bugs

The U.S. Must Lead the Global Fight against Superbugs

Antimicrobial resistance could claim 39 million lives by 2050, yet the pipeline for new antibiotics is drying up. U.S. policy makers can help fix it




bugs

LXer: PipeWire 1.2.5 Fixes Memory Leak and Audio Bugs

Published at LXer: PipeWire 1.2.5 multimedia framework is out now, fixing critical bugs, enhances FreeBSD support, and improves JACK API memory management. Read More......



  • Syndicated Linux News

bugs

I Prefer Dark Mode Because Light Attracts Bugs

Read to the end for a tiny yet extremely majestic lion. In today’s edition: The truth behind the classic “average person eats 3 spiders per year” factoid. Tips that’ll make organizing your taxonomies a little less, uh… taxing. America’s finest news source, The Onion, is now powered by our old friend WP. Hot Off The […]




bugs

Where food inspectors in Topeka found bed bugs, moldy icing and plumbing issues




bugs

Battling Bad Bugs with Botanicals

While natural and botanical methods of preservation have been in use for centuries, the modern food processing system has relied heavily on synthetic food preservatives, such as nitrates, benzoates, sulfites, sorbates, and others. 




bugs

Ask Sam: What Are All These Ladybugs Doing In My House?

Every other Friday on Morning Edition, Outside/In host Sam Evans-Brown tackles a question from a listener. Suzanne from Concord asks: “I’m trying to find out why ladybugs are in my house in the spring, and did they all live together in my house over the winter? And if they did that, what did they eat? Or do they eat? Do they hibernate? And now they’re dropping dead, I mean out of six ladybugs, there are two alive.” Note: This eidition of Ask Sam originally aired in March of 2020. What you are most likely seeing is called (among many other things) the Harlequin Ladybeetle . It gets that name (as well as all its others) because it has a lot of different presentations — many different numbers and arrangements of spots — and it's an invasive species from Asia. “It’s basically been released as a biological control agent, in multiple places,” says William Fincham, who researches ladybugs with the UK Centre for Ecology and Hydrology, “In the U.S, in multiple places in Europe as well.” Even




bugs

CERT-In finds multiple bugs in Microsoft Edge, advises users to update

"Multiple vulnerabilities have been reported in Microsoft Edge (chromium-based) which could allow the remote attacker to cause a denial of service condition, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system," said the CERT-In advisory.




bugs

From Bugs to Breaches: 25 Significant CVEs As MITRE CVE Turns 25

Twenty five years after the launch of CVE, the Tenable Security Response Team has handpicked 25 vulnerabilities that stand out for their significance.

Background

In January 1999, David E. Mann and Steven M. Christey published the paper “Towards a Common Enumeration of Vulnerabilities” describing an effort to create interoperability between multiple vulnerability databases. To achieve a common taxonomy for vulnerabilities and exposures, they proposed Common Vulnerabilities and Exposures (CVE). In September 1999, the MITRE Corporation finalized the first CVE list, which included 321 records. CVE was revealed to the world the following month.

As of October 2024, there are over 240,000 CVEs. including many that have significantly impacted consumers, businesses and governments. The Tenable Security Response Team has chosen to highlight the following 25 significant vulnerabilities, followed by links to product coverage for Tenable customers to utilize.

25 Significant CVEs

CVE-1999-0211: SunOS Arbitrary Read/Write Vulnerability

Arbitrary ReadArbitrary WriteLocalCritical1999Why it’s significant: To our knowledge, there is no formally recognized “first CVE.” However, the GitHub repository for CVE.org shows that the first CVE submitted was CVE-1999-0211 on September 29, 1999 at 12:00AM. Because it was the first one, we’ve chosen to highlight it. The vulnerability was first identified in 1991 and a revised patch was issued in 1994.

CVE-2010-2568: Windows Shell Remote Code Execution Vulnerability

Remote Code ExecutionExploitedZero-DayLocalStuxnetHigh2010Why it’s significant: Regarded as one of the most sophisticated cyberespionage tools ever created, Stuxnet was designed to target SCADA systems in industrial environments to reportedly sabotage Iran's nuclear program. Stuxnet exploited CVE-2010-2568 as one of its initial infection vectors, spreading via removable drives. Once a compromised USB drive was inserted into a system, Stuxnet was executed automatically via the vulnerability, infecting the host machine, propagating to other systems through network shares and additional USB drives.

