Former head of #L3Harris​’s #Trenchant “offensive cyber” division admits to stealing weapons-grade exploit chain worth $35 million and then selling it for personal gain. Raises important questions about national security risks of outsourcing such weaponry. In #SBBlogwatch, we go out with a whimper:

How To Get Bare-Metal GPU Performance in Confidential VMs: thenewstack.io/how-to-get-b... via @thenewstack.io & @sjvn.bsky.social A top #NVIDIA engineer explains how you can keep your AI workloads both safe and fast using Kata Containers and Confidential Computing.

Model Context Protocol (MCP) is the 'USB-C of LLM,' and every bit as hot as AI itself. Find out why in my latest article in InformationWeek www.informationweek.com/responsible-...

AI is supposed to give humans less work and make things easier...right? Maybe not according to some new research from Snowflake that 77% say their data engineering teams' workloads are getting heavier, not lighter. venturebeat.com/data-infrast...

Just published on FOSS Force: Percona’s New CEO Peter Farkas Returns to a Company He Never Really Left fossforce.com/2025/10/perc...

One notorious center for the grotesquely evil practice of #PigButchering is #Myanmar. This week, #SpaceX is crowing about how it’s blocked 2,500 #Starlink satellite internet terminals being used by these scumbags to reach their victims. In #SBBlogwatch, we wonder what took Elon so long.

Just published on FOSS Force: All Things Open Has More in Store for 2025, Including an Added Measure of AI fossforce.com/2025/10/all-...

Usually each new Wi-Fi spec offers the promise of more speed..but speed isn't the only thing that users need. Wi-Fi 8 could be the most important networking spec in a generation. @networkworld.bsky.social www.networkworld.com/article/4073...

Europe's plan to ditch US tech giants is built on open source - and it's gaining steam www.zdnet.com/article/euro... via @zdnet.bsky.social & @sjvn.bsky.social Europe is really sick of US policies and tech companies, so they're turing to #OpenSource -based European companies.

#Microsoft​’s #Windows security update rollup is badly buggy this month. #WinRE recovery environment doesn’t work with most keyboards and mice. And a fix for a cryptography bypass bug is causing failures. Leading to concerns about the #Windows dev process. In #SBBlogwatch, we grab a Linux ISO:

People have a right to speak. They don’t have a right for anyone else to have to listen. That’s why block lists etc exist. I don’t give people the benefit of assuming good faith in the same way I wouldn’t if someone followed me down the street demanding I debate them. I’d call the cops, to be honest

Just published on FOSS Force: MX Linux 23.6 Libreto: High Performance on Legacy or Bleeding-Edge Hardware fossforce.com/2025/10/mx-l...

Enterprises expanding AI deployments are hitting an invisible performance wall. The culprit? Static speculators that can't keep up with shifting workloads. The answer would be a new type of self-adaptive system. venturebeat.com/ai/together-...

German state replaces Microsoft Exchange and Outlook with open-source email www.zdnet.com/article/germ... via @zdnet.bsky.social & @sjvn.bsky.social If European governments can dump Microsoft software and services for #Linux and #opensource software, why can't everyone?

Proximity Networking: Essential Wireless Standards Sharing data wirelessly over a relatively short range is accomplished with a set of technologies called proximity networking. Want to come up to speed on RFID, NFC, Bluetooth, and Qi? Start here. www.aptiv.com/en/insights/...

Anything any #Android app can display is vulnerable to #Pixnapping attack—including #2FA codes. “It’s like Rowhammer, but for the screen,” quips one wag. Google thought it had already fixed the previously undisclosed flaw. But the group’s demo says not. In #SBBlogwatch, we blur the pels:

My latest venture into travel writing, a little guide on how to pack light. Seriously light. I obsess over optimizing everything I carry with me, and here are a few of my favorites! www.theguardian.com/thefilter-us...

Just published on FOSS Force: California Slaps Tractor Supply with Record $1.35M Privacy Fine fossforce.com/2025/10/cali...

How to switch your Windows 10 PC to Linux Mint - for free zdnet.com/article/how-... via @zdnet.bsky.social & @sjvn.bsky.social There’s still time to switch from #Windows10 to #Linux. Just saying!

#Redis (Remote Dictionary Server) and its open source fork #Valkey share a scary flaw that can give an attacker full RCE. It’s been assigned a max CVSS score of 10.0—you don’t often see that. #Redis shouldn’t normally be exposed to the internet, but it often is. In #SBBlogwatch, we descend a layer:

15 yrs later...OpenStack continues to improve ->Security improvements and confidential computing enhancements are also part of OpenStack 2025.2, known as Flamingo. www.networkworld.com/article/4066... @networkworld.bsky.social

Greg Kroah-Hartman explains the Cyber Resilience Act for open source developers theregister.com/2025/09/30/c... via @theregister.com & @sjvn.bsky.social Greg K-H explains what #opensource developers need to know about the CRA, but why they don't need to be worried sick about it.

Just published on FOSS Force: ElementaryOS 8.0.2: Not a Grand Slam, but a Solid Base Hit fossforce.com/2025/10/elem...

#Japan​’s biggest producer of beer is still not producing any beer this week. #Asahi Group Holdings shut down production Monday after detecting a cyber intruder. And today it’s confirmed fears of #ransomware. In #SBBlogwatch, we dry out. securityboulevard.com/2025/10/japa...

New research released today from Databricks shows how its GEPA (Generative Evolutionary Prompt Adaptation) technique improves prompt optimization by an order of magnitude. venturebeat.com/ai/the-usd10...

Just published on FOSS Force: TuxCare Expands Full Enterprise Support to Include Rocky Linux 9.6 fossforce.com/2025/09/tuxc...

