Unpatched Metabase flaw exposes data on 1.08 million Mathspace users
Attackers used a critical Metabase vulnerability to gain administrator access to Mathspace’s internal reporting system and extract information on 1,079,819 students, parents, and school staff in Australia and New Zealand. The breach unfolded after a patch for the flaw became available, highlighting the risk of leaving self-hosted business intelligence systems exposed.
Source
👉@sysadminoff
https://4sysops.com/archives/unpatched-metabase-flaw-exposes-data-on-1-08-million-mathspace-users/
Attackers used a critical Metabase vulnerability to gain administrator access to Mathspace’s internal reporting system and extract information on 1,079,819 students, parents, and school staff in Australia and New Zealand. The breach unfolded after a patch for the flaw became available, highlighting the risk of leaving self-hosted business intelligence systems exposed.
Source
👉@sysadminoff
https://4sysops.com/archives/unpatched-metabase-flaw-exposes-data-on-1-08-million-mathspace-users/
Qwen 3.8 27B exposes the RTX 5090’s inference-engine bottleneck
Qwen 3.8 27B can fit on a single RTX 5090, but real-world performance depends more on the inference engine and context configuration than on the card’s 32 GB of VRAM. The same GPU can take roughly 30 minutes to produce a long-context response with llama.cpp, deliver about 20 tokens per second through a basic vLLM setup, or reach around 200 tokens per second with a more optimized engine.
Source
👉@sysadminoff
https://4sysops.com/archives/qwen-3-8-27b-exposes-the-rtx-5090s-inference-engine-bottleneck/
Qwen 3.8 27B can fit on a single RTX 5090, but real-world performance depends more on the inference engine and context configuration than on the card’s 32 GB of VRAM. The same GPU can take roughly 30 minutes to produce a long-context response with llama.cpp, deliver about 20 tokens per second through a basic vLLM setup, or reach around 200 tokens per second with a more optimized engine.
Source
👉@sysadminoff
https://4sysops.com/archives/qwen-3-8-27b-exposes-the-rtx-5090s-inference-engine-bottleneck/
📰 4 Linux distros I'd trust with my gaming PC before SteamOS
SteamOS is great, but there are other gaming distros more worthy of your PC.
🔗 Source: https://www.xda-developers.com/4-linux-distros-id-trust-with-my-gaming-pc-before-steamos/
#linux
👉@sysadminoff
https://xda-developers.com/4-linux-distros-id-trust-with-my-gaming-pc-before-steamos
SteamOS is great, but there are other gaming distros more worthy of your PC.
🔗 Source: https://www.xda-developers.com/4-linux-distros-id-trust-with-my-gaming-pc-before-steamos/
#linux
👉@sysadminoff
https://xda-developers.com/4-linux-distros-id-trust-with-my-gaming-pc-before-steamos
XDA
4 Linux distros I'd trust with my gaming PC before SteamOS
SteamOS is great, but there are other gaming distros more worthy of your PC
Company makes money by removing AI guardrails to facilitate cyber attacks
Abliteration AI is selling API access to a modified version of Z.AI’s GLM-5.3 that is designed to answer requests other models reject, including offensive cybersecurity and red-team tasks. The hosted service avoids distributing the altered model weights, but its low refusal rate also makes misuse easier while placing more responsibility on customers.
Source
👉@sysadminoff
https://4sysops.com/archives/company-makes-money-by-removing-ai-guardrails-to-facilitate-cyber-attacks/
Abliteration AI is selling API access to a modified version of Z.AI’s GLM-5.3 that is designed to answer requests other models reject, including offensive cybersecurity and red-team tasks. The hosted service avoids distributing the altered model weights, but its low refusal rate also makes misuse easier while placing more responsibility on customers.