CVE-2014-0160: OpenSSL Information Disclosure Vulnerability

HeartbleedInformation DisclosureExploitedZero-DayNetworkCybercriminalsHigh2014Why it’s significant: Dubbed “Heartbleed” because it was found in the Heartbeat extension of OpenSSL, this vulnerability allows an attacker, without prior authentication, to send a malicious heartbeat request with a false length field, claiming the packet contains more data than it does. The receiving system would then return data from its memory extending beyond the legitimate request, which may include sensitive private data, such as server keys and user credentials. OpenSSL is used by millions of websites, cloud services, and even VPN software, for encryption, making Heartbleed one of the most widespread vulnerabilities at the time.

CVE-2014-6271: GNU Bash Shellshock Remote Code Execution Vulnerability

Shellshock Bash Bug Remote Code ExecutionExploitedZero-DayNetworkCybercriminalsCritical2014Why it’s significant: An attacker could craft an environment variable that contained both a function definition and additional malicious code. When Bash, a command interpreter used by Unix-based systems including Linux and macOS, processed this variable, it would execute the function, but also run the arbitrary commands appended after the function definition. “Shellshock” quickly became one of the most severe vulnerabilities discovered, comparable to Heartbleed’s potential impact. Attackers could exploit Shellshock to gain full control of vulnerable systems, leading to data breaches, service interruptions and malware deployment. The impact extended far beyond local systems. Bash is used by numerous services, particularly web servers, via CGI scripts to handle HTTP requests.

CVE-2015-5119: Adobe Flash Player Use After Free

Remote Code Execution Denial-of-ServiceExploitedZero-DayCybercriminalsAPT GroupsCritical2015Why it’s significant: Discovered during the Hacking Team data breach, it was quickly weaponized, appearing in multiple exploit kits. CVE-2015-5119 is a use-after-free flaw in Flash’s ActionScript ByteArray class, allowing attackers to execute arbitrary code by tricking users into visiting a compromised website. It was quickly integrated into attack frameworks used by Advanced Persistent Threat (APT) groups like APT3, APT18, and Fancy Bear (APT28). These groups, with ties to China and Russia, used the vulnerability to spy on and steal data from governments and corporations. Fancy Bear has been associated with nation-state cyber warfare, exploiting Flash vulnerabilities for political and military intelligence information gathering​. This flaw, along with several other Flash vulnerabilities, highlighted Flash’s risks, accelerating its eventual phase-out.

CVE-2017-11882: Microsoft Office Equation Editor Remote Code Execution Vulnerability

Remote Code ExecutionExploitedNetworkCybercriminalsAPT GroupsHigh2017Why it’s significant: The vulnerability existed for 17 years in Equation Editor (EQNEDT32.EXE), a Microsoft Office legacy component used to insert and edit complex mathematical equations within documents. Once CVE-2017-11882 became public, cybercriminals and APT groups included it in maliciously crafted Office files. It became one of 2018’s most exploited vulnerabilities and continues to be utilized by various threat actors including SideWinder.

CVE-2017-0144: Windows SMB Remote Code Execution Vulnerability

EternalBlueRemote Code ExecutionExploitedNetworkWannaCry NotPetyaHigh2017Why it’s significant: CVE-2017-0144 was discovered by the National Security Agency (NSA) and leaked by a hacker group known as Shadow Brokers, making it widely accessible. Dubbed “EternalBlue,” its capacity to propagate laterally through networks, often infecting unpatched machines without human interaction, made it highly dangerous. It was weaponized in the WannaCry ransomware attack in May 2017 and spread globally. It was reused by NotPetya, a data-destroying wiper originally disguised as ransomware. NotPetya targeted companies in Ukraine before spreading worldwide. This made it one of history’s costliest cyberattacks.

