📰 Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains.The "critical exploitable pattern" has been codenamed Cordyceps by Novee Security. The issue can allow full attacker control of repositories at dozens of the largest organizations worldwide, including Microsoft, Google, Apache, and.

🔗 Source: https://thehackernews.com/2026/06/cordyceps-cicd-flaws-expose-300-github.html

#opensource

👉@sysadminoff

📰 "So Many AI-Fueled Fixes" Means No New ARM64 KVM Features For Linux 7.2

The KVM virtualization-related changes were merged a few days ago for the ongoing Linux 7.2 kernel merge window. While there are a number of features/improvements for AMD and Intel virtualization as well as the likes of s390 and RISC-V, there aren't any new features on ARM64. The lack of ARM64 feature work this cycle is being attributed to "so many AI-fueled fixes" swamping the ARM Linux developers...

🔗 Source:

#amd #arm #intel #kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Linux-7.2-KVM

Однострочное изменение в GCC привело к ускорению на 12% в одном тесте и замедлению на 14% в другом

Инженер из компании Intel внёс в набор компиляторов GCC однострочное изменение, увеличивающее вес неверного предсказания ветвления на процессорах x86. Изменение позволило повысить производительность генерируемого кода при прохождении теста 544.nab_r на 12.7% при включении в оптимизаций "-O2 -mtune=graniterapids" для CPU Intel Granite Rapids/Xeon 6 и на 12.1% при включении в оптимизаций "-O2 -mtune=znver5" на CPU AMD Zen5.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65757

Commvault integrates cyber resilience tools as native services within Microsoft Azure

Commvault and Microsoft have established a multiyear partnership to integrate data security and cyber recovery technology directly into the Azure cloud platform. This collaboration allows Azure customers to provision and deploy resilience tools as native services without the need for manual integration or separate infrastructure. The primary objective is to streamline the restoration of data, applications, and identities following cyberattacks, system outages, or accidental deletions.
Source

👉@sysadminoff

https://4sysops.com/archives/commvault-integrates-cyber-resilience-tools-as-native-services-within-microsoft-azure/

📰 Pine64 launch $50 RISC-V smart speaker for Home Assistant tinkerers

Open-hardware manufacturer Pine64 has launched a $50 smart speaker that runs open-source software on a RISC-V chip. PineVoice (previously known as PineVox) is built around a Bouffalo Lab BL606P RISC-V SoC with integrated Wi-Fi, Bluetooth 5.0 and Zigbee radio interfaces. It’s equipped with dual microphone array and speaker with support for ‘local wake word detection’, and top-mounted buttons allow you to mute (with LED indicator), start/stop and...

🔗 Source:

#opensource

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/06/pine64-pinevoice-riscv-smart-speaker-launch

📰 Kubuntu Focus Ar (GEN 1) is a Linux Laptop with Intel Panther Lake and Arc B390 graphics

The Kubuntu Focus Ar GEN 1 is the first Linux laptop from the Kubuntu Focus team to feature an Intel Panther Lake processor that delivers the kind of graphics performance you’d expect from an entry-level discrete GPU. While there are several other Kubuntu Focus models that do have even higher-performance discrete graphics, those models are bigger, heavier, .

🔗 Source:

#intel #linux

👉@sysadminoff

https://liliputing.com/kubuntu-focus-ar-gen-1-is-a-linux-laptop-with-intel-panther-lake-and-arc-b390-graphics/

fooyin 0.11.0 и 0.11.1

22 июня состоялись выпуски 0.11.0 и 0.11.1 fooyin — музыкального плеера, ориентированного на индивидуальную настройку. Он предоставляет множество виджетов для управления и воспроизведения локальной коллекции музыки. Плеер обладает широкими возможностями расширения благодаря системе плагинов и включает в себя FooScript — язык сценариев для расширенной настройки виджетов.
Вы можете полностью настроить пользовательский интерфейс, перейдя в режим редактирования макета: начав с нуля или воспользовавшись готовым.
( читать дальше... )
>>> Документация
>>> Исходный код



 audio player, c++, fooyin, qt, интернет радио

👉@sysadminoff

https://www.linux.org.ru/news/multimedia/18327099

Открыт код игры Arma: Cold War Assault Remastered

Компания Bohemia Interactive открыла под лицензией GPLv3 исходный код тактического шутера "Arma: Cold War Assault Remastered" и используемого в нём игрового движка Poseidon. Вместе с кодом игры опубликованы сетевой сервер, сетевые сервисы для авторов модов и редактор миссий. Для разработки модов предлагается использовать язык SQS. Игра была опубликована в 2001 году, после чего переиздана в Steam в 2011 году. Опубликованный код модернизирован для поддержки стандарта C++20 и переведён на сборку с использованием CMake и Clang. Помимо Windows добавлена поддержка платформы Linux. Для рендеринга графики используется OpenGL 3.3.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65758

Обновление Firefox 152.0.2

Доступен корректирующий выпуск Firefox 152.0.2, в котором представлены четыре исправления.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65759

📰 F2FS Integrates FSERROR Reporting, Reduces Memory Footprint In Linux 7.2

The Flash-Friendly File-System (F2FS) have landed for Linux 7.2...

🔗 Source:

#linux

👉@sysadminoff

https://www.phoronix.com/news/Linux-7.2-F2FS

📰 TerraMaster F4-425 Pro is a 4-bay NAS with up to Core 3 N350, 16GB RAM, and 3 M.2 slots

The Terramaster F4-425 Pro is a network attached storage system that looks virtually identical to the F4-425 Plus that launched last year. But while that model is powered by a 4-core Intel N150 processor, the new Pro version comes with either an Intel Core i3-N305 or Core 3 N350 8-core chip that should deliver a significant .

