File number XZ unsolved:
In the last few days, we were very lucky to have just avoided what was probably the biggest fiasco in the history of the Internet ...
heise.de/blog/Aktenzeichen-XZ-ungeloest-9678531.html
Story Details
| Last Updated | |
| Total Articles | 2 |
Main Topics
Similar to This
Previous
Code-execution flaw in UEFI firmware affects most servers on planet Earth: Critical flaw in EDK2 allows attackers to execute code early in the boot process.
arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/
Key FactsEDK2 Flaw Threatens Network-Booting Systems
1 days ago · Reading time: ~45 sec.
Summary created with AI assistance · Source: arstechnica.com
Summary created with AI assistance · Source: arstechnica.com
- The PXE-Base Code driver contains a 16-year-old buffer overflow that can write ICMP data beyond its 504-byte field.
- Attackers need access to a local network and must act during PXE boot; the flaw has not been shown to provide initial network access.
- Affected systems use EDK2 with PXE network boot enabled; devices that boot only from drives are not affected.
- Affected organizations should seek guidance from their firmware maker and consider temporarily disabling network boot if possible.
An attacker intent on compromising a nearby endpoint or server could use this bug to hijack program flow at a point where the boot process still has access to sensitive components, like the endpoint’s TPM. This could be used to break disk encryption for cases where an attacker has short-term network access (and it would be even easier in a theft scenario).— HD Moore, creator of Metasploit and chief research officer at security firm Dragos, discussing the potential consequences of the UEFI vulnerability.
github.com Oct 27
GitHub - OpenSenseNova/SenseNova-6.8-Code2Video: The first open-source model for code-driven video creation.
github.com/OpenSenseNova/SenseNova-6.8-Code2Video
Denmark gives up on replacing Microsoft Office, for now: Early reports had the whole ministry ditching Microsoft Office by the end of 2025 ...
techspot.com/news/114327-denmark-gives-up-replacing-microsoft-office-now.html
Filee: Free open-source file converter for Windows, macOS, and Linux: Anyone who occasionally needs to convert files to a different format might use online ...
stadt-bremerhaven.de/filee-kostenloser-open-source-dateikonverter-fuer-windows-macos-und-linux/
Sill: Free open-source app streams your Mac to iPhone and iPad: Anyone who wants to quickly transfer a single window or even the entire desktop from their Mac to ...
stadt-bremerhaven.de/sill-kostenlose-open-source-app-streamt-den-mac-aufs-iphone-und-ipad/
Tolaria: New open-source note-taking app relies on Markdown, Git, and AI agents: Luca Rossi hat mit Tolaria für macOS, Windows und Linux eine Notiz-App an den ...
stadt-bremerhaven.de/tolaria-neue-open-source-notiz-app-setzt-auf-markdown-git-und-ki-agenten/
Battlefield 2: Fan project OpenBF2 goes open source: Nach mehr als 20 Jahren erhält Battlefield 2 eine neue Chance dank seiner Fans. Ein Projekt hat den ...
pcgameshardware.de/Battlefield-2-Spiel-18697/News/OpenBF2-jetzt-Open-Source-1557600/
Open Source in Public Administration: The Winners Have Been Announced: The open-source competition for public administration has concluded. XMAS, F13, KoliBri ...
heise.de/news/Wenn-Behoerden-Software-teilen-Die-Gewinner-des-Open-Source-Wettbewerbs-11496804.html
dlvr.it Oct 23
OpinionTorvalds: AI is fine for competent devs, but spare us the 'drive-by' patches: Kernel maintainers stop asking who used AI, as long as the code is good
theregister.com/columnists/2026/10/23/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches/5304357
Sonora: Open-source controller for Sonos brings S1 and S2 to the browser: Anyone who uses Sonos speakers and has been annoyed by the official desktop apps and ...
stadt-bremerhaven.de/sonora-open-source-controller-fuer-sonos-bringt-s1-und-s2-in-den-browser/
WIRED Oct 22
Hugging Face’s New AI Biology Model Lets You Chat With DNA: The new open-source model speaks the language of DNA and can help researchers understand the effects ...
wired.com/story/hugging-face-new-ai-biology-model-chat-with-dna/
ReactOS reaches major milestone with NTFS install support: ReactOS gains NTFS install support with new driver.
arstechnica.com/information-technology/2026/10/reactos-reaches-major-milestone-with-ntfs-install-support/
Global IT security gap: More open-source funding is the only solution: A long-undiscovered programming error has crippled a large part of the internet ...
echo-online.de/politik/politik-weltweit/it-sicherheit-mehr-open-source-foerderung-ist-einzige-loesung-6572776
German Microsoft alternative: Demand has overwhelmed Opendesk - | Golem.de: Zendis can't complain about the demand for its Office alternative Opendesk - | ...
golem.de/news/deutsche-microsoft-alternative-nachfrage-hat-opendesk-ueberrumpelt-2610-214235.html
Linux 7.3 is here: Faster Ext4 and Btrfs, GPU boost and much more.: Linux 7.3 steht offiziell bereit. Das Kernel-Update bringt zahlreiche Neuerungen und ...
winfuture.de/news,162037.html
MacPacker: Free open-source archive manager for macOS: The built-in archiving program of macOS has basically been doing the same simple job for years: ...
stadt-bremerhaven.de/macpacker-kostenloser-open-source-archiv-manager-fuer-macos/
Old iPod in a drawer? This open-source tinkering kit gives it new features: New life for iconic music players: An open-source project brings modern technology ...
t3n.de/news/sprout-pi-open-source-bastelkit-ipod-1768521/
Open Contexts: Free open-source window switcher for macOS: Anyone who works with many open windows on macOS might be familiar with the problem of the CMD + Tab ...
stadt-bremerhaven.de/open-contexts-kostenloser-open-source-fensterwechsler-fuer-macos/
Alpamayo: Volvo relies on Nvidia's open-source driving model - | Golem.de: Nvidia and Volvo want to collaborate more closely: Future Volvos will come with ...
golem.de/news/alpamayo-volvo-setzt-auf-nvidias-open-source-fahrmodell-2610-214180.html
Apple Watch with Android? This open-source app now makes it possible - | but there's a catch
t3n.de/news/apple-watch-android-open-source-app-1768328/
VirtualBuddy 2.2: Open-source virtualization tool brings save and resume functionality
stadt-bremerhaven.de/virtualbuddy-2-2-open-source-virtualisierer-bringt-save-und-resume/
Next