CVE-2017-5638: Apache Struts 2 Jakarta Multipart Parser Remote Code Execution Vulnerability

Remote Code ExecutionExploitedNetworkEquifax BreachCritical2017Why it’s significant: This vulnerability affects the Jakarta Multipart Parser in Apache Struts 2, a popular framework for building Java web applications. An attacker can exploit it by injecting malicious code into HTTP headers during file uploads, resulting in remote code execution (RCE), giving attackers control of the web server. CVE-2017-5638 was used in the Equifax breach, where personal and financial data of 147 million people was stolen, emphasizing the importance of patching widely-used frameworks, particularly in enterprise environments, to prevent catastrophic data breaches.

CVE-2019-0708: Remote Desktop Services Remote Code Execution Vulnerability

BlueKeep DejaBlue Remote Code ExecutionExploitedNetworkRansomware GroupsCybercriminalsCritical2019Why it’s significant: Dubbed "BlueKeep," this vulnerability in Windows Remote Desktop Services (RDS) was significant for its potential for widespread, self-propagating attacks, similar to the infamous WannaCry ransomware. An attacker could exploit this flaw to execute arbitrary code and take full control of a machine through Remote Desktop Protocol (RDP), a common method for remote administration. BlueKeep was featured in the Top Routinely Exploited Vulnerabilities list in 2022 and was exploited by affiliates of the LockBit ransomware group.

CVE-2020-0796: Windows SMBv3 Client/Server Remote Code Execution Vulnerability

SMBGhost EternalDarknessRemote Code ExecutionExploited NetworkCybercriminalsRansomware GroupsCritical2020Why it’s significant: Its discovery evoked memories of EternalBlue because of the potential for it to be wormable, which is what led to it becoming a named vulnerability. Researchers found it trivial to identify the flaw and develop proof-of-concept (PoC) exploits for it. It was exploited in the wild by cybercriminals, including the Conti ransomware group and its affiliates.

CVE-2019-19781: Citrix ADC and Gateway Remote Code Execution Vulnerability

Path TraversalExploitedNetworkAPT GroupsRansomware GroupsCybercriminalsCritical2019Why it’s significant: This vulnerability in Citrix Application Delivery Controller (ADC) and Citrix Gateway is significant due to its rapid exploitation by multiple threat actors, including state-sponsored groups and ransomware affiliates. By sending crafted HTTP requests, attackers could gain RCE and take full control of affected devices to install malware or steal data. The vulnerability remained unpatched for a month after its disclosure, leading to widespread exploitation. Unpatched systems are still being targeted today, highlighting the risk of ignoring known vulnerabilities.

CVE-2019-10149: Exim Remote Command Execution Vulnerability

Remote Command ExecutionExploitedNetworkAPT GroupsCybercriminalsCritical2019Why it’s significant: This vulnerability in Exim, a popular Mail Transfer Agent, allows attackers to execute arbitrary commands with root privileges simply by sending a specially crafted email. The availability of public exploits led to widespread scanning and exploitation of vulnerable Exim servers, with attackers using compromised systems to install cryptocurrency miners (cryptominers), launch internal attacks or establish persistent backdoors. The NSA warned that state-sponsored actors were actively exploiting this flaw to compromise email servers and gather sensitive information.

CVE-2020-1472: Netlogon Elevation of Privilege Vulnerability

ZerologonElevation of PrivilegeExploitedLocalRansomware GroupsAPT GroupsCybercriminalsCritical2020Why it’s significant: This vulnerability in the Netlogon Remote Protocol (MS-NRPC) allows attackers with network access to a Windows domain controller to reset its password, enabling them to impersonate the domain controller and potentially take over the entire domain. Its severity was underscored when Microsoft reported active exploitation less than two months after disclosure and the Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive to patch the flaw. Despite available patches, it continues to be exploited by ransomware groups, APT groups, and others, highlighting its broad and ongoing impact on network security.

