World Programming Society
Write Log in
Home Events

Channels

General Discussion Web Development Backend DevOps AI Career & Hiring TypeScript Rust Python Go Cloud AWS Azure GCP C/C++ FPGA Assembly

World Programming Society · 2026 Copyright

DevOps General Discussion

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

Old and forgotten "shims" Microsoft failed to revoke have made Secure Boot bypasses simple.

Ars Technica Tech Lab Ars Technica Tech Lab · Jul 14, 2026
0
D
Read the original source
#Ai
Ars Technica Tech Lab

Publisher

Originally by Dan Goodin

0 Comments

Log in to join the conversation.

No comments yet. Be the first to share your thoughts.

More in DevOps

PowerShell over SSH in 2026: OpenSSH on Windows, Key Auth, and PowerShell 7 Remoting

PowerShell over SSH in 2026: OpenSSH on Windows, Key Auth, and PowerShell 7 Remoting

Jul 18 · 6m read

D

GitRoot

Jul 18 · 6m read

In-House LLM Serving at Netflix

In-House LLM Serving at Netflix

Jul 17 · 12m read

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Jul 17 · 4m read

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

Jul 17 · 5m read

Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities

Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities

Jul 17 · 4m read

The Protocol Wars in Factories, Nvidia's Thor Modules for Robotics and Edge AI, 'Mind of the Engineer' survey: Embedded Week Insights

The Protocol Wars in Factories, Nvidia's Thor Modules for Robotics and Edge AI, 'Mind of the Engineer' survey: Embedded Week Insights

Jul 17 · 1m read

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Jul 17 · 3m read

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

Jul 17 · 6m read

Eclipse Dataspace Components on AWS: Cost optimization strategies

Eclipse Dataspace Components on AWS: Cost optimization strategies

Jul 17 · 9m read

Eclipse Dataspace Components on AWS: Architecture patterns in production

Eclipse Dataspace Components on AWS: Architecture patterns in production

Jul 17 · 7m read

Eclipse Dataspace Components on AWS: Data sharing fundamentals

Eclipse Dataspace Components on AWS: Data sharing fundamentals

Jul 17 · 7m read

Journey to Root, Episode I: The Maglev King

Journey to Root, Episode I: The Maglev King

Jul 17 · 44m read

Agentic AI Security: Defending Against Prompt Injection and Tool Misuse

Agentic AI Security: Defending Against Prompt Injection and Tool Misuse

Jul 17 · 5m read

From intent to enforcement: Lessons from operating Kubernetes controllers at scale

From intent to enforcement: Lessons from operating Kubernetes controllers at scale

Jul 17 · 11m read

Cloud Native Infrastructure Emerges as the Foundation for Trustworthy Agentic AI

Cloud Native Infrastructure Emerges as the Foundation for Trustworthy Agentic AI

Jul 17 · 3m read

Flipkart and LitmusChaos at KubeCon + CloudNativeCon India 2026: A recap

Flipkart and LitmusChaos at KubeCon + CloudNativeCon India 2026: A recap

Jul 17 · 5m read

How Uber Builds Zone-Failure-Resilient OpenSearch Clusters

How Uber Builds Zone-Failure-Resilient OpenSearch Clusters

Jul 17 · 4m read

QCon AI Boston: Production AI Moves Beyond Prompts to Platforms, Harnesses, and Evals

QCon AI Boston: Production AI Moves Beyond Prompts to Platforms, Harnesses, and Evals

Jul 17 · 4m read

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

Jul 17 · 7m read

Data downloaded by Vercel Sandbox is now free

Data downloaded by Vercel Sandbox is now free

Jul 17 · 1m read

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

Jul 17 · 3m read

Spot birds not golf

Spot birds not golf

Jul 17 · 1m read

Runtime logs now show cache reasons

Runtime logs now show cache reasons

Jul 17 · 2m read

Optimized CDN caching and deploying of immutable static assets

Optimized CDN caching and deploying of immutable static assets

Jul 17 · 1m read

Vercel Plugin now available in Kimi Code CLI

Vercel Plugin now available in Kimi Code CLI

Jul 17 · 1m read

Q&A: How Capcom Brought Path Tracing to RE ENGINE Across PRAGMATA and Resident Evil Requiem

Q&A: How Capcom Brought Path Tracing to RE ENGINE Across PRAGMATA and Resident Evil Requiem

Jul 16 · 8m read

Remotely access Home Assistant via Tailscale for free

Remotely access Home Assistant via Tailscale for free

Jul 16 · 6m read

Announcing v1 of OpenTelemetry Go Compile-Time Instrumentation

Announcing v1 of OpenTelemetry Go Compile-Time Instrumentation

Jul 16 · 6m read

AWS Continuum to Enable Agentic Code Security for Enterprises

AWS Continuum to Enable Agentic Code Security for Enterprises

Jul 16 · 4m read

Xcode 27 runner image now in public preview

Xcode 27 runner image now in public preview

Jul 16 · 2m read

AI hasn’t shifted the bottleneck from coding to code review

AI hasn’t shifted the bottleneck from coding to code review

Jul 16 · 5m read

GoDaddy opened its registrar to AI agents. Then it had to build guardrails.

