David Chisnall discusses how the CHERI hardware architecture redefines pointer safety to solve isolation and sharing challenges. He explains how CHERI enables spatial and temporal memory safety for ...

Arch Linux on Monday announced that it has suspended new account registrations on the Arch User Repository (AUR) in response to a wave of malicious packages being published as part of an ongoing ...

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a ...

A new supply chain attack campaign is quietly targeting developers through a method most would never think to look for. Hidden inside software packages on GitHub, a malicious script downloads a Linux ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Node.js 26 is now out for the popular open-source JavaScript runtime for building server apps, featuring the Temporal API enabled by default, an updated V8 engine, Undici 8, and several major removals ...

AssemblyAI builds advanced speech language models that power next-generation voice AI applications. Most voice AI architectures look like a Rube Goldberg machine. You pipe audio into a speech-to-text ...

The threat actor known as Harvester has been attributed to a new Linux version of its GoGra backdoor deployed as part of attacks likely targeting entities in South Asia. "The malware uses the ...

A new Linux variant of the GoGra backdoor has been uncovered, marking a significant evolution in a cyber-espionage campaign linked to the state-backed Harvester group. The malware stands out for its ...