@lewis.moe this is an insane amount of work you've done in a month. The pds is looking really good tangled.org/lewis.moe/bs...

lewis.moe/bspds-sandbox

PDS software with bells & whistles you didn’t even know you needed. will move this to its own account when ready.

tangled.org

1994-2001: US disarms Ukraine of nuclear warheads & intercontinental ballistic missiles After 9/11: Ukraine sends over 5,000 troops to a "war on another continent" to help the US. 18 die. 2014: Russia invades Ukraine. 2025: US - "It's not our war. It's a war on another continent."

Igor Sushko@igorsushko.bsky.social · last yr.

Ukraine helped the United States by deploying over 5,000 soldiers after the 9/11 attacks, despite not being in NATO. 18 Ukrainian soldiers perished. Russia refused to send any soldiers.

🥺 A fresh wall painting now decorates Kyiv’s 🇺🇦 Children’s Hospital. In July 2024, Russia launched a missile strike on children receiving dialysis & chemo. 👉 There can be no peace until Russian war criminals face justice.

🇺🇦🇺🇳 Ukrainians representative at UN Security Council: ▪️ There will never be any recognition, formal or otherwise, of Ukrainian territory temporarily occupied by Russia as Russian. Our land is not for sale. ▪️Ukraine will not accept any limits on its right to self-defense or on the size of AFU.

Privilege Escalation vulnerability in Motors, a #WordPress theme with more than 22,000 sales. This #vulnerability makes it possible for an unauthenticated attacker to change the password of any user

#cpu #fuzz

#Veeam has released security updates today to fix several Veeam Backup & Replication (VBR) flaws, including a #RCE. Tracked as #CVE-2025-23121, this security flaw was reported by security researchers at #watchTowr and #CodeWhite, and it only impacts domain-joined installations.

KB4743: Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2

veeam.com

Ubuntu 25.10's switch to sudo-rs, a Rust-based sudo, shows a profound commitment to enhancing memory safety and system security. This move reflects the growing trend of leveraging Rust. thenewstack.io/ubuntu-25-10... #Ubuntu #Ubuntu2510 #sudoRS #RustLang #MemorySafety #SecureByDesign #Security

Ubuntu 25.10 Replaces sudo With a Rust-Based Equivalent

The new sudo-rs is meant to be a near drop-in replacement for sudo, but some of the less secure aspects of sudo will not be supported.

thenewstack.io

🎉 godot-bevy v0.7.0 is out! Release with bug fixes and improvements: ✨ Node Type Markers - Better and more efficient ECS queries ⚡ Fix Timing - Component available in Startup systems 🚀 Performance improvements We also now have a #godotbevy book! 📖 #godotengine #bevyengine #rustlang #gamedev

Release v0.7.0 · dcvz/godot-bevy

What's Changed Update the README "Basic Usage" section & add simple Node2D movement example by @DragonAxe in #37 feat: add explicit configuration of transform sync mode by @dcvz in #44 feat(docs):...

github.com

Good video by Stefan Baumgartner on refactoring with Rust! youtu.be/wuBkzT_3CDU?... #rustlang

Refactoring in Rust - Stefan Baumgartner

YouTube video by RustNL

youtu.be

3. Steve Klabnik attempted to answer the question we have all been asking, “Is Rust faster than C?” steveklabnik.com/writing/is-r...

Is Rust faster than C?

Blog post: Is Rust faster than C? by Steve Klabnik

steveklabnik.com

#Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization #CVE-2025-49113

Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization [CVE-2025-49113]

A deep technical breakdown of CVE-2025-49113, a critical Roundcube vulnerability involving PHP session serialization. Learn how the bug was discovered, exploited, and responsibly disclosed with full P...

fearsoff.org

#cve-2025-4598 #cve-2025-5054

#Cisco ##vulnerability affecting Cisco IOS XE Wireless Controller Software version 17.12.03 and earlier. The issue was described as an unauthenticated arbitrary file upload, caused by the presence of a hard-coded JSON Web Token (JWT).

