Sicherheitslücken (CVE) VulDB Updates 4

CVE-2025-65292 | Aqara Camera Hub G3/Hub M2/Hub M3 Domain Name command injection

A vulnerability labeled as critical has been found in Aqara Camera Hub G3, Hub M2 and Hub M3.

IT Nachrichten CNET

Look Out for This iPhone Duo Preorder Scam That Can Steal Your Data

Apple’s first foldable isn’t available for preorder until Oct. 16. Don’t believe anything that says otherwise.

Sicherheitslücken (CVE) The CyberWire

Astra, la vista, baby.

OpenAI holds back its newest model over safety concerns. Kiteworks lifts its precautionary shutdown. Apple patches an exploited zero-day.

IT Security Nachrichten Pro-Linux Security

Mangelnde Eingabeprüfung in Booth (Ubuntu)

IT Security Nachrichten Pro-Linux Security 2

Mehrere Probleme in FreeIPMI (Ubuntu)

IT Security Nachrichten Pro-Linux Security

Ausführen beliebiger Kommandos in perl-DBI (SUSE)

IT Security Nachrichten Pro-Linux Security

Preisgabe von Informationen in swtpm (SUSE)

IT Security Nachrichten Pro-Linux Security

Denial of Service in glib2 (SUSE)

Sichere Programmierung DEV Community

TypeScript Email Fixtures Need One Owner

Email verification tests often fail for a reason that has nothing to do with React.

AI & KI Nachrichten DEV Community

I Asked AI to Improve My Resume. It Started Asking Me for Numbers Instead.

The usual AI resume flow looks like this: old CV + job posting → LLM → improved CV It has a basic flaw.

IT Security Tools KitPloit

resterm v1.10.2

Resterm v1.10.2 hardens opening of response bodies: file extensions now derive from content type, only safe types open, HTML/SVG/XML/Markdown open as…

Sichere Programmierung DEV Community

Will your dependencies run on Cloudflare Workers? Check before you deploy

A Worker that builds and passes its tests can still fail the moment it runs. The usual cause is not your code.

Sichere Programmierung DEV Community

A Property Inquiry Agent with React, MCP, and Hybrid RAG

A property assistant gets a question: “I’m looking for a flat in Hamburg under €2,000. I have a dog.

IT Nachrichten CNET

Score Samsung’s 32-Inch Odyssey OLED Gaming Monitor for $400 Off Ahead of Prime Day

Score a stunning 4K OLED display with dual refresh modes for $700.

Sichere Programmierung DEV Community

Small Numbers, Real Findings: AWX, NiFi, Pulsar and CockroachDB

Small Numbers, Real Findings: AWX, NiFi, Pulsar and CockroachDB ZoomEye queries on 26 September 2026 returned 6,087 matches for app="Apache NiFi"…

Sichere Programmierung DEV Community

You're On Call. It's 02:13. Was This a Breach?

At 02:13, a customer reports seeing another company's order. The application is healthy. No deployment failed. Your monitoring dashboard is green.

IT Nachrichten Engadget

Apple updates Final Cut Camera to support the iPhone 18 Pro's variable aperture

The company is also rolling out new features across several of its Creator Studio apps.

IT Nachrichten Engadget

Mozilla deploys a new-look Firefox across desktop and mobile

The redesigned browser brings back compact mode and adds a theme picker.

Sichere Programmierung DEV Community

Nodejs PDF Chapter Split: Validated Ranges for Game Contract Signing

TL;DR: Treat a parsed table of contents as untrusted evidence, convert its chapter starts into half-open page intervals, validate the entire interval…

AI & KI Nachrichten DEV Community

I Taught a Computer to Spot Fake Websites With 96% Accuracy

What if a computer could tell a fake website is fake just by looking at its URL — without ever opening it? Turns out, yes.

AI & KI Nachrichten TechCrunch

OpenAI’s latest features take direct aim at the app store model

OpenAI is building out the pieces of an alternative to the traditional app store model, turning ChatGPT into a place where software can be discovered…

AI & KI Nachrichten DEV Community

OpenAI Rolls Out GPT-6 Sol and Luna for ChatGPT Work, Codex and API Users

OpenAI began rolling out GPT-6 Sol and GPT-6 Luna on September 22, 2026, adding work-oriented models to ChatGPT Work, Codex and its API.

AI & KI Nachrichten SecurityWeek

OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference

Altman made a slew of product announcements and updates, including the company’s new agents, called Dots.

IT Nachrichten theregister.com

Trump launches America.gov with AI chatbots at its core

If you want accurate information about life-changing government services, a potentially hallucinating chatbot might not be your first choice.

Linux Tipps & Hardening Linux, GNU/Linux, free soft…

Chromium 154 might be crashing KDE Plasma because of a fontconfig cache bug

Edit: They released the fix about two hours ago, and everything seems to be working great now.

Sichere Programmierung DEV Community

Chapter 7 — Centralize Filtering and Display Derivation in the Pipeline

Filtering, sorting, and display labels often begin as small template decisions.

Sichere Programmierung DEV Community

How Would You Prove an AI Security Fix Actually Works?

An assistant proposes a security patch. Its explanation sounds reasonable. The original attack no longer works. Do you merge it?

Sichere Programmierung DEV Community

Architecture on the Chopping Block: The OIDC Dependency We Didn’t Know We Had

Before joining Cloud.ru, I worked at a company that built and deployed enterprise IT solutions for large customers.

IT Nachrichten heise online News

Erstes völlig unsichtbares Hör-Implantat

Erstmals ist ein Hörimplantat kommerzieller verfügbar, das komplett unter der Haut implantiert wird. Auch das Mikrofon.

Sichere Programmierung SitePoint

How to Build a Campaign Attribution Tracking System

null How to Build a Campaign Attribution Tracking System on SitePoint.

IT Security Nachrichten BleepingComputer

FBI tells ShinyHunters members to turn themselves in after recent arrest

The FBI is warning members of the ShinyHunters extortion group to turn themselves in after Dutch police arrested a man the bureau described as one of…