Während in Deutschland alte weiße Männer den Verbrennermotor und fossile Energien mit Inbrunst und Machtmissbrauch weiter führen und die ehem-Gaskonzern-jetzt-Energieministerin fossiles russisches Gas propagiert, sagen die Chinesen mal kurz die Zukunft an. 🔥🔥🔥

China: Forscher brechen die Temperaturgrenzen von Wärmepumpen
https://winfuture.de/news,155658.html

Microsoft will finally kill obsolete cipher that has wreaked decades of havoc - RC4 which is susceptible to Kerberoasting.

https://arstechnica.com/security/2025/12/microsoft-will-finally-kill-obsolete-cipher-that-has-wreaked-decades-of-havoc/

Neuer Trend in staatlicher Spionage: anstatt teure Zeroday-Lücken zu kaufen, wird der physische Zugriff auf Geräte ausgenutzt, um Spyware zu installieren. Aktueller Fall aus Belarus: der dortige Geheimdienst nutzte die Schadsoftware seit vier Jahren. Dank Reporter Ohne Grenzen ist der Angriff endlich enttarnt worden. Hier mein aktueller Artikel dazu - für euch als Freebie. Danke @besendorf für deine Arbeit und das gute Interview!

https://www.zeit.de/digital/2025-12/belarus-spionagesoftware-handy-app-opposition?freebie=54d93229

We are very excited that our publication on previously unknown #spyware in Belarus is published today!
https://rsf.org/en/exclusive-rsf-uncovers-new-spyware-belarus

This is joint research by the Digital Security Lab from Reporters Without Borders and RESIDENT.NGO

Mozilla has a new CEO who:

- Has been at Mozilla for less than a year
- Has no prior open source experience (but well in "fintech" and "real estate")
- Has a MBA (aka "brainworm diploma")
- Is all-in on AI

That’s exactly the kind of bingo profile the whole community has been waiting for.

A privilege escalation in Dropbear (CVE-2025-14282) allows any authenticated user to run arbitrary commands as root. The vulnerability affects versions 2024.84 to 2025.88. Dropbear release 2025.89 fixes the vulnerability.

A mitigation is to run dropbear without unix socket forwarding by adding the -j option.

https://www.openwall.com/lists/oss-security/2025/12/16/2

#CVE_2025_14282 #infosec #cybersecurity

“I think I know how to use passwords securely, so passkeys are annoying and nobody should use them.” is tech-speak for, “I don’t care about the online account security of other people.”, or more succinctly, “I don’t care about other people.”

People overestimate their competence and underestimate the cost of phishing and credential stuffing. Individuals having to learn to use password management software and be vigilant against phishing is an industry failure, not a personal success.