LibAFL 0.15.4 has just been released 🎉

Of the 30 Contributers for this release, almost half are new faces <3

https://github.com/AFLplusplus/LibAFL/releases/tag/0.15.4

#Fuzzing #LibAFL #AFLplusplus

The open-source FFmpeg project, used by companies like Google for multimedia processing, urged Google to fund its volunteer developers. FFmpeg is overwhelmed by bugs reported by Google's AI security tools and lacks resources to fix them quickly. https://thenewstack.io/ffmpeg-to-google-fund-us-or-stop-sending-bugs/

⏫ After many many years, we upgrade our QEMU fork!

Goodby libptc, welcome libtcg!

Here you can find a summary of the improvements this brings: https://github.com/revng/revng/commit/1429b526abcc65d5cdd04d6f5608b916e4e20d1b

Moreover, we can now support Hexagon, RISC-V and Loongarch.

Is It CitrixBleed4? Well, No. Is It Good? Also, No. (Citrix NetScaler Memory Leak & RXSS CVE-2025-12101) - watchTowr Labs https://labs.watchtowr.com/is-it-citrixbleed4-well-no-is-it-good-also-no-citrix-netscalers-memory-leak-rxss-cve-2025-12101/

Our Java stacktrace fingerprinting database finally got a long overdue update. Enjoy!
https://x41-dsec.de/security/research/news/2025/11/12/x41-beanstack-update/

Best commit message: https://github.com/torvalds/linux/commit/f076ef44a44d02ed91543f820c14c2c7dff53716

This is a reminder to everyone that security is more than just memory safety. https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10

#rust #vulnerability #sudo_rs

Hackers abuse #Triofox #antivirus feature to deploy remote access tools

https://www.bleepingcomputer.com/news/security/hackers-abuse-triofox-antivirus-feature-to-deploy-remote-access-tools/

#cybersecurity #cybercrime

StreetComplete is a really fun and accessible way to contribute to OpenStreetMap from an Android device - walk around in your local neighbourhood (or anywhere really) and solve 'quests' by answering questions about the things around you!

You don't need to learn anything about mapping conventions, or infrastructure, or about the more complex mapping tools that exist for OpenStreetMap. The app will explain everything to you that you need to know, when you need to know it, and ask easily understandable questions with reference pictures for the answers.

The only setup needed is to make an OSM account and log into it from the app, so that it can upload your answers - and you can also do that at any later time, after trying out the app without an account for a while first. You can just install it and go outside right away!

The app doesn't need any cellular internet connection; it can work offline and synchronize your answers once you reach a place with eg. WiFi. It's also quite performant, and should run well even on lower-end phones. There is also a 'multiplayer' option that lets you split up in teams and each tackle different quests in the area.

https://streetcomplete.app/

#StreetComplete #OpenStreetMap

We have been trying to replace coders with some technology since at least COBOL.

https://www.commitstrip.com/en/2016/08/25/a-very-comprehensive-and-precise-spec/

#Code #Coding

Nextcloud will invest 250 million euros until 2030 in sovereign Open Source solutions and we expand our channel partner program. Interesting times ahead.
https://nextcloud.com/blog/nextcloud-community-sovereignty-for-everyone/

Anyone interested in #ReverseEngineering a pointlessly #NDA'd "bus" system that makes it harder for no valid reason to resurrect some otherwise still functional #SATCOM gear?

https://www.beamcommunications.com/document/9-manual-9522b-l-band-transceiver/file page 15

#DPLbus #DPL #Iridium #9522B #handset

I've just upgraded Turbo Intruder with a shiny new algorithm called HTTP Anomaly Rank, which automatically finds the most unusual responses in your attack! Here's a quick demo, full details in the writeup below: https://youtu.be/z92GobdN40Y

free as in use-after