Security · High impact
Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into devices with no password. The vulnerability exists in the interaction between OpenSSH, the code library implementing…
Ars Technica · Dan Goodin · · 13 sources · 💬 193
Security · High impact
Blockchain analysis firm Chainalysis said that hackers have obtained sensitive personal information—including names, usernames, password hashes, and live tokens—for all of its users following a breach of its network security. The accomplishment could be a major coup for the…
Ars Technica · Dan Goodin · · 4 sources
Security · High impact
DigiCert explained that over the summer, an internal business system was "externally accessible when that was not intended," and someone had created an unauthorized account.
The Record · · 4 sources
Security · High impact
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News…
The Hacker News · · 2 sources · 💬 57
Security · High impact
An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek .
SecurityWeek · Eduard Kovacs · · 3 sources · 💬 356
Amazon’s Alexa for Shopping agent fills a cart from a text request in this example from the company. (Amazon Image) Amazon is rolling out a new feature to let customers shop by text message — sending requests to its Alexa for Shopping AI agent, which will search for products…
GeekWire · Todd Bishop · · 4 sources
The European Commission claims TikTok broke its online platform rules by offering a recommendation algorithm that creates a "rabbit hole effect" on users. In an announcement on Friday, the regulators allege TikTok's algorithm can harm users with "endless and repeated exposure" to…
OpenAI has closed on new funding of roughly $11 billion, the initial part of a round that values the company at $1.25 trillion, according to people familiar with the matter.The funding was wired to the company as of Friday, said the people, who spoke on condition of anonymity as…
Bloomberg Technology · Natasha Mascarenhas & Rebecca Torrence · · 3 sources
Listen · new today
“This felt like a decidedly anti-tech election.”
Security · High impact
The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European supermarkets in recent weeks.
The Record · · 6 sources
Security · High impact
Understand CVE-2026-109518, patch vulnerable APT clients, and use Harden-Runner to find HTTP package downloads and investigate CI/CD activity.
StepSecurity Blog · · 3 sources · 💬 78
Security · High impact
Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the site's old, unpatched code, so an…
The Hacker News · · 2 sources
Watch · new today
Must read
OpenAI is launching GPT-6 Cyber , the latest version of its cybersecurity AI model, which it says is better at finding vulnerabilities and less likely to go rogue and hack other platforms in the process. OpenAI says that during testing, GPT-6 Cyber went out of bounds less than 1…
Release · High impact
Build AI systems with context graphs and agentic memory. Join Andrew Ng and AI engineers at NODES 2026 for 100+ live technical sessions . Free, online, 24 hours. Save your spot ! There was a time in the early days of Thinking Machines, post 2025 start and cofounder departures…
Latent Space · swyx .ai · · 3 sources
Must read
On Tuesday night, Democrats made history as they took control of the House and the Senate, and a blue wave swept through traditionally red and swing states - with the nation's first Black woman governor elected in Georgia, the country's first Native American woman governor…
The Verge · Hayden Field · · 3 sources
Listen · new today
Fabian Theis has been one of the key players in the various iterations of the Virtual Cell concept and initiatives. It is not hyperbole at all to say that his lab has been pushing the frontier of algorithms to understand multi-scale, multi-modal ( mult...
Security · High impact
Hi, it’s Greg , bringing you the latest changes in the Rails codebase. It was a busy week, with a lot of changes, so buckle up! Rails 8.0.5.2 and 8.1.4.1 have been released! These are security releases, addressing 21 security issues, so you should upgrade if you haven’t already…
Ruby on Rails · Greg · · 4 sources
Release
PhpStorm 2026.3 adds PHP 8.6 support, new Laravel inspections, a Processes tab for queue workers, and Air, a workspace for coding agents. The post PhpStorm 2026.3 Adds an Agent Workspace and PHP 8.6 Support appeared first on Laravel News . Join the Laravel Newsletter to get all…
Laravel News · Eric L. Barnes · · 2 sources
Release
ClickHouse 26.10 introduces function composition, more flexible joins, faster GROUP BY queries, disk spilling for IN subqueries, an experimental columns cache, and Freeform and SQLite formats.
Listen · new today
🎧 Software Engineering Daily
· 54 min
SED News is a monthly podcast from Software Engineering Daily where hosts Gregor Vand and Sean Falconer break down the biggest stories shaping software engineering, Silicon Valley, and the broader tech industry. In this episode, Gregor and Sean cover the PHP remote code execution flaw that hit an estimated 70 percent of the internet, the recording device an OpenAI employee hid in a conference room, and a busy run of deals including Chroma joining Replit , Cloudflare taking Deno , and Supabase acquiring Turso . The main topic tours the AI graveyard, sorting recent product failures into patterns: features swallowed by bigger platforms, runaway hits too costly or risky to sustain, interfaces ma
OpenAI on Thursday launched GPT-6 Cyber , the latest release in its series of cybersecurity-focused models. The company ranks GPT-6 Cyber’s ability to identify vulnerabilities and develop exploits as ‘critical,’ up from ‘high’ for its predecessor. Just like with previous Cyber…
The New Stack · Frederic Lardinois · · 3 sources · 💬 6
Release
Cognition built its newest coding model on a foundation that anyone can download, yet the company is keeping its own finished version locked away. Released Wednesday, SWE-2 Flash costs one-fifth as much as Cognition’s larger SWE-2 model and generates tokens roughly three times…
Google wants to emulate one of its biggest ever open-source success stories, donating three core AI agent infrastructure projects to a neutral foundation in the hope they become industry standards, just as Kubernetes did for containers . In a blog post published on Thursday, Drew…
Listen · new today
This week on Ship It Weekly, GitHub will block pull_request_target in public repos by default from December 2, with brownouts on Mondays, November 9 and 16, 11 AM to 1 PM ET. A WordPress core update race (CVE-2026-119977) is on CISA's exploited list: during a full-package update, a fresh installer can sit for a moment at a public URL under wp-content/upgrade. A hijacked DebugBear script drained about $2.7 million from Polymarket users after DebugBear's DNS was compromised through its registrar. And Alpine Linux explains why upgrading GitLab didn't fix CVE-2026-97229 on its own image: the fix was a patch to Ruby. The thread: what actually ran, as opposed to what you think ran. A trigger that
Security · High impact
The news of the eMudhra Intermediate CA compromise was published on October 20th, 2026. Responding to an incident like a Certificate Authority (CA) compromise at an ecosystem-scale is far from “routine”; the assumption that HTTPS is secure is baked into many aspects of Python…
The PSF Blog · Seth Michael Larson · · 2 sources
Security
Real Python AI News · Weekly edition · The week of October 31–November 6, 2026 Stop Falling Behind on AI. Catch Up in Five Minutes. New models, new prices, new agent tools, all the time. Our new AI newsletter gives you the handful of stories you actually need as a developer…
The legacy Fitbit Web API and its OAuth endpoints were scheduled to be turned off on 2 November 2026. Apps that still call it stop receiving Fitbit and Pixel Watch data. The replacement is the Google Health API v4 , and there was no Python client for it, so I wrote one…
DEV · Muhammet Savaş ·
Release
Vercel · · 3 sources
Release
Welcome to an overview of the most important fixes and usability improvements in IntelliJ IDEA 2026.3. IntelliJ IDEA 2026.3 ships over 1,000 bug fixes and over 300 performance fixes . We focused on performance, Java and Kotlin code intelligence, and the core workflows that matter…
