A WordPress flaw in the wild is under attack & Microsoft releases more software for Linux. Plus a sneak peak at Google I/O & what new features might land in Android M.

Direct Download:

MP3 Audio | OGG Audio | Video | HD Video | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | Video Feed | Torrent Feed

Become a supporter on Patreon

Show Notes:

Actively exploited WordPress bug puts millions of sites at risk | Ars Technica

The cross-site scripting (XSS) vulnerability resides in genericons, a package that’s part of a WordPress theme known as Twenty Fifteen that’s installed by default, according to a blog post published Wednesday by security firm Sucuri. The XSS vulnerability is “DOM based,” meaning it resides in the document object model that’s responsible for how text, images, headers, and links are represented in a browser. The Open Web Application Security Project has much more about DOM-based XSS vulnerabilities here.

Microsoft Releases PowerShell DSC For Linux – Slashdot

jones_supa writes: Microsoft is announcing that PowerShell Desired State Configuration (DSC) for Linux is available for download in form of RPM and DEB packages. DSC is a new management platform that provides a set of PowerShell extensions that you can use to declaratively specify how you want your software environment to be configured. You can now use the DSC platform to manage the configuration of both Windows and Linux workloads with the PowerShell interface. Microsoft says that bringing DSC to Linux is another step in the company’s “broader commitment to common management of heterogeneous assets in your datacenter or the public cloud.” Adds reader benjymouse: DSC is in the same space as Chef and Puppet (and others); but unlike those, Microsofts attempts to build a platform/infrastructure based on industry standards like OMI to allow DSC to configure and control both Windows, Linux and other OSes as well as network equipment like switches, etc.

Confirmed: Media Center is Dead – Thurrott.com

“Due to decreased usage, Windows Media Center will not be part of Windows 10,” Mr. Aul tweeted recently.

Digging into the Google I/O 2015 schedule: Android M, voice access, and more | Ars Technica

Google has posted the schedule for Google I/O 2015. While the company tries not to give away too many things with the early schedule, the release always ends up being full of new information. We dug into all the session descriptions, and here’s all the info we could squeeze out of it.

Android M—It looks like Android M, the next version of Android, will be at the show. One sandbox session is called “Android for Work Update” and says, “Android M is bringing the power of Android to all kinds of workplaces.” While full Android releases have alphabetical snack code names, “Android L” launched last year at Google I/O, and the release was a developer preview for what would eventually become Lollipop. So it sounds like Android [letter] is a new pattern that indicates a dev preview.