Cloudflare adds post-quantum crypto to geo-restricted key management
Cloudflare launches a closed beta for post-quantum geographic key management, protecting data sovereignty against future quantum threats.
News for teams that run their own software
A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
AI-driven ransomware group targets SMB edge devices and cPanel servers
Researchers exposed an AI-powered intrusion framework used by INC and The Gentlemen affiliates to exploit Fortinet, cPanel, and SimpleHelp vulnerabilities in small and mid-sized businesses.
Self-hosting OpenClaw on a VPS for private Telegram AI access
A new guide details how to deploy the open-source OpenClaw assistant on a Ubuntu VPS, connecting it to Telegram with strict pairing-based security.
Critical PHP flaws leaked early force urgent updates for self-hosters
Two severe PHP vulnerabilities were exposed before patches were ready, causing service disruptions and requiring immediate action from server administrators.
How an idempotency guard stalled a publishing daemon for ten hours
A publishing daemon stopped working for ten hours because it treated an 'already published' signal as a failure, blocking the entire job queue.
Critical Pillow flaws allow code execution via crafted images
Pillow versions before 13.0.0 contain critical vulnerabilities allowing remote code execution through EPS filenames and JPEG processing.
Railway breach exposes customer secrets and urges credential rotation
Railway disclosed unauthorized access to environment variables, prompting urgent credential rotation for affected users amid rising AI-driven cloud attacks.
Secure internal TLS with ACME proxies and DNS delegation
A new guide details using ACME proxies and local DNS servers to issue public certificates for internal services without exposing API keys.
LiteLLM supply chain attack steals credentials via leaked GitHub tokens
Attackers compromised LiteLLM v1.107.0 using leaked GitHub CLI tokens found in logs, injecting a credential stealer and backdoor into PyPI and Docker registries.
DuckDB 2.0 adds server mode, async I/O and variant type support
DuckDB 2.0.0 LTS introduces client-server capabilities via the Quack protocol, asynchronous I/O for faster remote reads, and a first-class VARIANT type for semi-structured data.
Automating ZFS snapshots and offsite replication with sanoid and syncoid
A technical guide details how to use sanoid for snapshot retention and syncoid for secure pull-based replication to protect self-hosted ZFS storage.
ChatGPT now uses standard webhooks for real-time MCP event delivery
OpenAI’s new MCP Events extension enables ChatGPT to react to external system changes via standardized webhooks, introducing specific security and lifecycle management requirements for developers.
eMudhra exits global SSL business after weak keys found
eMudhra will withdraw from the global SSL/TLS market after researchers discovered eight intermediate CA private keys were easily guessable, forcing a mass certificate replacement.
Azure kernel upgrade breaks MongoDB startup due to rseq incompatibility
An automatic Azure VM kernel update to version 6.19+ caused MongoDB 8.x to refuse startup, requiring a manual GRUB rollback and package pinning to resolve.
Runtime TLS certificate acquisition in Go eliminates restarts
The Dushed team details a Go-based approach to acquiring and renewing Let's Encrypt certificates at runtime, avoiding external tools and service restarts.
