Experimental News Clipping Site

Tag: memory-safe programming languages

  • Microsoft Security Blog: Microsoft’s Secure by Design journey: One year of success

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/04/17/microsofts-secure-by-design-journey-one-year-of-success/ Source: Microsoft Security Blog Title: Microsoft’s Secure by Design journey: One year of success Feedly Summary: Read about the initiatives Microsoft has undertaken over the past 18 months to support secure by design, secure by default, and secure in operations objectives as part of our SFI Initiative. The post Microsoft’s Secure by…

  • The Register: Strap in, get ready for more Rust drivers in Linux kernel

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/10/rust_drivers_expected_to_become/ Source: The Register Title: Strap in, get ready for more Rust drivers in Linux kernel Feedly Summary: Likening memory safety bugs to smallpox may not soothe sensitive C coders Rust is alive and well in the Linux kernel and is expected to translate into noticeable benefits shortly, though its integration with the…

  • Google Online Security Blog: Securing tomorrow’s software: the need for memory safety standards

    —

    by

    Kurt Seifried
    in

    Source URL: http://security.googleblog.com/2025/02/securing-tomorrows-software-need-for.html Source: Google Online Security Blog Title: Securing tomorrow’s software: the need for memory safety standards Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the critical issue of memory safety vulnerabilities and advocates for a shift towards secure-by-design practices to enhance overall security across the software industry. It emphasizes the…

  • The Register: The Feds want developers to stop coding ‘unforgivable’ buffer overflow vulns

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/13/fbi_cisa_unforgivable_buffer_overflow/ Source: The Register Title: The Feds want developers to stop coding ‘unforgivable’ buffer overflow vulns Feedly Summary: FBI, CISA harrumph at Microsoft and VMware in call for coders to quit baking avoidable defects into stuff US authorities have labelled buffer overflow vulnerabilities “unforgivable defects”, pointed to the presence of the holes in…

  • Alerts: CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/12/cisa-and-fbi-warn-malicious-cyber-actors-using-buffer-overflow-vulnerabilities-compromise-software Source: Alerts Title: CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software Feedly Summary: CISA and the Federal Bureau of Investigation (FBI) have released a Secure by Design Alert, Eliminating Buffer Overflow Vulnerabilities, as part of their cooperative Secure by Design Alert series—an ongoing series aimed…

  • Hacker News: It is time to standardize principles and practices for software memory safety

    —

    by

    Kurt Seifried
    in

    Source URL: https://cacm.acm.org/opinion/it-is-time-to-standardize-principles-and-practices-for-software-memory-safety/ Source: Hacker News Title: It is time to standardize principles and practices for software memory safety Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a comprehensive exploration of the endemic memory-safety vulnerabilities in software, their implications for security, and the necessity for memory-safety standardization to enhance software security…

  • Alerts: CISA and FBI Release Updated Guidance on Product Security Bad Practices

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/17/cisa-and-fbi-release-updated-guidance-product-security-bad-practices Source: Alerts Title: CISA and FBI Release Updated Guidance on Product Security Bad Practices Feedly Summary: In partnership with the Federal Bureau of Investigation (FBI), CISA released an update to joint guidance Product Security Bad Practices in furtherance of CISA’s Secure by Design initiative. This updated guidance incorporates public comments CISA received…

  • Hacker News: Feds: Critical Software Must Drop C/C++ by 2026 or Face Risk

    —

    by

    system automation
    in

    Source URL: https://thenewstack.io/feds-critical-software-must-drop-c-c-by-2026-or-face-risk/ Source: Hacker News Title: Feds: Critical Software Must Drop C/C++ by 2026 or Face Risk Feedly Summary: Comments AI Summary and Description: Yes Summary: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have issued a critical report warning software manufacturers about dangerous security practices, especially concerning the use of…