Source
👉@sysadminoff
https://4sysops.com/archives/company-makes-money-by-removing-ai-guardrails-to-facilitate-cyber-attacks/
Ubuntu 26.10 wallpaper, mascot art revealed
The wallpaper for the upcoming Ubuntu 26.10 ‘Stonking Stringray’ release has been revealed, along with the official mascot artwork. No huge surprises: it’s a dark purple/aubergine backdrop with a vectorised stingray on it: As is tradition, there are 4 variants of the default wallpaper. The colour one, as above, plus and a dark version and a light variant and a ‘dimmed’ one for those unable to commit one way or the other. The Stonking mascot art, in the centre, continues the “circular” trend of recent releases: the Resolute Raccoon sits in a rounded starburst, the Questing Quokka was trapped in […]
You're reading Ubuntu 26.10 wallpaper, mascot art revealed, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/09/ubuntu-2610-wallpaper
The wallpaper for the upcoming Ubuntu 26.10 ‘Stonking Stringray’ release has been revealed, along with the official mascot artwork. No huge surprises: it’s a dark purple/aubergine backdrop with a vectorised stingray on it: As is tradition, there are 4 variants of the default wallpaper. The colour one, as above, plus and a dark version and a light variant and a ‘dimmed’ one for those unable to commit one way or the other. The Stonking mascot art, in the centre, continues the “circular” trend of recent releases: the Resolute Raccoon sits in a rounded starburst, the Questing Quokka was trapped in […]
You're reading Ubuntu 26.10 wallpaper, mascot art revealed, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/09/ubuntu-2610-wallpaper
NCSC warns shadow AI is invisible risk for businesses
The UK’s National Cyber Security Centre (NCSC) is urging organizations to make hidden AI use visible before trying to control it. With 71% of UK employees reportedly using unapproved consumer AI tools at work, the agency warns that banning them outright could drive sensitive data and business tasks into services security teams cannot assess.
Source
👉@sysadminoff
https://4sysops.com/archives/ncsc-warns-shadow-ai-is-invisible-risk-for-businesses/
The UK’s National Cyber Security Centre (NCSC) is urging organizations to make hidden AI use visible before trying to control it. With 71% of UK employees reportedly using unapproved consumer AI tools at work, the agency warns that banning them outright could drive sensitive data and business tasks into services security teams cannot assess.
Source
👉@sysadminoff
https://4sysops.com/archives/ncsc-warns-shadow-ai-is-invisible-risk-for-businesses/
📰 Ikey Doherty vs Omarchy: Why He’s Building Barney Instead of Another Distro
Ikey Doherty, the creator of Solus and AerynOS, is back with Barney, a Rust tool that builds Linux distros from source. So that you can easily create your own Omarchy.
🔗 Source:
#distro #linux #rust
👉@sysadminoff
https://feed.itsfoss.com/link/24361/17441870/ikey-doherty-barney
Ikey Doherty, the creator of Solus and AerynOS, is back with Barney, a Rust tool that builds Linux distros from source. So that you can easily create your own Omarchy.
🔗 Source:
#distro #linux #rust
👉@sysadminoff
https://feed.itsfoss.com/link/24361/17441870/ikey-doherty-barney
It's FOSS
Ikey Doherty vs Omarchy: Why He’s Building Barney Instead of Another Distro
Ikey Doherty, the creator of Solus and AerynOS, is back with Barney, a Rust tool that builds Linux distros from source. So that you can easily create your own Omarchy.
📰 Linux Preps For New AMD Zen 6 BTB CTX Isolation Security Feature
A recently posted Linux kernel patch has revealed a new security improvement with Zen 6 processors...
🔗 Source: https://www.phoronix.com/news/Linux-Preps-AMD-BTB-CTX
#amd #kernel #linux
👉@sysadminoff
https://phoronix.com/news/Linux-Preps-AMD-BTB-CTX
A recently posted Linux kernel patch has revealed a new security improvement with Zen 6 processors...
🔗 Source: https://www.phoronix.com/news/Linux-Preps-AMD-BTB-CTX
#amd #kernel #linux
👉@sysadminoff
https://phoronix.com/news/Linux-Preps-AMD-BTB-CTX
Phoronix
Linux Preps For New AMD Zen 6 BTB CTX Isolation Security Feature
A recently posted Linux kernel patch has revealed a new security improvement with Zen 6 processors.
📰 PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser."Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium's own Secure Preferences.
🔗 Source: https://thehackernews.com/2026/09/peep-turns-chrome-and-edge-into-post.html
#chromium
👉@sysadminoff
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser."Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium's own Secure Preferences.
🔗 Source: https://thehackernews.com/2026/09/peep-turns-chrome-and-edge-into-post.html
#chromium
👉@sysadminoff
Windows 11 KB5124008 and KB5122880: new features in the September 2026 update
Microsoft released cumulative updates KB5124008 and KB5122880 on September 8, 2026, as part of the September Patch Tuesday cycle. KB5124008 targets Windows 11 versions 24H2 and 25H2 and raises the OS build to 26200.9445 or 26100.9445. KB5122880 targets version 23H2 and raises the build to 22621.7582. Both packages deliver mandatory security fixes, but KB5124008 also rolls in the non-security changes from the August preview update KB5120998, including several user interface and platform features worth planning for.