GoDaddy opened its registrar to AI agents. Then it had to build guardrails.

Jul 16 · 4m read

From the Captain’s Chair: Mohammad-Ali A’râbi

From the Captain’s Chair: Mohammad-Ali A’râbi

Jul 16 · 9m read

ObservabilityCON 2026: Register today and preview this year's agenda

ObservabilityCON 2026: Register today and preview this year's agenda

Jul 16 · 5m read

You don’t have a deployment problem. You have a validation problem.

You don’t have a deployment problem. You have a validation problem.

Jul 16 · 8m read

CNCF Strengthens Partnership with Broadcom as a Platinum Member to Advance AI-Ready Cloud Native Infrastructure

CNCF Strengthens Partnership with Broadcom as a Platinum Member to Advance AI-Ready Cloud Native Infrastructure

Jul 16 · 3m read

Why smarter AI caching sometimes makes everything slower

Why smarter AI caching sometimes makes everything slower

Jul 16 · 16m read

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

Jul 16 · 13m read

30 to 70 PRs a Day: How We Managed to Not Wreck Our Systems

30 to 70 PRs a Day: How We Managed to Not Wreck Our Systems

Jul 16 · 26m read

Prioritize your AWS Health alerts using AWS User Notifications

Prioritize your AWS Health alerts using AWS User Notifications

Jul 16 · 13m read

The Protocol Wars: The Factory Floor's Fragmentation Problem

The Protocol Wars: The Factory Floor's Fragmentation Problem

Jul 16 · 1m read

Demystifying AI Exploits: A Blueprint for AI-Assisted Vulnerability Management

Demystifying AI Exploits: A Blueprint for AI-Assisted Vulnerability Management

Jul 16 · 24m read

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

Jul 16 · 4m read

“There are no laws, only suggestions”: What AI agents do with your instructions

“There are no laws, only suggestions”: What AI agents do with your instructions

Jul 16 · 9m read

20+ Hijacked Government Websites Became
an Attack Channel

20+ Hijacked Government Websites Became
an Attack Channel

Jul 16 · 5m read

Securing AI at Enterprise Scale: The Google Kubernetes Engine Blueprint

Securing AI at Enterprise Scale: The Google Kubernetes Engine Blueprint

Jul 16 · 4m read

Developing and Deploying a Platform that the Business Understands and Developers Actually Want

Developing and Deploying a Platform that the Business Understands and Developers Actually Want

Jul 16 · 5m read

Running a self-hosted LLM in Kubernetes with vLLM

Running a self-hosted LLM in Kubernetes with vLLM

Jul 16 · 8m read

AI Can Find Bugs, But Human Knowledge Still Proves Them

AI Can Find Bugs, But Human Knowledge Still Proves Them

Jul 16 · 13m read

Forgejo v16.0 is available

Forgejo v16.0 is available

Jul 16 · 12m read

Guix: creating a package from a binary

Guix: creating a package from a binary

Jul 16 · 2m read

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

Jul 16 · 5m read

Bring modern package management to Meson's native wrap ecosystem

Bring modern package management to Meson's native wrap ecosystem

Jul 16 · 1m read

You can't bug fix your way out of the vulnpocalypse

You can't bug fix your way out of the vulnpocalypse

Jul 16 · 6m read

Unified Logs is now in open beta

Unified Logs is now in open beta

Jul 16 · 3m read

B

Reverse-engineering NVIDIA's cuda-checkpoint for faster cold starts

Jul 16 · 1m read

When a version bump breaks your build, GitLab fixes it

When a version bump breaks your build, GitLab fixes it

Jul 16 · 5m read

D

GitLab 19.2 released

Jul 16 · 15m read

Bring GitLab Duo Agent Platform to your terminal

Bring GitLab Duo Agent Platform to your terminal

Jul 16 · 4m read

GitLab Duo Security Review spots logic flaws scanners miss

GitLab Duo Security Review spots logic flaws scanners miss

Jul 16 · 4m read

Turn multi-step software delivery into agentic flows you can trust

Turn multi-step software delivery into agentic flows you can trust

Jul 16 · 5m read

Elastic and Axonius integrate to deliver unified asset intelligence for security teams

