Linux LUKS flaw, Android verification abuse, and GitHub secret scanning tips

A critical vulnerability in Linux kernels version 6.9 and later causes LUKS disk encryption keys to remain in memory during suspend mode, leaving them potentially exposed to physical attackers. Security researchers warn that users relying on LUKS-encrypted systems should avoid suspend and opt for full shutdowns until an official patch is released. Separately, a new Android threat has been identified where attackers exploit the developer verification process to socially engineer users into installing malware, undermining trust in official app distribution channels. GitHub has also published a practical guide to help developers manage secret scanning alerts at scale, addressing the growing challenge of secrets management in codebases. Together, these developments highlight active security risks across operating systems, mobile platforms, and developer workflows.