OpenNvidia could become the #AI generation's WinTel theregister.com/2025/09/29/n... via @theregister.com & @sjvn.bsky.social I never liked WinTel much, and the OpenAI/Nvidia combo, OpenNvidia, isn't to my taste either.

The #Akira gang have found a way to override the multifactor authentication in #SonicWall SSL VPN appliances. These scrotes appear to be able to move laterally from the VPN boxes to deploy #ransomware. It’s worrying that they’ve broken SonicWall’s #2FA. In #SBBlogwatch, we hear customers’ anger:

Just published on FOSS Force: ASF Retires Indigenous Imagery–But Keeps ‘Apache’ Name for Now fossforce.com/2025/09/asf-...

Detangling SBOM, CVE, and Regulatory Mandates It is tempting to include #CVE references in an #SBOM because, after all, that is what is in the inventory today — but adding dynamic content makes the entire SBOM dynamic. www.windriver.com/blog/Detangl...

You can get Nvidia's CUDA on three popular enterprise Linux distros now - why it matters zdnet.com/article/you-... via @zdnet.bsky.social & @sjvn.bsky.social You can now get the #NVIDIA CUDA #AI Toolkit packed and ready to go on Rocky Linux, SUSE Linux, and Ubuntu.

If you dispose of your old corporate laptops without making sure – really sure – that their drives are erased, you could be liable for millions of dollars in fines or legal damages if sensitive data falls into the wrong hands. www.theregister.com/2025/09/14/d...

Sure you can do QA for AI code inside of AI tools, but do you trust it? There are a lot of tools for doing AI code review, including CodeRabbit. How do you choose and figure out what's best? venturebeat.com/ai/with-vibe...

Iconic British brand warns it would stay stalled for longer. Loose confederation of threat actors, now calling itself Scattered Lapsus$ Hunters, claims it hacked the big car firm—via tedious Telegram trolling. Yes, it’s those Salesforce vish kiddies again. In #SBBlogwatch, we drive the point home.

Why Techmeme is still every tech pro's go-to news source after 20 years zdnet.com/article/why-... via @zdnet.bsky.social & @sjvn.bsky.social Techmeme, the old-school tech news aggregator site, turns 20 and looks good for 20 more years.

Just published on FOSS Force: Linux Lite 7.6: Plenty for Windows Refugees, But Too Dumbed Down for Comfort fossforce.com/2025/09/linu...

U.S. sen #RonWyden demanding #FTC do something about #Microsoft already. Says Satya’s crew to blame for some awful #ransomware attacks, via vuln 10+ years old. #Kerberoasting exploit affects #ActiveDirectory installs not configured to modern specs. In #SBBlogwatch, we wonder where to point fingers:

Care about the way EVs are made? Busbars — solid metal conductors — are emerging as the technology of choice for EV charging harnesses and other high-voltage connections within a vehicle. www.aptiv.com/en/insights/...

This? This is it? Instead of being broken up, Google gets a slap on the wrist. computerworld.com/article/4052... via @computerworld.com & @sjvn.bsky.social Going forward, it's business as usual for #Google as the company gets to continue its search monopoly after a slap on the wrist.

Airflow isn't the only open-source data orchestration platform...Kestra 1.0 just dropped and it's taking a declarative approach at changing enterprise data workflows. venturebeat.com/data-infrast...

Just published on FOSS Force: Margaret Dawson Named CMO at SUSE, Bringing Cloud and Linux Expertise fossforce.com/2025/09/marg...

Pair of ethical hackers discover “catastrophic” vulns in code running #BurgerKing, etc. sites. Owner quickly fixed flaws, but then #Cyble issued sus-seeming #DMCA takedown. Tale as old as time: Poor, unfortunate $8½ billion corp vs. evil, vindictive, millennial hackers. In #SBBlogwatch, we rule:

Just published on FOSS Force: After Four Months, Deobald’s Out as GNOME’s Executive Director fossforce.com/2025/09/afte...

Space is the 'final' frontier for data centers... “Through the years, a limiting resource for the research community on the space station was the transfer of data and near real-time data analysis..." www.datacenterknowledge.com/next-gen-dat...

AI web crawlers are destroying websites in their never-ending hunger for any and all content theregister.com/2025/08/29/a... via @theregister.com & @sjvn.bsky.social #AI web crawlers are clawing websites to death in their never-ending data hunt.

Four weeks ago, #Google admitted it was hacked—via #vishing. Sadly, this sparked a journalistic game of Telephone: Over the space of four weeks, it became, “2.5 billion #Gmail users hacked!!1!” Sigh. “This is entirely false,” complains Google. In #SBBlogwatch, we bait for clicks during dog days.

spacenews.com/industry-wary-of-uk-space-agency-shake-up/… Folding @ukspaceagency.bsky.social into the Department for Science, Innovation and Technology could streamline UK'#spacece policy but risks undermining transparency and distracting from upcoming European talks about space program funding.

Just published on FOSS Force: Chase Summer Down Under: Speak at ‘Everything Open’ 2026 fossforce.com/2025/08/chas...

No, Grok 2.5 has not been open-sourced. Here's how you can tell zdnet.com/article/no-g... via @zdnet.bsky.social & @sjvn.bsky.social The new Grok #AI licence isn't even close to being #opensource.

A subsidiary of Zurich Insurance (SIX:ZURN) admitted to a huge leak: More than one million customers’ data. #FarmersGroup is the latest corporation ’fessing up to its data going AWOL via #ScatteredSpider #Salesforce vishing. In #SBBlogwatch, we wonder what their Swiss masters will think: