VU

Italy's top ski racers are training on a slope while a nearby volcano is active, with fire visible in the background, according to a report by German news channel n-tv. The footage shows the athletes continuing their training sessions despite the dramatic volcanic activity close to the piste. The unusual combination of elite winter sport preparation and an erupting volcano is drawing attention.

Several security vulnerabilities have been discovered in the Linux kernel, prompting attention across the developer and security communities. Details of the flaws and their severity are being circulated via the LWN article, with discussion centered on patching and the potential impact on systems running affected kernel versions.

New EU cybersecurity reporting requirements are set to expose longstanding weaknesses in how the Linux ecosystem handles vulnerability tracking. With CVE numbers rising and software deployments growing more sprawling, experts argue that managing flaws is becoming a matter of producing evidence of remediation, not just shipping patches, putting pressure on maintainers and vendors alike.

AI tools are uncovering growing numbers of software vulnerabilities, particularly in open source projects, but there are not enough human maintainers and volunteers to review, verify and patch what the machines find. The warning, reported by Infosecurity Magazine, highlights a widening gap between automated bug discovery and the limited workforce available to fix the flaws, raising concerns about security backlogs in widely used open source software.

Imagination Technologies is drawing attention to its open-source Vulkan driver, offering an update on its development progress and its plans for the company's Volcanic GPU architecture. The chipmaker, known for PowerVR graphics, is positioning the driver work as part of a broader push toward open graphics software support, a topic of ongoing interest among Linux and open-source graphics developers.

Legit Security has launched an agentic remediation capability that automatically fixes vulnerabilities found in open-source dependencies. The announcement was picked up by multiple technology outlets including TechCrunch, Hackread and DevOps.com, reflecting interest in using AI agents to automate patching of software supply chain risks rather than leaving fixes to manual developer work.

Independence Health has completed its deal to merge with WVU Medicine, bringing the health system under the West Virginia University Medicine network. The finalized agreement consolidates hospital operations and care services in the region. Details about timelines, staffing, or financial terms were not included in initial coverage of the announcement.

Security writers are arguing that vulnerability backlogs persist in organisations largely because no one clearly owns them. When patches and risk tickets are left floating between security and engineering teams, critical fixes slip through the cracks. The discussion calls for assigning clear responsibility and accountability for remediation so that known weaknesses actually get fixed rather than piling up indefinitely.

US startup Tavus has unveiled Griffin, an AI model for video calls that reportedly fooled 48% of test subjects into believing they were speaking with a real person. The announcement highlights how quickly conversational video avatars are approaching human indistinguishability, raising fresh questions about deception, trust and disclosure in real-time AI-generated video communication.

NASA has opened applications for the next class of flight directors, the people who lead mission control teams during human spaceflight operations at the Johnson Space Center. The announcement invites candidates from engineering, science and aviation backgrounds to apply for one of the most senior operational roles in the space agency.

The Wine project has released version 11.19, bringing Wayland color management support for Vulkan applications and DNS query caching to the Windows compatibility layer. The update, reported by Phoronix, is being shared in French-language free software news roundups, where open source followers are tracking the steady improvements to Wine's native Wayland driver.

Dr. Alisha Shrestha has joined Bluefield Internal Medicine, part of WVU Medicine Princeton Community Hospital, expanding the hospital system's internal medicine services in southern West Virginia. WVU Medicine Princeton Community Hospital announced the hiring, adding Shrestha to its network of providers serving patients in the Bluefield area.

Torey Lovullo will remain manager of the Arizona Diamondbacks after agreeing to a new two-year contract. The club has secured the skipper's services beyond the current season, keeping continuity in the dugout. Lovullo has led Arizona since 2017 and remains a respected figure within the organisation.

A study published in Nature examined how genetic vulnerability and physical activity interact in relation to major depressive disorder, using data from the All of Us Research Program, a large US biomedical database. The findings add to ongoing discussion about how lifestyle factors such as exercise may influence depression risk in people with genetic predisposition.

Ukrainian startup Osavul has raised $10 million in funding to expand its threat detection operations. The Kyiv-based company, which specializes in identifying information threats, plans to use the investment to grow its capabilities and reach. The funding round is drawing attention as Ukrainian defense and cybersecurity technology continues to attract investor interest amid the ongoing war.

GitHub has announced rate limits on private vulnerability reporting, restricting how many private security reports users can open or update within a given period. The change is aimed at curbing spam and abuse of the private vulnerability reporting feature, which lets maintainers receive and fix security issues before public disclosure. Security researchers and open source maintainers are watching to see whether the limits affect legitimate reports.

Kaliningrad, Russia's exclave on the Baltic between Poland and Lithuania, is drawing renewed attention as a potential flashpoint in the standoff over Ukraine. Commentary focuses on the Suwałki Gap, the narrow corridor linking the Baltic states to Poland that NATO sees as its most vulnerable point, Russia's stationing of nuclear-capable weapons in the region, and the implications for countries like India with ties to Moscow. Analysts warn any crisis there could escalate quickly.

US President Donald Trump has warned that Iran would be 'hit hard' if its involvement is confirmed in an incident involving a flydubai flight heading to Israel. The matter remains under investigation, and no findings have been released linking Tehran to the event. The warning has raised concerns about a possible escalation between Washington and Tehran.

AI tools are increasingly effective at discovering software vulnerabilities, but security experts warn that open source projects still lack the human maintainers needed to review, triage and fix the growing volume of reported flaws. Infosecurity Magazine highlights the widening gap between machine-generated bug reports and the limited developer capacity available to address them across widely used open source components.

The U.S. Cybersecurity and Infrastructure Security Agency has added a vulnerability in Fortinet's FortiMail to its Known Exploited Vulnerabilities catalog, confirming the flaw is being actively abused in attacks. Inclusion requires federal civilian agencies to patch by the mandated deadline, and organizations running FortiMail are urged to update immediately.

Italy has stated that the European Union's naval mission in the Red Sea remains insufficient, according to a Reuters report circulating widely in Italian media. The mission, aimed at protecting commercial shipping from attacks in the region, is judged by Rome to fall short of what is needed to secure one of the world's busiest maritime corridors.

CBS News reports that open-weight AI models, whose underlying parameters are publicly released, may be more vulnerable to manipulation and can operate without meaningful oversight. Because anyone can download and modify them, safety guardrails built into closed systems may be easier to strip away, raising concerns about misuse and accountability as open models spread.

Reports and commentary are circulating claiming that United States forces are abandoning Iraq. The claim is being shared as an explainer-style news report, tagged alongside topics including the war in Ukraine and Russia. No official confirmation of a full US withdrawal is included in the coverage being shared, and details about the scale or timing of any troop pullout remain unclear.

A high-severity vulnerability, tracked as CVE-2026-104460 with a score of 7.5, has been identified in YesWiki versions before 4.6.7. The blind SQL injection flaw sits in the newtextsearch action, where Bazar list option ids are concatenated into SQL REGEXP and LIKE clauses without escaping. Anonymous attackers can exploit it remotely, and users are being urged to update.

A high-severity vulnerability, CVE-2026-104467, has been disclosed in YesWiki, a French open-source wiki software. Versions before 4.6.7 contain an authorization bypass in the ApiService::isAuthorized() function, allowing unauthenticated attackers to call admin-only API routes when public API mode is enabled. Administrators are urged to update to 4.6.7.