Vranac Srdjan

🔴🇫🇷 ALERTE INFO | BIENVENUE CHEZ LES SOCIALISTES ET LES COMMUNISTES L'Assemblée nationale vient d'ADOPTER un amendement socialiste instaurant une nouvelle TAXE SUR LES DONNÉES INTERNET ! 💸 0,055 € par gigaoctet transmis aux internautes français, soit 55 € par téraoctet. Cette taxe, payée par les fournisseurs de contenus numériques, viserait notamment Google, Meta, Amazon et Netflix. Les socialistes espèrent récupérer 10 MILLIARDS D'EUROS par an grâce à cette mesure. Officiellement, ce sont les entreprises qui paieront. Mais rien ne garantit qu'elles ne répercuteront pas ce coût sur les abonnements des consommateurs. Encore une nouvelle taxe ! (Officiel Assemblée Nationale)

Netherlands: Dutch police have publicly identified five Serbian suspects wanted for the €40 million jewellery robbery at the TEFAF art fair in Maastricht in June 2022, placing all five on Europe's Most Wanted list. The suspects are Aleksandar Cenic, Aleksandar Stojiljkovic, Dusko Dimitrijevic, Bratislav Stojanovic and Ninoslava Jovic. Four men dressed in suits and flat caps smashed display cases with sledgehammers, threatened visitors with firearms and escaped on electric scooters. Investigators believe the group is hiding around Niš or Belgrade, beyond the reach of Dutch extradition requests because Serbia does not extradite its citizens. Three stolen diamonds have since been recovered or traced in Hong Kong, Israel and Botswana. Newly obtained Sky ECC messages have also linked at least one suspect to an attempted robbery of the same fair in March 2020. Dutch prosecutors are offering €20,000 for information leading to an arrest, while an insurer has offered a separate £500,000 reward.

🇧🇪🇪🇺 Europe is turning the page on energy dependence and rebuilding its energy infrastructure. Belgium's nuclear power is coming back for the winter. Two reactors are returning to the grid to provide about 2 GW of stable, low-carbon electricity. That is enough for millions of homes, and it arrives when solar output is lowest and demand is highest. Both reactors were due to close in 2025 under a 2003 phase-out law. Instead, their lifetimes were extended to 2035 with the European Commission's approval, and Parliament has since scrapped the phase-out law altogether. The state is now negotiating to take over the entire nuclear fleet. Belgium is not alone. 🇮🇹 Italy has passed a law opening the way back to nuclear power, almost 40 years after leaving it. Groundwork has begun on 🇵🇱 Poland's first nuclear plant. 🇨🇿 Czechia, 🇸🇪 Sweden and 🇳🇱 the Netherlands are planning new reactors. Even 🇪🇸 Spain, which still plans to exit nuclear by 2035, has extended its largest plant to 2030. More home-grown power means less dependence on imported fossil fuels, and a Europe that is more resilient to external shocks. ⚡

During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. More details on the patch and mitigations below: patchtheplanet.org/brotli