Source
👉@sysadminoff
https://4sysops.com/archives/windows-11-kb5124008-and-kb5122880-new-features-in-the-september-2026-update/
Microsoft released cumulative updates KB5124008 and KB5122880 on September 8, 2026, as part of the September Patch Tuesday cycle. KB5124008 targets Windows 11 versions 24H2 and 25H2 and raises the OS build to 26200.9445 or 26100.9445. KB5122880 targets version 23H2 and raises the build to 22621.7582. Both packages deliver mandatory security fixes, but KB5124008 also rolls in the non-security changes from the August preview update KB5120998, including several user interface and platform features worth planning for.
Source
👉@sysadminoff
https://4sysops.com/archives/windows-11-kb5124008-and-kb5122880-new-features-in-the-september-2026-update/
ChatGPT outage hits image generation, file uploads, Voice, and Work
OpenAI’s latest ChatGPT outage is disrupting image generation and file uploads while also affecting Work, Voice, and Codex Cloud users, with APAC customers reporting elevated errors. The incident follows a recent ChatGPT Work outage and remains under investigation despite mitigation efforts.
Source
👉@sysadminoff
https://4sysops.com/archives/chatgpt-outage-hits-image-generation-file-uploads-voice-and-work/
OpenAI’s latest ChatGPT outage is disrupting image generation and file uploads while also affecting Work, Voice, and Codex Cloud users, with APAC customers reporting elevated errors. The incident follows a recent ChatGPT Work outage and remains under investigation despite mitigation efforts.
Source
👉@sysadminoff
https://4sysops.com/archives/chatgpt-outage-hits-image-generation-file-uploads-voice-and-work/
Arm’s Neoverse CSS N4 Falcon brings 128 cores and PCIe 7 to custom cloud CPUs
Arm’s semi-custom Neoverse CSS N4 “Falcon” platform raises the ceiling for Arm-based server silicon to 128 cores per die, built on TSMC’s N3P process. Customers can tailor core counts, cache, memory, I/O, and chip-to-chip connectivity for cloud, AI, and high-performance computing systems rather than adopting a fixed processor design.
Source
👉@sysadminoff
https://4sysops.com/archives/arms-neoverse-css-n4-falcon-brings-128-cores-and-pcie-7-to-custom-cloud-cpus/
Arm’s semi-custom Neoverse CSS N4 “Falcon” platform raises the ceiling for Arm-based server silicon to 128 cores per die, built on TSMC’s N3P process. Customers can tailor core counts, cache, memory, I/O, and chip-to-chip connectivity for cloud, AI, and high-performance computing systems rather than adopting a fixed processor design.
Source
👉@sysadminoff
https://4sysops.com/archives/arms-neoverse-css-n4-falcon-brings-128-cores-and-pcie-7-to-custom-cloud-cpus/
Windows 11 Insider builds: recovery, resume, and accessibility updates
Microsoft released new Windows 11 Insider Preview builds on September 8, 2026, across the Beta and Experimental channels. The Beta channel received build 26220.9343 for Windows 11 25H2 and build 28020.2904 for 26H1. The Experimental channel received build 26340.9354 for Windows 11 version 26H2 and build 28120.2912 for 26H1.
Source
👉@sysadminoff
https://4sysops.com/archives/windows-11-insider-builds-recovery-resume-and-accessibility-updates/
Microsoft released new Windows 11 Insider Preview builds on September 8, 2026, across the Beta and Experimental channels. The Beta channel received build 26220.9343 for Windows 11 25H2 and build 28020.2904 for 26H1. The Experimental channel received build 26340.9354 for Windows 11 version 26H2 and build 28120.2912 for 26H1.
