The Linux kernel update that closed CVE-2025-40204 was a surgical but important hardening: the SCTP code was performing a MAC (message authentication code) comparison using a timing‑dependent routine, and maintainers replaced that comparison with a constant‑time helper to remove a potential...
Security researchers have observed a coordinated, large‑scale reconnaissance campaign probing Microsoft Remote Desktop services that began as a sudden one‑day spike and escalated into a torrent of scans — a pattern that looks less like opportunistic background noise and more like deliberate...
