Hacker NewsMar 7, 2024
Dear Linux Kernel CNA, What Have You Done?
https://amanitasecurity.com/posts/dear-linux-kernel-cna-what-have-you-done/
#ycombinator #Linux_Kernel #CNA #CVE_Numbering_Authority #Product_manufacturing #Product_engineering #CVE_assignment_process #security_updates #software_bill_of_materials #known_vulnerabilities
Dear Linux Kernel CNA, What Have You Done ?

The Linux Kernel project’s new CVE Numbering Authority (CNA) has a large impact on product manufacturers. Explore the complexities introduced by the new CVE assignment process, the challenges of frequent updates for electronic devices, and the burden placed on organizations due to the assignment of CVEs for non-security issues.

Lindi 🚂Dec 7, 2023

Microsoft to let Windows 10 home users buy Extended Security Updates

Sounds like a good time to try out a Linux distro 🙂

https://www.bleepingcomputer.com/news/microsoft/microsoft-to-let-windows-10-home-users-buy-extended-security-updates/

#Windows10 #Windows #security_updates

Microsoft to let Windows 10 home users buy Extended Security Updates

Microsoft says that all Windows 10 customers (including home users) will be able to pay for three extra years of security updates through the company's Extended Security Updates (ESU) program after the end of support (EOS) date.

BleepingComputer
RedPacket SecurityOct 12, 2023

October Patch Tuesday Addresses Three Zero-Days - https://www.redpacketsecurity.com/october-patch-tuesday-addresses-three-zero-days/

#threatintel #Zero-Day_Vulnerabilities #Microsoft_Patch_Tuesday #Security_Updates

October Patch Tuesday Addresses Three Zero-Days - RedPacket Security

Microsoft has fixed three zero-day vulnerabilities in its latest security update round this month, all of which are being actively exploited in the wild.

RedPacket Security
RedPacket SecurityOct 5, 2023

Arm and Qualcomm Chips Hit by Multiple Zero-Day Attacks - https://www.redpacketsecurity.com/arm-and-qualcomm-chips-hit-by-multiple-zero-day-attacks/

#threatintel #Chip_Vulnerabilities #Security_Updates #Zero-day_Exploits

Arm and Qualcomm Chips Hit by Multiple Zero-Day Attacks - RedPacket Security

Qualcomm and Arm have been forced to release security updates to patch several zero-day vulnerabilities exploited in recent targeted attacks against their

RedPacket Security