updates for Friday

https://lwn.net/Articles/1065015/ #LWN #Linux #security

Security updates for Thursday

https://lwn.net/Articles/1064761/ #LWN #Linux #security

Glasses with built-in cameras are being used to secretly record women and post videos (without consent) online.
The not so nice use of #SmartGlasses

#privacy #security #women #safety #harassment #technnology

https://www.cbc.ca/radio/thecurrent/meta-glasses-covert-recording-9.7139927

[$] Collaboration for battling security incidents

The keynote for Sun Security Con 2026 (SunSecCon) was given by Farzan Karimi on how incident handling can go awry because of a lack of collaboration between the "good guys"—which s [...]

https://lwn.net/Articles/1063459/ #LWN #Linux #security #Android

Setting up a Tor Relay at National Taiwan Normal University (Tor Blog)

https://lwn.net/Articles/1064671/ #LWN #Linux #security

Security updates for Wednesday

https://lwn.net/Articles/1064634/ #LWN #Linux #security

"The FCC notes that miscreants have exploited security flaws in routers to disrupt networks or steal intellectual property, and routers are also implicated in the Volt, Flax, and Salt Typhoon cyberattacks.

There is an element of hypocrisy in all this because American intelligence agencies were previously caught intercepting Cisco-made routers on their way to customers and updating their firmware to deploy espionage tools."

#Security

https://www.theregister.com/2026/03/24/fcc_foreign_routers/?

Heute: eBPF und Seccomp 🧑‍💻

#Linux #security

Alt...

Screenshot of C code with BPF Macros

Learned _a lot_ about namespaces and the corresponding Linux syscalls today 😵‍💫🤯

#Linux #namespaces security #training

LiteLLM on PyPI is compromised

https://lwn.net/Articles/1064479/ #LWN #Linux #security

Security updates for Tuesday

https://lwn.net/Articles/1064474/ #LWN #Linux #security

Instead of handing government contracts to predatory Big Tech, the UK should ensure we have control of our digital infrastructure.

Even secure systems are fragile if a foreign company or power can pull the plug.

Sign our petition for a digital sovereignty strategy that priorities UK open source ⬇️

https://you.38degrees.org.uk/petitions/stop-trump-s-kill-switch-secure-our-digital-sovereignty

#DigitalSovereignty #palantir #bigtech #security #ukpolitics #ukpol

The UK’s reliance on US Big Tech is a national security issue ⚠️

But the UK is giving the controversial spyware company Palantir more contracts and more access to our data.

We're increasingly vulnerable to companies that lock us in to proprietary systems, creating dependency not independence.

https://www.theguardian.com/technology/2026/mar/22/palantir-extends-reach-into-british-state-as-it-gets-access-to-sensitive-fca-data

#DigitalSovereignty #palantir #bigtech #security #ukpolitics #ukpol

Security updates for Monday

https://lwn.net/Articles/1064298/ #LWN #Linux #security

When was the last time you checked for a firmware update for your networking hardware? Is your router running up to date software?

#Security

H&R Block tax software installs a TLS root certificate with bundled private key https://lobste.rs/s/d5nvf5 #security
https://news.ycombinator.com/item?id=47457162

Security updates for Friday

https://lwn.net/Articles/1063990/ #LWN #Linux #security

Pledge changes in 7.9-beta https://www.undeadly.org/cgi?action=article;sid=20260320085305 #openbsd #pledge #79beta #security #development #programming #ports #packages

VPNs help people to stay private and safe online.

The UK government clearly understands this in their use of the technology to the tune of £millions.

So they must pull back from attempts to age gate VPNs – a measure that will deter people from using a core cybersecurity tool.

Sign and share our petition ⬇️

https://action.openrightsgroup.org/tell-government-protect-vpn-use-uk

#vpn #cybersecurity #privacy #security #ukpolitics #ukpol

The UK government's use of VPNs "demonstrates how important these tools are for cybersecurity across the modern Internet."

Restricting them creates uncertainty that "could undermine the UK’s reputation as a stable and credible place for digital businesses and security innovation."

