TPM GPIO fail: How bad OEM firmware ruins Intel TPM security(mkukri.xyz)

168 points by osks 2 years ago | 105 comments

Secure Boot is broken on 200 models from 5 big device makers(arstechnica.com)

90 points by verifex 2 years ago | 54 comments

Security researcher says Microsoft built a Bitlocker backdoor, releases exploit(techspot.com)

523 points by nolok 5 months ago | 223 comments

TechSpot news article about a researcher's claim that Microsoft built a BitLocker backdoor, with a released YellowKey exploit that bypasses encryption via USB and WinRE.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)

227 points by cubefox 4 days ago | 98 comments

AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.

Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

134 points by FrasiertheLion 1 year ago | 96 comments

One-Click RCE in Asus's Preinstalled Driver Software(mrbruh.com)

490 points by MrBruh 1 year ago | 230 comments

A blog post describing a one-click remote code execution vulnerability found in ASUS's preinstalled DriverHub driver software.

Several vulnerabilities have been discovered in the Linux kernel(lwn.net)

529 points by luispa 24 days ago | 380 comments

LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.

The Lost Atomic Update on Loongson CPU(jia.je)

120 points by jiegec 1 month ago | 6 comments

A blog post investigating a hardware erratum on the Loongson LA664 CPU where an atomic instruction loses updates, causing an infinite loop while packaging normaliz for Debian.

Intel to Receive $8.5B in Grants to Build Chip Plants(nytimes.com)

325 points by ece20 2 years ago | 578 comments

New York Times article reporting Intel will receive $8.5 billion in CHIPS Act grants to build semiconductor plants, announced by President Biden in Arizona.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

Valve: HDMI Forum Continues to Block HDMI 2.1 for Linux(heise.de)

785 points by OsrsNeedsf2P 10 months ago | 437 comments

Heise news article reporting that the HDMI Forum still blocks an open-source HDMI 2.1 driver for Linux, preventing Valve and AMD from enabling it on the Steam Machine.