Author: admin

The French cybersecurity agency identified Houken, a new Chinese intrusion campaign targeting various industries in France

The Treasury said that Aeza Group has provided infrastructure services for notorious infostealer and ransomware operators

Benefits admin specialist Kelly Benefits has revealed a breach impacting over 500,000 individuals across 45 client organizations

Qantas admits that a “significant” volume of customer data may have been stolen from a contact center

A whole class of speculative execution attacks against CPUs were published in 2018. They seemed pretty catastrophic at the time. But the fixes were as well. Speculative execution was a way to speed up CPUs, and removing those enhancements resulted in significant performance drops.

Now, people are rethinking the trade-off. Ubuntu has disabled some protections, resulting in 20% performance boost.

After discussion between Intel and Canonical’s security teams, we are in agreement that Spectre no longer needs to be mitigated for the GPU at the Compute Runtime level. At this point, Spectre has been mitigated in the kernel, and a clear warning from the Compute Runtime build serves as a notification for those running modified kernels without those patches. For these reasons, we feel that Spectre mitigations in Compute Runtime no longer offer enough security impact to justify the current performance tradeoff.

I agree with this trade-off. These attacks are hard to get working, and it’s not easy to exfiltrate useful data. There are way easier ways to attack systems.

News article.

Cloudflare now blocks AI web crawlers by default, requiring permission from site owners for access

Google has patched a critical type confusion vulnerability in Chrome, the fourth zero-day fix in 2025

Proofpoint has identified similarities between the tactics of a pro-Russian cyber espionage group and a cybercriminal gang

The ICC said the new incident was the second “of its type” it has faced in recent years, relating to an espionage attack in 2023

CertiK found $2.47bn in crypto was stolen in H1 2025, largely due to two major security incidents – ByBit and Cetus