The Morning Dev

Only the news worth knowing

‹›
 
  • AAPL 344.17 ▼ 1.53%
  • MSFT 535.93 ▼ 3.58%
  • NVDA 181.60 ▼ 9.26%
  • GOOGL 282.57 ▼ 2.20%
  • AMZN 260.21 ▼ 2.19%
  • META 605.08 ▼ 3.96%
  • TSLA 343.69 ▼ 10.77%
  • AVGO 291.53 ▼ 10.43%
  • TSM 353.10 ▼ 10.78%
  • ORCL 115.16 ▼ 6.93%
  • AMD 404.40 ▼ 17.26%
  • NFLX 65.56 ▼ 1.25%
  • CRM 222.41 ▼ 2.07%
  • ADBE 246.44 ▼ 0.82%
  • INTC 52.25 ▼ 10.33%
  • IBM 247.11 ▼ 2.84%
  • PLTR 154.99 ▼ 9.73%
  • SNOW 269.54 ▼ 7.25%
  • NET 244.51 ▼ 8.28%
  • SAP 243.53 ▲ 1.45%

The Morning Dev: developer news from Thursday, November 5, 2026

Security · High impact

AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek .

SecurityWeek · Eduard Kovacs · · 2 sources · 💬 353

Salon is shutting down after 31 years

A screenshot of Salon’s website. | Screenshot by Jay Peters / The Verge Salon launched 31 years ago as one of the first online-only news magazine outlets, and it announced today in an unsigned post that it's ceasing publication. The company said that the "business realities of…

Tech | The Verge · Jay Peters · · 2 sources · 💬 106

OpenAI’s new GPT-6 Cyber is better at hacking and better at staying in its lane

OpenAI on Thursday launched GPT-6 Cyber , the latest release in its series of cybersecurity-focused models. The company ranks GPT-6 Cyber’s ability to identify vulnerabilities and develop exploits as ‘critical,’ up from ‘high’ for its predecessor. Just like with previous Cyber…

The New Stack · Frederic Lardinois · · 3 sources · 💬 6

Security ›

Security · High impact

CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access

The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country. Describing the…

The Hacker News · info@thehackernews.com (The Hacker News) · · 3 sources

Security · High impact

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without…

The Hacker News · info@thehackernews.com (The Hacker News) · · 3 sources

Security · High impact

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in…

The Hacker News · info@thehackernews.com (The Hacker News) · · 3 sources

All 26 stories in Security ›

Listen · new today

Risky Business cover

🎧 Risky Business

Risky Business #858 -- The $6.3b laptop

· 61 min

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including: The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute! A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking” An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more! This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gr

AI ›

All 10 stories in AI ›

Listen · new today

What does it mean to build wealth as an individual investor in today’s society, especially as gains continue to get concentrated into smaller groups of VCs or institutional investors? Robinhood’s CEO and co-founder Vlad Tenev has a vision that can be summed up in one word: Ownership. In this episode, Sarah Guo chats with Vlad to get a closer look at how Robinhood has evolved from a simple app to buy stocks at zero commission into a global conglomerate that allows customers to own across a wide variety of surfaces and asset classes. Vlad explains how Robinhood is helping users extend ownership amidst the current economy and ongoing AI revolution through Trump accounts, tokenization of private

Cloud & DevOps ›

Inside GitHub’s new Git storage architecture

Last week at GitHub Universe, we announced our new Git storage architecture, capable of handling thousands of writes per second with reads that scale on demand. Through internal testing, we’ve demonstrated the ability to support 5,000 concurrent agents working on a repository…

The GitHub Blog · Karthik Raman · · 💬 1

Release

[$] Plasma X11 session removal surprises some Fedora users

The KDE Project announced, in 2025, that Plasma 6.7 would be the last version of the desktop environment that would support X11 sessions. Those who keep up with KDE's announcements no doubt expected it when Plasma 6.8 dropped X11 support as promised. What seems to have come as a…

