New ‘hardened runtime’ standard aims to make organizations more secure
Traditional runtime security solutions have tended to focus on detection and as a result generate thousands of low-fidelity alerts. Edera is launching what it says is a new software security category aimed at ending the era of 'move fast and break things'.
Edera's ‘hardened runtime’ provides production-grade sandboxing that assumes a breach before it occurs. This architectural approach eliminates the root causes of privilege escalation, lateral movement, and data exfiltration while dramatically reducing operational overhead for security teams.
Debian Linux 12.6 delivers essential security fixes
Debian, the open-source and Linux-based operating system, has released its sixth update to the stable distribution of Debian 12, codenamed "Bookworm." This latest release is a crucial point release that primarily focuses on enhancing security and resolving serious issues identified in earlier versions.
Debian 12.6 encompasses several security corrections and other critical adjustments. Users will appreciate that this update does not necessitate the replacement of existing "Bookworm" media. Instead, after installing from existing media, users can update their packages to the latest versions by connecting to an up-to-date Debian mirror.
fwupd abandons xz compression for zstd amid security concerns
Following the discovery of malicious code, fwupd, the popular firmware update utility, has decided to transition from xz to zstd compression for its metadata. Richard Hughes, the lead developer behind fwupd, outlined the rationale behind this decision in a recent blog post.
For years, fwupd has relied on compressed metadata to facilitate firmware updates for a wide array of hardware. This metadata, essentially a large XML file, was initially compressed using gzip, resulting in a 1.6MB download for end-users. However, in 2021, the fwupd team switched to xz compression, further reducing the file size to 1.1MB and saving significant bandwidth.