ceph
Ceph Security Update: Four CVEs and Key Rotation
Ceph 20.2.4 and 19.2.6 patch four authentication and authorization CVEs. The remediation also needs CephX key rotation, client checks, and RGW multisite planning.
devops
AliExpress’s Silent Audio Script Hijacked a Bluetooth Headset
AliExpress Web Audio scripts left a Bluetooth audio path open. The evidence shows a broad anti-abuse fingerprinting system, but not a unique device ID.
AI
After Coldcard, AI Found 1,029 Bugs. Censored Models Found None.
A volunteer red team filed 4,962 AI findings across 390 repositories in 27.5 hours, and not one came from a public US frontier model. Not a capability gap: the capable versions sit behind identity gates. Refusal policy is now where the labs differentiate, and it belongs on your dependency list.