Cisco IOS XE WLC File Upload Vuln CVE-2025-20188

Explore how a hard-coded JWT in Cisco IOS XE WLC enables unauthenticated file upload and potential RCE—and how to mitigate it.

horizon3.ai

#vBulletin #rce #NDay

#o3 #cve-2025-37899 #smb #zeroday

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation

In this post I’ll show you how I found a zeroday vulnerability in the Linux kernel using OpenAI’s o3 model. I found the vulnerability with nothing more complicated than the o3 API &#821…

blog.exploits.club

A Chinese APT (UNC5221) is behind recent attacks exploiting an Ivanti zero-day (CVE-2025-4427) This is a known Chinese APT group that seems to be specialized in Ivanti and other Western enterprise products... they have a long list of past zero-days in their name blog.eclecticiq.com/china-nexus-...

China-Nexus Threat Actor Actively Exploiting Ivanti Endpoint Manager Mobile (CVE-2025-4428) Vulnerability

On Thursday, May 15, 2025, Ivanti disclosed two critical vulnerabilities - CVE-2025-4427 and CVE-2025-4428 - affecting Ivanti Endpoint Manager Mobile (EPMM) version 12.5.0.0 and earlier.

blog.eclecticiq.com

A new #critical #vulnerability popped up concerning samlify, a widely adopted #Node.js library for implementing #SAML 2.0 Single Sign-On.

#Motors <= 5.6.67 - Unauthenticated Privilege Escalation Via Password Update/Account Takeover #wordpress #theme

Premium WordPress 'Motors' theme vulnerable to admin takeover attacks

A critical privilege escalation vulnerability has been discovered in the premium WordPress theme Motors, which allows unauthenticated attackers to hijack administrator accounts and take complete contr...

bleepingcomputer.com

Broadcom-owned #VMware on Tuesday rolled out urgent patches for two sets of flaws that expose its flagship infrastructure software to data leakage, command execution and denial-of-service attacks.

NATO-Flagged Vulnerability Tops Latest VMware Security Patch Batch

VMware patches flaws that expose users to data leakage, command execution and denial-of-service attacks. No temporary workarounds available.

securityweek.com

A missing authentication for critical function vulnerability [CWE-306] in #FortiOS, #FortiProxy, and #FortiSwitchManager #CVE-2025-22252

#Google released updates to address 4 issues in its #Chrome web browser, including one for which it said there exists an exploit in the wild.

#Intel, #AMD and #Arm each published Patch Tuesday security advisories to inform customers about vulnerabilities found recently in their products, including ones related to newly disclosed CPU attacks.

Chipmaker Patch Tuesday: Intel, AMD, Arm Respond to New CPU Attacks

Intel, AMD and Arm each published security advisories on Patch Tuesday, including for newly disclosed CPU attacks.

securityweek.com

#Siemens, #SchneiderElectric and #PhoenixContact have released #ICS security advisories on the May 2025 Patch Tuesday.

ICS Patch Tuesday: Vulnerabilities Addressed by Siemens, Schneider, Phoenix Contact

Industrial giants Siemens, Schneider Electric and Phoenix Contact have released ICS security advisories on the May 2025 Patch Tuesday.

securityweek.com

#Zoom fixes multiple security bugs, including a #high-risk flaw. Users are urged to update to the latest version released on May 13, 2025. The updates affect both general app versions and Windows-specific builds. For anyone using Zoom, especially on Windows systems, these updates are worth attention

Zoom Fixes High-Risk Flaw in Latest Update

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

hackread.com

Fortinet released security updates to patch a critical #RCE exploited as a #zero-day targeting FortiVoice enterprise phone systems. Vulnerability tracked as #CVE-2025-32756. As the company explains, successful exploitation can allow rce via maliciously crafted HTTP requests.

Today is #Microsoft May 2025 Patch Tuesday, which includes security updates for 72 flaws, including five actively exploited and two publicly disclosed #zero-day #vulnerabilities www.tripwire.com/state-of-sec...

May 2025 Patch Tuesday Analysis

This Patch Tuesday Analysis addresses Microsoft’sMay 2025 Security Updates. FIRE is actively working on coverage for these vulnerabilities.

tripwire.com

#SCADA Schneider Electric Modicon Controllers - Successful exploitation of these vulnerabilities may risk execution of unsolicited command on the PLC, which could result in a loss of availability of the controller. www.cisa.gov/news-events/...

How many foreign intel agencies already have spyware on Hegseth’s wife or brother’s phone? Is that the device they used to access Signal? Have they been offered money? Or sex? What secrets could be used for extortion? These are much more relevant NatSec questions than how many pushups can you do.