📣 We're launching the OpenSSF Ambassador Program!
Applications are now open on a rolling basis. Help us create a future where software is universally trusted and secure.
Learn more: https://openssf.org/blog/2026/03/23/introducing-the-openssf-ambassador-program/
#AgenticAI is moving fast -- but is it secure? 🤖🔐
📅 Join us for an OpenSSF Tech Talk on the practical realities of securing agentic systems on March 17, 1PM ET!
Hear from experts from Microsoft, Canonical, TestifySec, and Thread AI!
Hackers rejoice!
We are releasing the Phrack 71 PDF for you today!
Don't forget this year is Phrack's 40th anniversary release! Send in your contribution and be part of this historical issue!
The CFP is still open, you can find it and the PDF link at https://phrack.org
It looks like someone uploaded a 98 GB snapshot of CDC datasets as of January 28, 2025 to @internetarchive
https://archive.org/details/20250128-cdc-datasets
Edit: this post originally indicated that it looked like the CDC uploaded the data, but we don't really know who did it.
An archive of all CDC datasets uploaded to https://data.cdc.gov/browse before January 28th, 2025. Excludes corrupt datasets and data not publicly accessible.
Hang on now. How did they get this Juniper backdoor installed??
https://www.theregister.com/2025/01/25/mysterious_backdoor_juniper_routers/
Slick C2 coding tho.
Policies aimed at fostering digital government processes are gaining traction in Latin America, at local and regional levels. While these initiatives can streamline access to public services, it can also make them less accessible, less clear, and put people's fundamental rights at risk. As we move...
People ask me why I use asdf.vm, so I wrote a quick tutorial for curious friends on why and how to use it effectively. Let me know what y'all think 💬 !
https://jdsalaro.com/tutorial/asdf-single-package-manager-multiple-dev-environments
#programming #python #ruby #golang #nodejs #javascript #software #asdf
Regarding the #XZ Utils #backdoor, some are looking for culpability in #FOSS, but a point we should echo louder is that although FOSS _might_ have delivered on its weaknesses it also, and most importantly, delivered on its strengths.
Yes, there was an element of luck in the discovery of #CVE-20240-3094, but it is undeniable source code availability and other FOSS customs tipped the scale in the community’s favor.
I've put some of my thoughts on this matter over at https://jdsalaro.com/note/xz-liblzma-linux-backdoor-foss-pitfalls-strengths
OpenSSF
Phrack
Ed Summers
Bill
Electronic Frontier Foundation
Amethyst Basilisk
