Berlin Airport (BER) remains in “emergency mode” for the fifth day after a major cyberattack on its supply chain. Der Spiegel reported the news in yesterday’s update. IT services provider Collins Aerospace, a subsidiary of the American company RTX, was the victim of a cyberattack last Friday. The hack paralyzed the electronic systems used to process passengers and baggage. According to an airport spokesperson, BER is still in “emergency mode” several days after the cyberattack on its IT system. The paralyzed passenger and baggage management system remains inactive. He noted that on Thursday, September 25, there were again several delays and three

Commodore Corporation BV was recently acquired by fans and former employees. Now, the new Commodore brand has announced a significant milestone: the first Commodore 64 Ultimate computer in 30 years has surpassed 10,000 units sold. The company’s official X account posted sales figures and thanked the community for their support . As the published graph shows, sales began in earnest on July 12 of this year. Since August, the trend has been more consistent but stable. The timeline also shows the release dates of the “Let’s Buy Commodore” video trilogy, which has garnered hundreds of thousands of views (one episode surpassing 400,000).

Cisco has disclosed two critical vulnerabilities affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) firewalls, as well as other networking products. Both flaws allow arbitrary code execution and could lead to the complete compromise of affected devices. CVE-2025-20363 – Code Execution via Web Services The first vulnerability, identified as CVE-2025-20363 and with CVSS score 9.0 (critical) , affects the web services of: Cisco Secure Firewall ASA Software Feature Possible Vulnerable Configuration AnyConnect IKEv2 Remote Access (with client services) crypto ikev2 enable < interface name > client-services port < port_numbers > Mobile User Security (MUS) webvpn mus

Trend Research researcher Nicholas Zubrisky has reported a critical vulnerability in the ksmbd component of the Linux kernel that allows remote attackers to execute arbitrary code with maximum system privileges. The vulnerability, identified as CVE-2025-38561, affects all distributions that use the built-in ksmbd-based SMB server. The crash was related to the handling of the Preauth_HashValue field during SMB2 session creation. The developers made a thread synchronization error: the lack of a memory access lock created a race condition when multiple processes simultaneously modified the same object. This caused memory corruption and thread switching, paving the way for arbitrary code execution in kernel

According to Google Threat Intelligence , the China-linked espionage group UNC5221 has carried out a series of successful intrusions into corporate networks since March of this year, exploiting previously unknown vulnerabilities in Ivanti products. The attacks involved the introduction of backdoors that allowed attackers to maintain access to victims’ infrastructure for an average of 393 days. Experts have attributed the actions to the UNC5221 group and other related Chinese cyberespionage groups. According to the report , UNC5221 began actively exploiting vulnerabilities in Ivanti devices as early as 2023. Google emphasizes that this group is not associated with Silk Typhoon (formerly Hafnium), suspected

Since 2013, the IEEE has published an annual interactive ranking of the most popular programming languages . However, traditional methods of measuring popularity may be losing their meaning today, due to changes in the way we program. In the latest IEEE Spectrum rankings, Python retains its first-place position. JavaScript has seen the biggest decline , falling from third to sixth place. Meanwhile, Python has also taken the lead in the separate ” Employment ” category, which only considers employer demand. However, SQL remains a key skill on developer resumes. The ranking methodology is based on a collection of open data: Google search

The U.S. Department of Justice and British police have charged Talha Jubair, 19, a resident of East London, who investigators believe is a key member of Scattered Spider , a group responsible for a series of extortion attacks targeting major businesses and government agencies. According to the file, from May 2022 to September of this year, attackers carried out at least 120 intrusions, affecting 47 organizations in the United States, and the total amount of payments exceeded $115 million. A parallel case in London involves an attack on Transport for London in August 2024, in which 18-year-old Owen Flowers was involved along

“ Art is a mirror that reflects the soul of the beholder.” This quote, which captures the essence of our experience with cinema, takes on crucial significance when discussing cybersecurity. Spike Jonze’s film ” Her ” (2013) is the most emblematic example of this dynamic. The protagonist, Theodore Twombly,’s relationship with the operating system Samantha isn’t a film about artificial intelligence, but about human vulnerability in the age of digital connectivity. Theodore trusts Samantha implicitly, opens his life to her, and entrusts his most intimate emotions to her. This absolute trust, while emotionally understandable, reflects a real risk: our growing willingness to

An open letter signed by major open source foundations has raised the alarm about the future of the infrastructure that supports modern software development. The Open Source Security Foundation (OpenSSF), along with eight other organizations , including the Eclipse Foundation, the Rust Foundation, Sonatype, and the Python Software Foundation , declared that ” open infrastructure is not free.” The document draws attention to key package registries like Maven Central, PyPI, crates.io, npm, and Packagist. These tools handle billions of downloads per month but rely primarily on donations, grants, and sponsorships. This model is fragile, given the growing costs of bandwidth, storage, staffing,

Cisco has disclosed a zero-day vulnerability, tracked as CVE-2025-20352, in its widely used IOS and IOS XE software; this vulnerability appears to be actively exploited. This vulnerability was initially identified through an investigation into a support case at the Cisco Technical Assistance Center (TAC). The flaw was found in the Simple Network Management Protocol (SNMP) subsystem and could allow a remote attacker to cause a remote code execution (RCE) or denial of service (DoS) condition on vulnerable devices. The vulnerability is caused by a stack overflow condition (CWE-121) . An attacker can trigger this flaw by sending a spoofed SNMP packet over