Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)

Django's admin auto-linked URLField values without validating the scheme — a stored javascript: value rendered as a live link. Fixed in 6.0.8 and 5.2.17.

syntetisk.tech

Tagesgespräch - Wieder bricht eine KI aus: Ist die Technologie zu beherrschen? - hier anschauen

Im Tagesgespräch können Zuschauer einem kompetenten Studiogast Fragen zu einem aktuellen Thema stellen und ihre Meinung äußern. Politik, Wirtschaft, Kultur, Religion und Sport - im Tagesgespräch debattieren wir über alle gesellschaftlich wichtigen ...

ardmediathek.de

Open-source software’s archenemy TeamPCP goes back further than anyone thought

Oligo Security uncovered evidence of a long operational history, including multiple previous attacks it traced to the same attacker infrastructure and tools.

cyberscoop.com

Developers: Beware of Ad Libraries that Betray Your Users’ Location Privacy

An EFF investigation identified several advertising software development kits (SDKs) that publicly acknowledge collecting and sharing users’ location by default when embedded in apps granted location ...

eff.org

Why ad blockers are a top security and privacy defense for everyone

Ad blockers can help defend against some of the top hacks, scams, and surveillance today. Here are some of the best ad blockers that you can use.

this.weekinsecurity.com

Piloting paid memberships for the open social web!

Lab Notes 035: building monetization features for Leaflet creators, starting with paid memberships — tell us if you'd like to be the first to try, and what else you need!

lab.leaflet.pub

Just Deploy the Ad Blocker | IFIN

Enterprises sometimes shy away from free tools without support contracts. An ad blocker browser extension should not be one of them.

ifin-intel.org

Problem People or People Problems?

Why people aren't the problem and yet, they are.

layer8-half.leaflet.pub

Original post on infosec.exchange

infosec.exchange

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag, reducing MFA to a single factor.

unit42.paloaltonetworks.com

How volunteer cyber experts are helping protect rural water systems

A first-in-the-nation program is seeing promising results as it charts a path for supporting the U.S.’s most vulnerable infrastructure.

cybersecuritydive.com

The majority of corporate IT is now off premises for the first time

IT is going remote while sucking up more power. Most corporate IT is now off-premises for the first time, according to Uptime Institute, while the average rack power density has crested above 11 kW for the first time as server fleets are gradually replaced with more powerful hardware. Uptime’s Global Data Center Survey 2026 reveals how the industry is managing to adapt to challenging circumstances, with the usual evergreen concerns over rising costs plus staffing and skills shortages. The survey polls more than 800 datacenter owners and operators across multiple countries, with more than half (52 percent) in North America and Europe. Off premise dominates: Every year, Uptime asks its enterprise respondents to estimate what percentage of their IT workloads are run in-house versus in third-party facilities. For the first time, third-party sites have the larger share, accounting for 46 percent of IT workloads, compared with 44 percent residing in enterprise-owned corporate server farms. Those figures don’t add up to 100 percent, as some respondents (10 percent) say they are using IT rooms and server cabinets rather than a dedicated facility. Uptime’s experts estimate that, by 2028, the proportion of workloads in self-owned server halls will remain the same, while those running in third-party sites will expand to 48 percent, eating away at those currently based in IT rooms and server cabinets. More power: While the headlines have featured AI infrastructure pushing IT infrastructure power density to 120 kW per rack or even higher, the reality is that most datacenters and servers operate at a much lower level than that. This year, the average of the most typical rack densities now surpasses 11 kW, as a gradual ongoing shift toward higher-powered hardware was compounded by a small number of new high-density facilities with racks above 30 kW. Without those few high-density facilities skewing the average, it sits at 7.8 kW, just slightly up from 7.5 kW in 2025. The majority of facilities still do not have any racks of 30 kW or above, Uptime finds, but more respondents (24 percent) now say they have some of these, compared with 19 percent last year. The increase was mostly in the 50-plus kW ultra-high-density range, including some respondents deploying AI and GPU servers into racks configured for above 100 kW. The trend for rising rack density will continue as organizations upgrade their infrastructure with newer hardware. Updated servers boost both workload capacity and energy performance, but maximizing these benefits means a corresponding rise in overall system power, Uptime states. Refresh shortened: Some operators are also pursuing more aggressive technology refresh timelines of less than 4 years, the report claims. If true, this would be the reverse of what some hyperscalers such as Microsoft, Google and Meta have been doing in recent years, extending lifecycles out to 6 or 7 years to save on depreciation expenses. Outages: When it comes to outages, this year’s report shows improvement for the sixth year in a row, with the number of respondents who experienced an outage in the past three years down by three percentage points. But Uptime warns against complacency, noting that many of the factors behind outages, such as reduced or unstable power availability, local grid reliability, supply chain constraints, and extreme weather, are on the increase. The flip side is that the costs of any outages that do occur continue to rise. This is because organizations have become more dependent on digital infrastructure, the report says, and so outages may have more financial impact than in the past. Overall, 71 percent of survey respondents reported that their most damaging outage cost at least $100,000, compared with 57 percent a year ago. Staffing shortage: Staffing has long been an issue for datacenter operators, and this year the greatest skills gaps reported were in electrical (38 percent of respondents), junior level operations (38 percent), operations management (35 percent) and mechanical roles (34 percent). However, more than half (53 percent) of operators report difficulties finding qualified candidates for vacant roles, up from 46 percent a year ago. Finally, Uptime found that financial pressure and resource constraints continue to grow among operators. In fact, the high prices of power, staff, and equipment, particularly for AI-related infrastructure, is the primary issue. Alongside that are escalating concerns over capacity forecasting, power availability and supply chain disruptions. ®

theregister.com

Sicherheit: Hohe Gefährdung: IT-Grundschutz soll Cyberattacken abwehren

Hier finden Sie Informationen zu dem Thema „Sicherheit“. Lesen Sie jetzt „Hohe Gefährdung: IT-Grundschutz soll Cyberattacken abwehren“.

zeit.de

Hamburger Datenschutzbeauftragter: Verbot von Meta Glasses möglich

Der Hamburger Datenschutzbeauftragte Fuchs warnt vor Meta Smart Glasses: Die Brillen, die kaum von normalen Brillen zu unterscheiden sind, ermöglichen heimliches Filmen. Ein Verbot sei nicht ausgeschl...

tagesschau.de

Problem People or People Problems?

Why people aren't the problem and yet, they are.

layer8-half.leaflet.pub