AI is accelerating software security breaches, forcing engineers to fundamentally rethink traditional security practices to protect systems from new, automated threats.
AI-generated summary. Check the original reporting for context and accuracy.
This is the available feed excerpt, which may be shortened or in the publisher’s original language.
Hi, this is Gergely with a bonus, free issue of the Pragmatic Engineer Newsletter. In every issue, I cover Big Tech and startups through the lens of senior engineers and engineering leaders. Today, we cover one out of four topics from last week’s issue of The Pulse. Full subscribers received the article below eight days ago. If you’ve been forwarded this email, you can subscribe here.It’s been an absolutely wild few days, with security breaches and major security vulnerabilities being exposed worldwide across tech. Many incidents took place on Tuesday and Wednesday of this week. We’ll start with a brief summary, then look closer at three of them:Intermediate CA certificate compromised: eight private 384-bit keys issued by eMudhra – which is an intermediate Certificate Authority (CAs) – leaked, meaning that servers in server-to-server communication can face man-in-the-middle (MITM) attacks. Any internet communication not going through modern browsers (that already patched this) could be risky.PHP: Unpatched servers risk remote code execution (RCE) and opening up access for attackers. Around 70% of all websites run on PHP and unpatched systems are at risk. Two critical security patches have been released.Railway: customer secrets stored on the service were leaked and some have been decrypted. Secrets exposed can include access to production systems, enabling attackers to potentially access customer systems.GitLab: Unpatched GitLab servers are at risk of an attacker gaining full access. A critical security patch for RCE has been released.Node.js: Unpatched servers are vulnerable to remote execution attacks. A new release fixes 10 critical vulnerabilities (CVEs), including one that allows for RCE, and another fix revokes the compromised eMudhra intermediate certificate.Go: a new release is out, adding a mitigation for the compromised eMudhra intermediate certificate.TiDB: attackers gained near-total access to the complete control plane systems of the managed TiDB provid
An automated sorting aid based on source trust, keywords, and entities, on a scale of 1–12. High: 9–12; medium: 6–8; low: 1–5. It does not measure urgency, verify reporting, or indicate editorial endorsement.
Google's satellite successfully ran an AI model in space, proving that advanced computing can operate beyond Earth and expanding the potential for real-time data processing in orbit.
Satlyt’s successful test advances the goal of transforming satellites into virtual data centers, potentially revolutionizing how data is processed in space.
Fujifilm is investing $63 million to quintuple tape production because generative AI’s massive data growth is driving unprecedented demand for long-term archiving solutions.