VU

Several security vulnerabilities have been discovered in the Linux kernel, prompting attention from developers and system administrators. Details on affected versions, severity, and available patches are being circulated, and maintainers are expected to issue fixes. Users running Linux systems are advised to follow distribution security updates and apply patches as they become available.

A draft EU law known as the KIDS Act is generating wide discussion, with commentators pointing to an article by Stefan Wintermeyer published on Heise Online. The debate touches on the technical limits of proposed protections, with one argument being that no network protocol can prevent someone from simply photographing a screen with a second device. Critics are weighing whether the legislation can achieve its stated child-safety goals.

AI tools are uncovering software vulnerabilities faster than the open source community can address them, according to reporting by Infosecurity Magazine. While automated discovery has scaled up sharply, the number of maintainers available to review, patch and ship fixes has not kept pace, leaving a growing backlog of security flaws in widely used open source projects.

Imagination Technologies is promoting its open-source Vulkan graphics driver work and outlining plans tied to its Volcanic GPU architecture. The company's engagement with open-source driver development is being covered on Linux and graphics software news outlets, drawing interest from developers watching GPU vendor support for open drivers expand beyond AMD, Intel and Arm Mali.

NASA has opened applications for the next class of flight directors, the people who lead mission control teams during human spaceflight operations at the Johnson Space Center. The announcement invites candidates from engineering, science and aviation backgrounds to apply for one of the most senior operational roles in the space agency.

Legit Security has launched an agentic remediation capability that automatically fixes vulnerabilities found in open-source dependencies. The announcement was picked up by multiple technology outlets including TechCrunch, Hackread and DevOps.com, reflecting interest in using AI agents to automate patching of software supply chain risks rather than leaving fixes to manual developer work.

Security writers are arguing that vulnerability backlogs persist in organisations largely because no one clearly owns them. When patches and risk tickets are left floating between security and engineering teams, critical fixes slip through the cracks. The discussion calls for assigning clear responsibility and accountability for remediation so that known weaknesses actually get fixed rather than piling up indefinitely.

Torey Lovullo will remain manager of the Arizona Diamondbacks after agreeing to a new two-year contract. The club has secured the skipper's services beyond the current season, keeping continuity in the dugout. Lovullo has led Arizona since 2017 and remains a respected figure within the organisation.

Ukrainian startup Osavul has raised $10 million in funding to expand its threat detection operations. The Kyiv-based company, which specializes in identifying information threats, plans to use the investment to grow its capabilities and reach. The funding round is drawing attention as Ukrainian defense and cybersecurity technology continues to attract investor interest amid the ongoing war.

Independence Health has finalized a deal to merge with WVU Medicine, combining the health systems under one organization. The completed agreement is expected to reshape healthcare services in the region, though details about timelines, staffing and operational changes were not disclosed in initial reports. The merger adds to a broader wave of hospital consolidation across the United States.

Kaliningrad, Russia's exclave on the Baltic between Poland and Lithuania, is drawing renewed attention as a potential flashpoint in the standoff over Ukraine. Commentary focuses on the Suwałki Gap, the narrow corridor linking the Baltic states to Poland that NATO sees as its most vulnerable point, Russia's stationing of nuclear-capable weapons in the region, and the implications for countries like India with ties to Moscow. Analysts warn any crisis there could escalate quickly.

A study published in Nature examined how genetic vulnerability and physical activity interact in relation to major depressive disorder, using data from the All of Us Research Program, a large US biomedical database. The findings add to ongoing discussion about how lifestyle factors such as exercise may influence depression risk in people with genetic predisposition.

GitHub has announced rate limits on private vulnerability reporting, restricting how many private security reports users can open or update within a given period. The change is aimed at curbing spam and abuse of the private vulnerability reporting feature, which lets maintainers receive and fix security issues before public disclosure. Security researchers and open source maintainers are watching to see whether the limits affect legitimate reports.

The U.S. Cybersecurity and Infrastructure Security Agency has added a vulnerability in Fortinet's FortiMail to its Known Exploited Vulnerabilities catalog, confirming the flaw is being actively abused in attacks. Inclusion requires federal civilian agencies to patch by the mandated deadline, and organizations running FortiMail are urged to update immediately.

US President Donald Trump has warned that Iran would be 'hit hard' if its involvement is confirmed in an incident involving a flydubai flight heading to Israel. The matter remains under investigation, and no findings have been released linking Tehran to the event. The warning has raised concerns about a possible escalation between Washington and Tehran.

Italy has stated that the European Union's naval mission in the Red Sea remains insufficient, according to a Reuters report circulating widely in Italian media. The mission, aimed at protecting commercial shipping from attacks in the region, is judged by Rome to fall short of what is needed to secure one of the world's busiest maritime corridors.

CBS News reports that open-weight AI models, whose underlying parameters are publicly released, may be more vulnerable to manipulation and can operate without meaningful oversight. Because anyone can download and modify them, safety guardrails built into closed systems may be easier to strip away, raising concerns about misuse and accountability as open models spread.

AI tools are increasingly effective at discovering software vulnerabilities, but security experts warn that open source projects still lack the human maintainers needed to review, triage and fix the growing volume of reported flaws. Infosecurity Magazine highlights the widening gap between machine-generated bug reports and the limited developer capacity available to address them across widely used open source components.