CVE-2017-5753: CPU Speculative Execution Bounds Check Bypass Vulnerability

SpectreSpeculative Execution Bounds Check BypassLocalMedium2018Why it’s significant: In a speculative execution process, an idle microprocessor waiting to receive data speculates what the next instruction might be. Although meant to enhance performance, this process became a fundamental design flaw affecting the security of numerous modern processors. In Spectre’s case, an attacker-controlled process could read arbitrary memory belonging to another process. Since its discovery in January 2018, Spectre has affected nearly all modern processors from Intel, AMD and ARM. While it’s difficult to execute a successful Spectre attack, fully remediating the root cause is hard and requires microcode as well as operating system updates to mitigate the risk.

CVE-2017-5754: CPU Speculative Execution Rogue Data Cache Load Vulnerability

MeltdownSpeculative Execution Rogue Data Cache LoadLocalHigh2018Why it’s significant: Meltdown, another speculative execution vulnerability released alongside Spectre, can allow a userspace program to read privileged kernel memory. It exploits a race condition between the memory access and privilege checking while speculatively executing instructions. Meltdown impacts desktop, laptop and cloud systems and, according to researchers, may affect nearly every Intel processor released since 1995. With a wide reaching impact, both Spectre and Meltdown sparked major interest in a largely unexplored security area. The result: a slew of research and vulnerability discoveries, many of which were also given names and logos. While there’s no evidence of a successful Meltdown exploit, the discovery showcased the risk of security boundaries enforced by hardware.

CVE-2021-36942: Windows LSA Spoofing Vulnerability

PetitPotamSpoofingExploitedZero-DayNetworkRansomware GroupsHigh2021Why it’s significant: This vulnerability can force domain controllers to authenticate to an attacker-controlled destination. Shortly after a PoC was disclosed, it was adopted by ransomware groups like LockFile, which have chained Microsoft Exchange vulnerabilities with PetitPotam to take over domain controllers. Patched in the August 2021 Patch Tuesday release, the initial patch for CVE-2021-36942 only partially mitigated the issue, with Microsoft pushing general mitigation guidance for defending against NTLM Relay Attacks.

CVE-2022-30190: Microsoft Windows Support Diagnostic Tool Remote Code Execution

FollinaRemote Code ExecutionExploitedZero-DayLocalQakbot RemcosHigh2022Why it’s significant: Follina, a zero-day RCE vulnerability in MSDT impacting several versions of Microsoft Office, was later designated CVE-2022-30190. After public disclosure in May 2022, Microsoft patched Follina in the June 2022 Patch Tuesday. After disclosure, reports suggested that Microsoft dismissed the flaw’s initial disclosure as early as April 2022. Follina has been widely adopted by threat actors and was associated with some of 2021’s top malware strains in a joint cybersecurity advisory from CISA and the Australian Cyber Security Centre (ACSC), operating under the Australian Signals Directorate (ASD).

CVE-2021-44228: Apache Log4j Remote Code Execution Vulnerability

Log4ShellRemote Code ExecutionExploitedNetworkCybercriminalsAPT GroupsCritical2021Why it’s significant: Log4j, a Java logging library widely used across many products and services, created a large attack surface. The discovery of CVE-2021-44228, dubbed “Log4Shell,” caused great concern, as exploitation simply requires sending a specially crafted request to a server running a vulnerable version of Log4j. After its disclosure, Log4Shell was exploited in attacks by cryptominers, DDoS botnets, ransomware groups and APT groups including those affiliated with the Iranian Islamic Revolutionary Guard Corps (IRGC).

CVE-2021-26855: Microsoft Exchange Server Server-Side Request Forgery Vulnerability

ProxyLogonServer-Side Request Forgery (SSRF)ExploitedZero-DayNetworkAPT Groups Ransomware GroupsCybercriminalsCritical2021Why it’s significant: CVE-2021-26855 was discovered as a zero-day along with four other vulnerabilities in Microsoft Exchange Server. It was exploited by a nation-state threat actor dubbed HAFNIUM. By sending a specially crafted HTTP request to a vulnerable Exchange Server, an attacker could steal the contents of user mailboxes using ProxyLogon. Outside of HAFNIUM, ProxyLogon has been used by ransomware groups and other cybercriminals. Its discovery created a domino effect, as other Exchange Server flaws, including ProxyShell and ProxyNotShell, were discovered, disclosed and subsequently exploited by attackers.