LWN.net · jzb ·

All 6 stories in Cloud & DevOps ›

Listen · new today

This is a guest conversation episode of Ship It Weekly , separate from the weekly news recaps. In this Ship It Conversations episode, I talk with Davlet Dzhakishev about what it takes to let AI agents work on your cloud infrastructure, why guardrails belong in the architecture and not the prompt, and what running your own agents really costs. Davlet is the CEO and co-founder of Cloudgeni, which builds AI agents for cloud infrastructure. He got into this after working through SOC 2 and ISO 27001 compliance prep mostly by hand, and asking what agents would need to fix those problems reliably without making things worse. We start with the incident that changed how Cloudgeni builds. An agent hit

Industry ›

TikTok launched a dedicated TikTok Shop app

TikTok has released a standalone app for TikTok Shop in a few countries, as spotted by social media consultant Matt Navarra . According to its App Store listing , the TikTok Shop app offers: - Personalized picks inspired by your interests - LIVE streams & short videos to see…

Tech | The Verge · Jay Peters · · 2 sources

Release

openSUSE Leap 16.1 gives Linux users the right to remain immutable

openSUSE Leap 16.1 lets users choose between a conventional Linux installation and an immutable system from the same installer, bringing the previously separate Leap Micro into the fold. It's the first point release after Leap 16.0, which we looked at last year when it reached…

www.theregister.com - Articles ·

All 6 stories in Industry ›

Listen · new today

The Pragmatic Engineer cover

🎧 The Pragmatic Engineer

Scaling Slack and GitHub with Maude Lemaire

· 79 min

Brought to You By: • Antithesis – verify your system’s correctness without human review or traditional integration tests – and avoid bugs or outages. • turbopuffer – a vector and full-text search engine built on object storage. It’s fast, cheap, and extremely scalable. • Entire – The Git forge for agent-human collaboration. Built for the scale and throughput of agentic coding. — What is involved in scaling up large, popular products at places like Slack and GitHub? We get an insider’s view on this from Maude Lemaire , a principal engineer and author of ‘ Refactoring at Scale: Regaining Control of Your Codebase .’ She spent nearly eight years at Slack, where she led the backend performance in

Tools & Launches ›

Release

What’s fixed in IntelliJ IDEA 2026.3

Welcome to an overview of the most important fixes and usability improvements in IntelliJ IDEA 2026.3. IntelliJ IDEA 2026.3 ships over 1,000 bug fixes and over 300 performance fixes . We focused on performance, Java and Kotlin code intelligence, and the core workflows that matter…

IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog · Dmitriy Smirnov ·

Release

Visual Studio Code 1.145

Learn what's new in Visual Studio Code 1.145 Read the full article

Visual Studio Code - Code Editing. Redefined. · Visual Studio Code Team ·

More in Tools & Launches ›

Languages ›

Your .env Is Not a Secrets Manager, and Your AI Tools Can Read It Too

Update, October 31, 2026: This month gave the post a real-world example. At least nine AI developer platforms disclosed breaches in October, and the attackers were specifically hunting stored environment variables, especially AI API keys, which they then validated and resold. One…

DEV Community: python · Lycore Development ·

More in Languages ›

Backend ›

Listen · new today

SED News is a monthly podcast from Software Engineering Daily where hosts Gregor Vand and Sean Falconer break down the biggest stories shaping software engineering, Silicon Valley, and the broader tech industry. In this episode, Gregor and Sean cover the PHP remote code execution flaw that hit an estimated 70 percent of the internet, the recording device an OpenAI employee hid in a conference room, and a busy run of deals including Chroma joining Replit , Cloudflare taking Deno , and Supabase acquiring Turso . The main topic tours the AI graveyard, sorting recent product failures into patterns: features swallowed by bigger platforms, runaway hits too costly or risky to sustain, interfaces ma