🗣️ ORG's @JamesBaker

https://www.techradar.com/vpn/vpn-privacy-security/investigation-uk-spends-millions-on-vpns-as-government-weighs-ban-for-children

#vpn #cybersecurity #privacy #security #ukpolitics #ukpol

Security updates for Thursday

https://lwn.net/Articles/1063659/ #LWN #Linux #security

New #Synology #DSM73 7.3.2-86009 UP3 security update is here following UP2 from a few days ago.

#selfhosting #selfhosted #homelab #security

It's not often you see a CVE perfect 10.

Anyone with a #Ubiquiti #Unifi network needs to update their Network controller immediately.

#SysAdmin #HomeLab #MastoAdmin #security #cyberSecurity

https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b

Local-privilege escalation in snapd

https://lwn.net/Articles/1063453/ #LWN #Linux #security #systemd

… AND TOP U.S. NATIONAL #SECURITY OFFICIALS TO BE PRESSED ON #IRAN: Top U.S. national security officials will attend a series of congressional hearings on Wednesday and Thursday and will be pressed to talk about the #war in #Iran, including the alleged U.S. strike on a girls’ school in Iran that killed. https://apnews.com/article/fbi-iran-war-congress-gabbard-kash-patel-54efeb2ec50a7d31421dc1c36ea4ab5b

Here's a #security question that's been bugging me for a few weeks now:

I'm a professor and there are #Windows PCs in the classrooms. Login in a controlled domain, users have no admin perms etc.

Sometimes I #ssh from these machines to my #Linux box at my office to show some numerical stuff to the class.

Which security practice is more reasonable? Keep a (passworded) key file in the windows machines and risk an (unlikely) extraction or login with a password and risk keylogging? #secops

Security updates for Wednesday

https://lwn.net/Articles/1063446/ #LWN #Linux #security

We’ve just published the first monthly report for our Cyber Resilience Act Readiness project, part of our 2026 effort to prepare the FreeBSD community for the European Union’s landmark cybersecurity regulation.

This update provides a transparent look at our progress across key workstreams, including security and vulnerability handling, SBOM tooling, public documentation, and community engagement.

Read the report:
https://github.com/FreeBSDFoundation/all-projects/blob/main/Cyber%20Resilience%20Act%20Readiness/monthly-updates/2026-02.md

#FreeBSD #OpenSource #Security #CyberResilienceAct #CRA

Ever wanted to De-Google or De-Apple your life but don’t know where to start? Or did you just want to lessen the dependence on big tech? You can read this lengthy all-in-one article I wrote to move everything from email, web browser and even operating systems it’s all covered.

Boosts and feedback appreciated
#linux #foss #email #privacy
#security

https://world.hey.com/justincrozer/de-google-and-de-apple-your-life-b5c36782

Age verification isn't sage verification when it's inside operating systems.

#FreeSoftware #Opensource #California #privacy #security #Linux

https://www.theregister.com/2026/03/16/opinon_column_age_verification/

Last week, the Nerve revealed that people working at MoD consider the US spy-tech giant is posing “a national #security #threat to the UK”

Senior systems engineer told said ministers are “missing the realities of data scraping, of aggregation, & the fact that Palantir is building its own rich picture of our nation that they can use for their own ends”

https://goodlawproject.org/duncan-mccann-the-dangers-from-palantirs-uk-data-grab-are-already-here/?utm_medium=mastodon_fediverse

#Surveillance #SurveillanceCapitalism #StarmerOut #ToxicLabour #ToxicTories #ToxicReform #privacy #DemocracyNOW

[2/2]

Security updates for Tuesday

https://lwn.net/Articles/1063248/ #LWN #Linux #security

For those with more than a passing interest in Information Systems security (OK not everyone🤣) , this might prove to be interesting. Although as commented,

’build the governance first, get the key parties committed, define the trust roots, enforce the rules – is precisely the kind of process that works in Switzerland and struggles almost everywhere else.’

https://www.theregister.com/2026/03/17/switzerland_bgp_alternative/

#IT #Security #FaultTolerance #ETH #Switzerland