CVE-2021-34527: Microsoft Windows Print Spooler Remote Code Execution Vulnerability

PrintNightmareRemote Code ExecutionExploitedLocalAPT GroupsRansomware GroupsCybercriminalsHigh2021Why it’s significant: This RCE in the ubiquitous Windows Print Spooler could grant authenticated attackers arbitrary code execution privileges as SYSTEM. There was confusion surrounding the disclosure of this flaw, identified as CVE-2021-34527 and dubbed “PrintNightmare.” Originally, CVE-2021-1675, disclosed in June 2021, was believed to be the real PrintNightmare. However, Microsoft noted CVE-2021-1675 is “similar but distinct” from PrintNightmare. Since its disclosure, several Print Spooler vulnerabilities were disclosed, while a variety of attackers, including the Magniber and Vice Society ransomware groups exploited PrintNightmare.

CVE-2021-27101: Accellion File Transfer Appliance (FTA) SQL Injection Vulnerability

SQL InjectionExploitedZero-DayNetworkRansomware GroupCritical2021Why it’s significant: The file transfer appliance from Accellion (now known as Kiteworks) was exploited as a zero-day by the CLOP ransomware group between December 2020 and early 2021. Mandiant, hired by Kiteworks to investigate, determined that CLOP (aka UNC2546) exploited several flaws in FTA including CVE-2021-27101. This was CLOP’s first foray into targeting file transfer solutions, as they provide an easy avenue for the exfiltration of sensitive data that can be used to facilitate extortion.

CVE-2023-34362: Progress Software MOVEit Transfer SQL Injection Vulnerability

SQL InjectionExploitedZero-DayNetworkRansomware GroupCritical2023Why it’s significant: CLOP’s targeting of file transfer solutions culminated in the discovery of CVE-2023-34362, a zero-day in Progress Software’s MOVEit Transfer, a secure managed file transfer software. CLOP targeted MOVEit in May 2023 and the ramifications are still felt today. According to research conducted by Emsisoft, 2,773 organizations have been impacted and information on over 95 million individuals has been exposed as of October 2024. This attack underscored the value in targeting file transfer solutions.

CVE-2023-4966: Citrix NetScaler and ADC Gateway Sensitive Information Disclosure Vulnerability

CitrixBleedInformation DisclosureExploitedZero-DayNetworkRansomware GroupsAPT GroupsCritical2023Why it’s significant: CVE-2023-4966, also known as “CitrixBleed,” is very simple to exploit. An unauthenticated attacker could send a specially crafted request to a vulnerable NetScaler ADC or Gateway endpoint and obtain valid session tokens from the device’s memory. These session tokens could be replayed back to bypass authentication, and would persist even after the available patches had been applied. CitrixBleed saw mass exploitation after its disclosure, and ransomware groups like LockBit 3.0 and Medusa adopted it.

CVE-2023-2868: Barracuda Email Security Gateway (ESG) Remote Command Injection Vulnerability

Remote Command InjectionExploitedZero-DayNetworkAPT GroupsCritical2023Why it’s significant: Researchers found evidence of zero-day exploitation of CVE-2023-2868 in October 2022 by the APT group UNC4841. While Barracuda released patches in May 2023, the FBI issued a flash alert in August 2023 declaring them “ineffective,” stating that “active intrusions” were being observed on patched systems. This led to Barracuda making an unprecedented recommendation for the “immediate replacement of compromised ESG appliances, regardless of patch level.”

CVE-2024-3094: XZ Utils Embedded Malicious Code Vulnerability

Embedded Malicious CodeZero-DayUnknown Threat Actor (Jia Tan)Critical2024Why it’s significant: CVE-2024-3094 is not a traditional vulnerability. It is a CVE assigned for a supply-chain backdoor discovered in XZ Utils, a compression library found in various Linux distributions. Developer Andres Freund discovered the backdoor while investigating SSH performance issues. CVE-2024-3094 highlighted a coordinated supply chain attack by an unknown individual that contributed to the XZ GitHub project for two and a half years, gaining the trust of the developer before introducing the backdoor. The outcome of this supply chain attack could have been worse were it not for Freund’s discovery.