Source
👉@sysadminoff
https://4sysops.com/archives/windows-11-insider-builds-recovery-resume-and-accessibility-updates/
The $200 Firefox mechanical keyboard sold out
Love Firefox enough to drop $200 on a branded keyboard? Tough, it’s sold it. It’s a full-sized, 108-key mechanical keyboard with Cherry MX keys/switches, and has a unique keycap colour scheme and branding: a Firefox logo on the super/meta key and new Firefox mascot Kit on Esc. It works wired, via Bluetooth or 2.4g wireless. “Clean, clicky and finished in Firefox colors”, reads the Mozilla Store description, “this is a keyboard that looks good, feels better and sneaks in a little personality where you least expect it” (unaware the personality is exactly where one would expect it: on the keys). […]
You're reading The $200 Firefox mechanical keyboard sold out, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/09/firefox-keyboard-cherry-switches
Love Firefox enough to drop $200 on a branded keyboard? Tough, it’s sold it. It’s a full-sized, 108-key mechanical keyboard with Cherry MX keys/switches, and has a unique keycap colour scheme and branding: a Firefox logo on the super/meta key and new Firefox mascot Kit on Esc. It works wired, via Bluetooth or 2.4g wireless. “Clean, clicky and finished in Firefox colors”, reads the Mozilla Store description, “this is a keyboard that looks good, feels better and sneaks in a little personality where you least expect it” (unaware the personality is exactly where one would expect it: on the keys). […]
You're reading The $200 Firefox mechanical keyboard sold out, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/09/firefox-keyboard-cherry-switches
📰 Bottles Pushes Windows App Support Further on ARM64 Linux
Bottles pushes its ARM64 efforts forward with Soda 11.0-10, opening the door to running Windows software on more ARM64 Linux devices.
🔗 Source: /
#linux
👉@sysadminoff
https://linuxiac.com/bottles-pushes-windows-app-support-further-on-arm64-linux
Bottles pushes its ARM64 efforts forward with Soda 11.0-10, opening the door to running Windows software on more ARM64 Linux devices.
🔗 Source: /
#linux
👉@sysadminoff
https://linuxiac.com/bottles-pushes-windows-app-support-further-on-arm64-linux
Linuxiac
Bottles Pushes Windows App Support Further on ARM64 Linux
Bottles pushes its ARM64 efforts forward with Soda 11.0-10, opening the door to running Windows software on more ARM64 Linux devices.
DirectX backend в LLVM получил статус официально поддерживаемой архитектурной цели
В LLVM завершён перевод DirectX backend из экспериментального в официальный статус. Соответствующий pull request #214066 был влит в основную ветку llvm-project 31 августа. DirectX перенесён из LLVM_ALL_EXPERIMENTAL_TARGETS в обычный LLVM_ALL_TARGETS, поэтому теперь backend будет собираться по умолчанию вместе с другими штатными целями LLVM.
Ранее для его включения требовалось явно добавлять DirectX через CMake-параметр LLVM_EXPERIMENTAL_TARGETS_TO_BUILD. В принятом изменении DirectX добавлен в стандартный список targets и удалён из экспериментального.
Речь идёт не о реализации Direct3D или графическом драйвере. DirectX backend преобразует LLVM IR в DXIL — DirectX Intermediate Language, используемый DirectX 12 для представления скомпилированных шейдеров. Согласно документации LLVM, DXIL основан на bitcode старого LLVM 3.7, дополненного специфичными для DirectX операциями, ограничениями и метаданными. Результат помещается в контейнер DXContainer, содержащий DXIL и дополнительную информацию о шейдере.
( читать дальше... )
directx, llvm
👉@sysadminoff
https://www.linux.org.ru/news/opensource/18376833
В LLVM завершён перевод DirectX backend из экспериментального в официальный статус. Соответствующий pull request #214066 был влит в основную ветку llvm-project 31 августа. DirectX перенесён из LLVM_ALL_EXPERIMENTAL_TARGETS в обычный LLVM_ALL_TARGETS, поэтому теперь backend будет собираться по умолчанию вместе с другими штатными целями LLVM.
Ранее для его включения требовалось явно добавлять DirectX через CMake-параметр LLVM_EXPERIMENTAL_TARGETS_TO_BUILD. В принятом изменении DirectX добавлен в стандартный список targets и удалён из экспериментального.
Речь идёт не о реализации Direct3D или графическом драйвере. DirectX backend преобразует LLVM IR в DXIL — DirectX Intermediate Language, используемый DirectX 12 для представления скомпилированных шейдеров. Согласно документации LLVM, DXIL основан на bitcode старого LLVM 3.7, дополненного специфичными для DirectX операциями, ограничениями и метаданными. Результат помещается в контейнер DXContainer, содержащий DXIL и дополнительную информацию о шейдере.
