software security

Kernel maintainer Greg Kroah-Hartman discusses software security in an era when large language models are increasingly used to write code. The talk, shared as a video, examines how AI-generated contributions affect the Linux kernel's review process and the challenges of maintaining security standards as LLM-assisted development spreads. Readers are weighing how maintainers can vet code at scale when machine-written patches grow in volume.

On September 15, 2022, the Ethereum Merge went down in history as one of the most ambitious and complex software upgrades in the history of decentralized systems. The move shifted the world's second-largest cryptocurrency network from proof-of-work to proof-of-stake, fundamentally changing how the network secures and operates itself. Commentators note it was more than a technical update, marking a paradigm shift once considered a distant goal under the name Eth2.

A well-known German technology publication is running a feature on migrating to a new password manager, walking through moving saved logins between services. The piece is drawing strong engagement, reflecting widespread interest in password managers as users weigh alternatives, data portability and security after recent changes in the software landscape.

A critical vulnerability, tracked as CVE-2026-9862, has been disclosed in Fortra's BoKS Core Privileged Access Manager. The flaw is an OS command injection issue, meaning an attacker could potentially execute arbitrary system commands on affected servers. Because BoKS is used to manage privileged access at enterprises, security teams are being urged to review their exposure and patch promptly.

Attackers are actively exploiting a vulnerability in Cisco's SD-WAN software, according to a breach roundup from BankInfoSecurity. The report groups the Cisco flaw with other recent security incidents and breach news. The flaw affects organizations using Cisco's software-defined wide area networking product, and defenders are being urged to apply available patches and review their systems for signs of compromise.

Bitcoin Core developers have released a fix for a vulnerability that, in theory, could have allowed funds to be redirected without an attacker ever obtaining a user's private keys. The flaw was described as a gap in how transactions could be handled, and the new release closes it. Security researchers are weighing how serious the risk was and urging users to update their Bitcoin Core software promptly.

Qualcomm is reportedly in advanced talks to acquire Modular, an artificial intelligence startup, for around $4 billion. The deal, if completed, would strengthen Qualcomm's push into AI software and infrastructure as chipmakers race to secure AI capabilities. Details of the negotiations, including timing and confirmation from either company, have not yet been made public.

Software developers are debating the limits of "vibe coding," the practice of building software by prompting AI models rather than writing code directly. While the approach works well for prototypes and small projects, many argue it breaks down on complex systems where architecture, security and long-term maintainability demand deliberate engineering decisions. The discussion reflects a broader reassessment of how far AI-assisted development can go.