cybersecurity
"If compromised keys were stolen, and F5 hasn’t ruled that out, malicious software updates signed by ‘F5’ could be indistinguishable from the real thing."
Three 0days and a pre-auth RCE (CVSS 9.8) in Windows Server Update Service that deserves urgent attention
Updated at 2:26 p.m. on October 15, 2025 to remove an incorrect reference by Chris Wyosopal to kernel structs and verifier hooks in the presentation example code. In August, a relatively unknown security researcher named Agostino “Van1sh” Panico gave a talk at hacking conference Defcon. The 45-slide deck
"inventories, hosts, Ansible playbooks, OpenShift install blueprints, CI/CD runners, VPN profiles, Quay/registry configs, Vault integrations, backups"
No password needed to gain access to key component of EBS thanks to new bug
New cloud hacking competition comes with strict IP rules and copycat claims.
UK government asks for another back door, to a collective groan from infosec community.
Existing CISO stays on as his deputy.