( читать дальше... )
directx, llvm
👉@sysadminoff
https://www.linux.org.ru/news/opensource/18376833
Релиз языка программирования Nim 2.2.12
После четырёх месяцев разработки представлен релиз языка системного программирования Nim 2.2.12. Nim – статически типизированный компилируемый язык программирования с синтаксисом, вдохновлённым Python, и возможностями метапрограммирования на уровне Lisp. Язык компилируется в C, C++ и JavaScript, обеспечивая производительность на уровне C при выразительности высокоуровневых языков. Код проекта поставляется под лицензией MIT.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66237
После четырёх месяцев разработки представлен релиз языка системного программирования Nim 2.2.12. Nim – статически типизированный компилируемый язык программирования с синтаксисом, вдохновлённым Python, и возможностями метапрограммирования на уровне Lisp. Язык компилируется в C, C++ и JavaScript, обеспечивая производительность на уровне C при выразительности высокоуровневых языков. Код проекта поставляется под лицензией MIT.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66237
📰 GStreamer 1.28.7 Open-Source Multimedia Framework Adds Support for OpenCV 5
GStreamer 1.28.7 open-source multimedia framework is now available for download with support for building against OpenCV 5, missing API version suffix in HIP support library filename, and other changes.
🔗 Source: https://9to5linux.com/gstreamer-1-28-7-open-source-multimedia-framework-adds-support-for-opencv-5
#opensource
👉@sysadminoff
GStreamer 1.28.7 open-source multimedia framework is now available for download with support for building against OpenCV 5, missing API version suffix in HIP support library filename, and other changes.
🔗 Source: https://9to5linux.com/gstreamer-1-28-7-open-source-multimedia-framework-adds-support-for-opencv-5
#opensource
👉@sysadminoff
Бета-выпуск MiDesktop, форка KDE 1 для современных систем
Представлен первый бета-выпуск проекта MiDesktop, развивающего форк среды рабочего стола KDE 1.1.2, адаптированный для работы на современных системах. Для решения проблем и избавления от ограничений лицензии, специфичных для ветки Qt 1, кодовая база KDE 1 портирована на фреймворк Osiris, развивающий актуализированный форк Qt 2.3.2. Код MiDesktop распространяется под лицензией GPLv2. Готовые сборки сформированы для Debian 13 и Ubuntu 24.04.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66238
Представлен первый бета-выпуск проекта MiDesktop, развивающего форк среды рабочего стола KDE 1.1.2, адаптированный для работы на современных системах. Для решения проблем и избавления от ограничений лицензии, специфичных для ветки Qt 1, кодовая база KDE 1 портирована на фреймворк Osiris, развивающий актуализированный форк Qt 2.3.2. Код MiDesktop распространяется под лицензией GPLv2. Готовые сборки сформированы для Debian 13 и Ubuntu 24.04.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66238
📰 2D souls-inspired roguelite Rogue Blight looks great and it's out now
Rogue Blight recently released with Linux support - a great looking 2D action souls-inspired side-scroller that's getting some good user reviews.Read the full article on GamingOnLinux.
🔗 Source: https://www.gamingonlinux.com/2026/09/2d-souls-inspired-roguelite-rogue-blight-looks-great-and-its-out-now/
#linux
👉@sysadminoff
https://gamingonlinux.com/2026/09/2d-souls-inspired-roguelite-rogue-blight-looks-great-and-its-out-now
Rogue Blight recently released with Linux support - a great looking 2D action souls-inspired side-scroller that's getting some good user reviews.Read the full article on GamingOnLinux.
🔗 Source: https://www.gamingonlinux.com/2026/09/2d-souls-inspired-roguelite-rogue-blight-looks-great-and-its-out-now/
#linux
👉@sysadminoff
https://gamingonlinux.com/2026/09/2d-souls-inspired-roguelite-rogue-blight-looks-great-and-its-out-now
GamingOnLinux
2D souls-inspired roguelite Rogue Blight looks great and it's out now
Rogue Blight recently released with Linux support - a great looking 2D action souls-inspired side-scroller that's getting some good user reviews.
📰 Jellyfin 12.0 Media Server Released with Faster Database, Modern UI
Jellyfin 12.0 is out with a faster database backend, Modern UI by default, FFmpeg 8.1, expanded books and comics features, and security fixes.
🔗 Source: /
#ffmpeg
👉@sysadminoff
https://linuxiac.com/jellyfin-12-0-media-server-released-with-faster-database-modern-ui
Jellyfin 12.0 is out with a faster database backend, Modern UI by default, FFmpeg 8.1, expanded books and comics features, and security fixes.
🔗 Source: /
#ffmpeg
👉@sysadminoff
https://linuxiac.com/jellyfin-12-0-media-server-released-with-faster-database-modern-ui
Linuxiac
Jellyfin 12.0 Media Server Released with Faster Database, Modern UI
Jellyfin 12.0 is out with a faster database backend, Modern UI by default, FFmpeg 8.1, expanded books and comics features, and security fixes.