🔗 Source:

#i3 #intel

👉@sysadminoff

https://liliputing.com/terramaster-f4-425-pro-is-a-4-bay-nas-with-up-to-core-3-n350-16gb-ram-and-3-m-2-slots/

Configure Windows 11 point-in-time restore

Point-in-time restore is a built-in recovery feature in Windows 11, released as part of the June 23, 2026, optional update, KB5095093, for versions 24H2 and 25H2. It uses the Volume Shadow Copy Service (VSS) to capture full-system snapshots on a recurring schedule automatically. Enterprise editions support remote configuration via a Configuration Service Provider (CSP), a management interface that exposes Windows settings to mobile device management (MDM) tools such as Intune. This article covers how to enable, configure, and use the feature, as well as its key limitations.
Source

👉@sysadminoff

https://4sysops.com/archives/configure-windows-11-point-in-time-restore/

Выпуск минималистичного набора системных утилит Toybox 0.8.14

Опубликован релиз набора системных утилит Toybox 0.8.14, оптимизированного для минимального потребления системных ресурсов. По аналогии с BusyBox все утилиты набора доступны через один исполняемый файл. Проект развивается бывшим мэйнтейнером BusyBox, написан на языке Си и распространяется под лицензией 0BSD. Целью создания Toybox является предоставление производителям возможности использования минималистичного набора стандартных утилит без открытия исходных текстов модифицированных компонентов. По возможностям Toybox пока отстаёт от BusyBox, но уже реализовано 319 базовых команд (236 полностью и 83 частично) из 395 запланированных. С 2015 года Toybox предлагается в основном составе платформы Android.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65760

Navigating the hidden costs and governance risks of Microsoft 365 E7

Microsoft 365 E7, branded as the Frontier Suite, launched in May 2026 at $99 per user per month to consolidate high-end security and AI capabilities. This new tier bundles the existing E5 stack with Microsoft 365 Copilot, the Entra Suite for advanced identity governance, and Agent 365 for managing AI background workers. While the bundle offers a discount compared to individual SKUs, administrators must account for rising costs in lower tiers and the exclusion of compute expenses for building custom agents.
Source

👉@sysadminoff

https://4sysops.com/archives/navigating-the-hidden-costs-and-governance-risks-of-microsoft-365-e7/

Проект nginx опубликовал JavaScript-модуль njs 1.0.0

Опубликован выпуск njs 1.0.0, модуля для интеграции интерпретатора языка JavaScript в http-сервер nginx. Njs позволяет использовать сценарии JavaScript в файлах конфигурации для расширения возможностей nginx. Скрипты могут использоваться для определения расширенной логики обработки запросов, формирования конфигурации, динамической генерации ответов, модификации запроса/ответа или быстрого создания заглушек с решением проблем в web-приложениях. Код проекта написан на Си и распространяется под лицензией BSD.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65761

📰 AMD FSR 4 lands on RDNA3 for Linux / SteamOS and Steam Machine via Proton Experimental

Great news for today ahead of the Steam Machine launch, thanks to AMD updating FSR 4 it's now supported on RDNA3 GPUs for Linux / SteamOS and Steam Machine.Read the full article on GamingOnLinux.

🔗 Source:

#amd #linux #proton #steam

👉@sysadminoff

https://www.gamingonlinux.com/2026/06/amd-fsr-4-lands-on-rdna3-for-linux-steamos-and-steam-machine-via-proton-experimental/

📰 Podman 6.0 Lands with Breaking Changes, AMD GPUs Support

Podman 6.0 drops CNI, cgroups v1, iptables, slirp4netns, Windows 10, and Intel Mac support while adding new machine and Quadlet features.

🔗 Source:

#amd #intel

👉@sysadminoff

https://linuxiac.com/podman-6-0-lands-with-breaking-changes-amd-gpus-support/

📰 NTFS3 Driver Sees Bug Fixes & Minor Improvements With Linux 7.2

While the new NTFS file-system driver merged for Linux 7.1 and has seen more improvements for Linux 7.2, for now at least the NTFS3 kernel driver continues to be maintained with new fixes and improvements. NTFS3 is the driver that was upstreamed to the Linux kernel a few years ago back during the pandemic by Paragon Software...

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Linux-7.2-NTFS3

📰 Vaultwarden has been running on a Raspberry Pi Zero in a drawer for a year, and it's the most underrated thing I host

Embrace the simplicity and efficiency of self-hosting Vaultwarden on a Raspberry Pi Zero 2W, and the freedom of managing your own passwords.

🔗 Source:

#raspberry

👉@sysadminoff

https://www.xda-developers.com/vaultwarden-on-raspberry-pi-zero-most-underrated-thing-i-host/

📰 MGLRU Improvement Yielding Nice Gains On Linux 7.2: MongoDB 30~100% Higher Throughput

The many memory management "MM" related improvements were recently merged to Git for the Linux 7.2 kernel. As typical most kernel cycles, some of the low-level improvements can yield nice efficiency wins and better performance in different areas...

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Linux-7.2-MM

Ubuntu brings Livepatch to arm64 for rebootless kernel updates

Canonical has brought Livepatch to Arm64 devices for the first time, allowing Ubuntu systems on Arm hardware to apply critical kernel security patches without a full reboot. Livepatch is one of Ubuntu’s best hidden security features – it’s not enabled by default, requires Ubuntu Pro – as it allows kernel security updates to be applied in memory while your system is running. Normally, a a restart is needed. Perfect if you’re a bit lazy running a task or workload you don’t want interrupted. Livepatch is now available on Ubuntu 26.04 LTS and Ubuntu Core 26 running on Arm64 devices for the first […]
You're reading Ubuntu brings Livepatch to arm64 for rebootless kernel updates, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/06/ubuntu-livepatch-arm64