Identifying affected systems

A list of Tenable plugins for these vulnerabilities can be found on the individual CVE pages:





bugs

SE-Radio-Episode-280-Gerald-Weinberg-on-Bugs-Errors-and-Software-Quality

Host Marcus Blankenship talks with Gerald Weinberg about his new book, Errors: Bugs, Boo-boos, and Blunders, focusing on why programmers make errors, how teams can improve their software, and how management should think of and discuss errors.




bugs

Episode 441 Shipping Software - With Bugs

James Smith, CEO and co-founder of Bugsnag discusses “Why it is ok to ship your software with Bugs.”




bugs

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager (NTLM) and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 2024. Of the 90 flaws, four are rated Critical, 85 are rated Important, and one is rated Moderate in




bugs

Ask Smithsonian: Why Do Bugs Die on Their Backs?

The science behind going belly up




bugs

Quest for Bugs – The Constrained-Random Predicament

Optimize Regression Suite, Accelerate Coverage Closure, and Increase hit count of rare bins using Xcelium Machine Learning. It is easy to use and has no learning curve for existing Xcelium customers. Xcelium Machine Learning Technology helps you discover hidden bugs when used early in your design verification cycle.(read more)




bugs

Coalesce Xcelium Apps to Maximize Performance by 10X and Catch More Bugs

Xcelium Simulator has been in the industry for years and is the leading high-performance simulation platform. As designs are getting more and more complex and verification is taking longer than ever, the need of the hour is plug-and-play apps that ar...(read more)




bugs

Richer Houses Home to Wider Range of Bugs

Title: Richer Houses Home to Wider Range of Bugs
Category: Health News
Created: 8/19/2016 12:00:00 AM
Last Editorial Review: 8/22/2016 12:00:00 AM




bugs

Ancient Treatment May Help Fight 'Superbugs'

Title: Ancient Treatment May Help Fight 'Superbugs'
Category: Health News
Created: 8/29/2018 12:00:00 AM
Last Editorial Review: 8/30/2018 12:00:00 AM




bugs

Biden Administration Should Prioritize Fight Against Superbugs

The Pew Charitable Trusts joined dozens of research, health care, and nonprofit stakeholders in urging President-elect Joe Biden to prioritize and strengthen the national response to antibiotic resistance.




bugs

4 Key Priorities for Fighting Superbugs in 2021

Over the past year, COVID-19 has taken a grave toll in lives as well as on medical and health care systems worldwide. The pandemic has laid bare the importance of public health readiness and the myriad consequences when such a crisis strikes an unprepared population.




bugs

Artificial Intelligence Help Prevent Superbugs

Researchers have crafted an medlinkartificial intelligence (AI)/medlink model capable of discerning the optimal drug combination and timing for treating a bacterial infection.




bugs

Olympus Company Develops Improved Duodenoscopes to Avoid the Spread of Superbugs

After receiving several reports regarding deadly patient infections due to contaminated duodenoscopes, Japan-based Olympus company has announced that




bugs

Symbiotic Security helps developers find bugs as they code

Symbiotic Security, which is announcing a $3 million seed round today, watches over developers as they code and points out potential security issues in real time. Other companies do this, but Symbiotic also emphasizes the next step: teaching developers to avoid these bugs in the first place. Ideally, this means developers will fix security bugs […]

© 2024 TechCrunch. All rights reserved. For personal use only.




bugs

All about insects : an illustrated guide to bugs and creepy-crawlies / [author: Polly Cheeseman ; illustrator: Iris Deppe]

Cheeseman, Polly, author




bugs

Who ate all the bugs? / Matty Long

Long, Matty, author, artist




bugs

Combating superbugs: How Indian drugmakers can address the global shortfall in antibiotic development

Emphasising the importance of expanding access to high-burden regions, the report calls for strategic initiatives to enable the production and distribution of life-saving antibiotics and antifungals




bugs

Losing ground in the war on superbugs

Rising drug resistance has left Indian doctors struggling to treat complex infections.



  • Policy & Issues

bugs

This week’s Shutterbugs




bugs

[ Politics ] Open Question : Why was that conservative Yosemite Sam always after that liberal Bugs Bunny?

