Windows changes its signing certificate. Hard-coded trust checks are the risk
Production PCA 2011 expires on 19 October. Microsoft’s guidance targets software that assumes one certificate identity wil...
Ideas. People. A brighter tomorrow.
Security
39 stories
Android verification is live in four countries. Here is its actual scope
The initial protections apply to participating stores on certified devices. Italy is outside that first group, and the adv...
The DNS root has a new signing key. The transition is not over
KSK-2024 is active after the October 11 switch. Operators still need to verify trust anchors, and retirement of the previo...
DNA Shield puts molecular storage to a narrowly defined job
Biomemory’s early-access service targets small, irreplaceable records kept offline. Long-lived molecules still need custod...
Windows 11 update can block Smart App Control from being turned back on
Microsoft has published a targeted workaround. Systems where the protection is already enabled remain unaffected, and 24H2...
Exchange mail queues can stall after October’s Windows Server updates
Microsoft traces the instability to an operating-system limit and offers a mitigation. A successful reboot alone does not...
Ubuntu 26.10 arrives with local dictation and a nine-month support window
Myna begins as an optional preview; the release also changes foundational software and documents a limitation for encrypte...
Anthropic’s AI replication study puts smart-device security back in focus
Controlled experiments show progress on parts of a replication chain, but the study does not demonstrate an autonomous sma...
Drupal's critical Field UI flaw makes the whole site configuration matter
Contributed modules and custom code can expose vulnerable core functionality. The advisory identifies fixed branches and a...