security

Security-Focused Parrot OS 7.4 Released With Linux Kernel 7.1, AnonSurf 6.0

Parrot OS 7.4 rolls out with Linux kernel 7.1, AnonSurf 6.0, refreshed security tools, updated Raspberry Pi images, and package improvements.

Cloudflare is building a free, public Certificate Authority with ACME support to add more choice and resilience to the TLS ecosystem.

Researchers reveal Branch Target Reuse, a new Spectre-v2 attack that exploits stale branch predictions to leak arbitrary Linux kernel memory.

OpenSSL 4.0.3 arrives as a security-focused update, addressing multiple vulnerabilities, including a flaw rated High severity.

CrowdSec 1.8 introduces WAF bot detection with browser challenges, native Kubernetes log acquisition, HTTP helpers, and numerous fixes.

OpenSSH 10.5 ships with several security fixes, as developers say growing AI-assisted vulnerability research is prompting more frequent releases.

ClamAV 1.5.4 is now available with fixes for eight CVEs affecting ZIP, PDF, Mach-O, XAR, UnRAR, PE processing, and other components.

The Arch Linux team has suspended package adoption in the AUR while it investigates malicious adoptions and follow-up commits.

GNOME will shorten its vulnerability disclosure deadline to 30 days starting August 1, citing the growing number of AI-generated security reports.

OpenSSH 10.4 is now available with fixes for sftp, scp, and sshd, plus experimental support for ML-DSA 44 and Ed25519 composite signatures.