Why did right-winger Yosemite Sam have problem with the leftist Bugs Bunny?




bugs

Smithsonian entomologist Gary Hevel gives information and advice about stinkbugs in your home

Here come the stinkbugs...With the cooler temperatures of fall the brown marmorated stinkbug begins a determined quest to find a warm place to spend the winter. Crowding around window screens and searching for other ways to get inside, homeowners in the United States will share their indoor living space this winter with millions of brown marmorated stinkbugs. In this video Gary Hevel, an entomolgist at the Smithsonian's National Museum of Natural History, shares some information about these interesting creatures, as well as some advice about how to deal with those that inevitably gain entry to your home.

The post Smithsonian entomologist Gary Hevel gives information and advice about stinkbugs in your home appeared first on Smithsonian Insider.




bugs

Coby mp3 player bugs




bugs

Video: Why you don't use gasoline and matches to kill bugs in your backyard.




bugs

Killing superbugs with star-shaped polymers, not antibiotics

The study, published today in Nature Microbiology, holds promise for a new treatment method against antibiotic-resistant bacteria (commonly known as superbugs).

read more



  • Health & Medicine

bugs

More researchers join effort to control stink bugs organically

Multi-university project asks how organic farmers can control these pests and protect their crops.



  • Organic Farming & Gardening

bugs

These natural pesticides won't harm good bugs

Before reaching for commercial pesticides, try these solutions first to keep bees, butterflies and beneficial bugs safe.



  • Organic Farming & Gardening

bugs

Shake off the bah-humbugs with Dial-a-Carol

Need holiday cheer? Call Dial-a-Carol 24/7 for a festive boost.




bugs

You have a personal cloud of particles and bugs that follows you everywhere

Each of us is a cloud of microscopic particles, chemicals and microorganisms swirling around us that's always there. It's called an exposome, and it's unique.



  • Fitness & Well-Being

bugs

IKEA is betting bugs are the future of burgers

IKEA's innovation lab, SPACE10, has been busy updating meatballs, burgers and hotdogs to focus on bugs, algae and plants.




bugs

Your brain on bugs: Can you ID these insects?

See if you know the difference between a bedbug, a beetle and these other creepy-crawlies.




bugs

How to attract ladybugs to your garden

Are aphids and other pests wrecking your garden? Partner up with ladybugs to stop the carnage.



  • Organic Farming & Gardening

bugs

Invasive stink bugs swarm across the U.S.

Brown marmorated stink bugs are wreaking havoc — and just reeking — as they spread throughout the country.




bugs

Bugs are getting hungrier and hungrier

As climate change makes insects hungrier, they're taking a bigger bite out the world's food supply.



  • Climate & Weather

bugs

Meet the entrepreneur who's betting you'll eat bugs

Harman Johar is an entomologist and businessman who believes this acquired taste is sensible, stylish and sustainable.




bugs

Why bugs belong in your house

A human home inevitably contains about 100 kinds of arthropods, research shows, but most are harmless and some can be helpful.




bugs

Where do bedbugs come from?

Bed bugs have been documented as early as the first century. Originating in tropical climates, bed bugs are excellent hitchhikers, stowing away in luggage, hand




bugs

Samurai wasps could be our secret weapon against invasive stink bugs

While stink bugs ravage our food crops, samurai wasps — another sneaky insect from Japan — are helping us keep them in check.




bugs

Why do ladybugs gather in massive swarms?

These brightly colored beetles come together in huge groups, but it's not just to cuddle.




bugs

Bugs experience chronic pain, too

Scientists have found the genetic mechanism behind chronic pain in bugs.



  • Research & Innovations

bugs

Litterbugs get profiled

A new art project uses DNA to get an idea of who's tossing butts and other litter.



  • Arts & Culture

bugs

Islands of plastic give bugs a new place to breed in open ocean

The great Pacific garage patch is giving sea striders a place to breed out on the open ocean, changing the natural environment there, new research suggests.



  • Wilderness & Resources

bugs

If you don't like bugs, you should love spiders

Spiders eat several hundred million tons of insects per year, a new study finds, a global feast rivaling the yearly meat intake of humans.