Elastic and Axonius integrate to deliver unified asset intelligence for security teams

Jul 16 · 5m read

Write utilization now available in ISR Observability

Write utilization now available in ISR Observability

Jul 16 · 1m read

Security incident disclosure — July 2026

Security incident disclosure — July 2026

Jul 16 · 5m read

Forrester Consulting: GitLab Duo Agent Platform delivers 400% ROI

Forrester Consulting: GitLab Duo Agent Platform delivers 400% ROI

Jul 16 · 4m read

xai-org/grok-build, now open source

xai-org/grok-build, now open source

Jul 15 · 3m read

Build a Multi-Camera 3D Tracking Application with NVIDIA DeepStream 9.1 Skills

Build a Multi-Camera 3D Tracking Application with NVIDIA DeepStream 9.1 Skills

Jul 15 · 11m read

D

Sheetz moves 838 stores off VMware: Broadcom created “too much uncertainty"

Jul 15 · 1m read

D

TLS Certificate Validation on Linux

Jul 15 · 9m read

OpenTelemetry Has Graduated… Now what?

OpenTelemetry Has Graduated… Now what?

Jul 15 · 6m read

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

Jul 15 · 4m read

Kubernetes won the container decade. Google’s Agent Substrate wants the next one.

Kubernetes won the container decade. Google’s Agent Substrate wants the next one.

Jul 15 · 9m read

Building Faster Cryptography with Carryless Multiplication in NVIDIA CUDA 13.3 

Building Faster Cryptography with Carryless Multiplication in NVIDIA CUDA 13.3 

Jul 15 · 8m read

Grafana Labs named a Leader again in the 2026 Gartner® Magic Quadrant™ for Observability Platforms

Grafana Labs named a Leader again in the 2026 Gartner® Magic Quadrant™ for Observability Platforms

Jul 15 · 6m read

HAMi becomes a CNCF incubating project

HAMi becomes a CNCF incubating project

Jul 15 · 6m read

Why AI apps fail in production (And how Google solved it)

Why AI apps fail in production (And how Google solved it)

Jul 15 · 5m read

OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps

OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps

Jul 15 · 6m read

How bitdrift scaled to 121 million concurrent gRPC connections on Amazon CloudFront for live telemetry sporting events

How bitdrift scaled to 121 million concurrent gRPC connections on Amazon CloudFront for live telemetry sporting events

Jul 15 · 11m read

The Risk of Exposed Cloud Functions and How to Harden

The Risk of Exposed Cloud Functions and How to Harden

Jul 15 · 11m read

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

Jul 15 · 3m read

Transforming How We Run Kafka at Honeycomb

Transforming How We Run Kafka at Honeycomb

Jul 15 · 19m read

SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.

SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.

Jul 15 · 4m read

On-prem DBaaS in 2026: Platforms, standards, and gaps

On-prem DBaaS in 2026: Platforms, standards, and gaps

Jul 15 · 6m read

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Jul 15 · 6m read

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Jul 15 · 4m read

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Jul 15 · 2m read

How Speechify serves 500,000 dynamic pages to 60 million users on Vercel

How Speechify serves 500,000 dynamic pages to 60 million users on Vercel

Jul 15 · 4m read

TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access

TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access

Jul 15 · 72m read

Vercel Connect support in GitHub Tools

Vercel Connect support in GitHub Tools

Jul 15 · 2m read

Faster, predictable project linking in the Vercel CLI

Faster, predictable project linking in the Vercel CLI

Jul 15 · 2m read

Elastic named a Leader in the 2026 Gartner® Magic Quadrant™ for Observability Platforms

Elastic named a Leader in the 2026 Gartner® Magic Quadrant™ for Observability Platforms

Jul 15 · 7m read

Vercel Workflows trace viewer now has a minimap

Vercel Workflows trace viewer now has a minimap

Jul 15 · 1m read

Making 768 servers look like 1

Making 768 servers look like 1

Jul 15 · 11m read

Infrastructure Team 2026 Q2 Recap and Q3 Plan

Infrastructure Team 2026 Q2 Recap and Q3 Plan

Jul 15 · 8m read

D

Quoting GitHub Changeling

Jul 14 · 1m read

D

You should probably check on your smart appliances

Jul 14 · 4m read

KeycloakCon Japan 2026: Navigating cloud native identity and the AI frontier

KeycloakCon Japan 2026: Navigating cloud native identity and the AI frontier

Jul 14 · 5m read

Native inotify in FreeBSD

Native inotify in FreeBSD

Jul 14 · 20m read

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Jul 14 · 7m read

Loading more…