Continuing · Security · High impact
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete models for a "limited set of accounts." In…
The Hacker News · · 7 sources · 💬 57
Google released Gemini 4 Carbon to paying developers Tuesday, positioning its newest frontier model above Gemini 4 Argon for complex software engineering, cybersecurity, and scientific reasoning. Argon remains Google’s recommended model for everyday engineering and knowledge…
The New Stack · Amanda Caswell · · 6 sources · 💬 138
Security · High impact
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month’s Patch Tuesday addresses 63 critical flaws — including a zero-day in Microsoft Outlook — and…
Krebs on Security · BrianKrebs · · 7 sources
Continuing · Must read
With a big checkbook and sought-after chips, Nvidia’s CEO had his thumb on the world of AI. An extramarital affair with a suspected Chinese spy may put all of that at risk.
WIRED · Will Knight & Paresh Dave · · 22 sources · 💬 1,577
Must read
As espionage targets go, Jensen Huang is perhaps one of the least surprising on Earth. The Nvidia CEO runs one of the world's most valuable companies, controls the in-demand technology fueling the AI boom, and is cozy with presidents, CEOs, and all manner of important people. He…
The Verge · Robert Hart · · 5 sources
Continuing · Security · High impact
A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.
Dark Reading · Elizabeth Montalbano · · 6 sources
Security · High impact
Overview On November 9, 2026, N-able announced that it was responding to the public disclosure of critical vulnerabilities affecting N-central , its remote monitoring and management (RMM) platform. In a public disclosure titled Able2Shell, an independent researcher has published…
Rapid7 Blog · Rapid7 · · 5 sources
Security · High impact
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that's used to break into victims' Microsoft Exchange servers with an aim to surreptitiously collect emails. According to an ESET…
The Hacker News · · 7 sources
For years, Anthropic has been known for its focus on enterprise and coding tools that attract high-flying corporate clients, inspiring competing frontier labs - like OpenAI, SpaceXSI, and Meta - to copy its strategies . Earlier this year, Claude Code went through its own…
The Verge · Hayden Field · · 6 sources
Must read
Anthropic confirmed on Tuesday that its IPO could be one of the biggest ever, even while falling short of previous expectations. Its IPO price is expected to be between $70.00 and $78.00 per share, which would put its valuation as high as $1.4 trillion, according to the New York…
The Verge · Stevie Bonifield · · 5 sources
Google is rolling out its latest AI model, Gemini 4 Carbon, to the general public after releasing it to a select group of "cybersecurity defenders" two weeks ago. Google claims Carbon is its "strongest model" yet, and capable of competing with the very best systems from Anthropic…
The Verge · Robert Hart · · 9 sources
Listen · new today
swyx had already connected Cloudflare email. Then a coding agent opened a pull request that quietly chose Resend for him. Zeno Rocha, Resend s founder and CEO, explains what answer engine optimization (AEO) looks like from the receiving end of that rec...
Oura announced its quarterly earnings today and said it agreed to acquire Counsel Health for $625 million, after adding the company's AI chatbot to its app earlier this year . Counsel Health calls itself an "AI-native primary care company," using the app to deliver AI-generated…
The Verge · Stevie Bonifield · · 4 sources
Ring Drone Cam, left, and Ring Rover Cam. (Ring Images) Amazon’s Ring unveiled a $249.99 flying indoor security drone and a $999.99 mobile patrol robot for businesses, bringing back two ideas that stalled in earlier incarnations. The Ring Drone Cam and Ring Rover Cam, announced…
GeekWire · Todd Bishop · · 7 sources
Release
Google Fi is launching a new "super network" that can automatically switch users between two different 5G networks depending on which one has better connectivity. The feature is rolling out starting today on Pixel 9 and newer phones that have Google Fi active on eSIM and have any…
The Verge · Stevie Bonifield · · 3 sources
Watch & listen · new today
I was in college when Napster hit, and the RIAA instantly became the big villain because it was suing kids for downloading music. That was when I decided to go be a copyright lawyer, which set the rest of my career in motion — and Mitch Glazier was in the background as a young lawyer at the RIAA, on the other side of those cases. So part of me was very deeply, very genuinely surprised to discover just how much fun I had talking to Mitch, who's now on the same side as musicians and audiences in the fight against AI. Read the full interview transcript on The Verge. Links: Major labels propose rules to keep AI slop off charts | The Verge Suno snatched songs from YouTube, Genius, and Deezer | Th
Release · High impact
Today, we’re excited to announce the release of .NET 11! This year’s release makes building modern applications faster, more productive, and has improvements across C# 15, ASP.NET Core, .NET MAUI, and Windows development. With hundreds of runtime optimizations, more responsive…
Release
The November 10, 2026 servicing updates for .NET 10, .NET 9, and .NET 8 include security and non-security fixes. This post brings together the security advisories, release notes, and download links for this month’s updates, along with resources for .NET Framework servicing…
Instruction files like CLAUDE.md and AGENTS.md are usually written once when a repository sets up a coding agent and rarely touched again. Across 441 company repositories analyzed by Denisov-Blanch et al. (2026), 73.8% of AI configuration files were committed once and never…
Listen · new today
Topics include PyPI's redesigned project pages, gilguard catches the import that turns the GIL back on, pip 26.3:, and All developer tools.
Security · High impact
With the assistance of AI/LLMs, eight more security vulnerabilities were made public today for the X.Org Server. These issues also end up affecting the XWayland code too...
Phoronix · Michael Larabel · · 3 sources
Release
Anthropic is expanding Claude’s ability to work directly inside enterprise applications; it can now open full software interfaces, retrieve information, and make changes without requiring users to move between applications. At The Briefing: Work at the Frontier in San Francisco…
Release
Back in July AMD announced the EPYC 9006 "Venice" series at their Advancing AI event. Today they are announcing EPYC 9006 series Socket SP7 processor availability and with systems beginning to ship today from their OEM/ODM partners. With that we are also now allowed to begin…
Phoronix · Michael Larabel · · 2 sources
Listen · new today
This is a guest conversation episode of Ship It Weekly , separate from the weekly news recaps. In this Ship It Conversations episode, I talk with Ryan Packer about why a CTO is writing code again, what happens to CI/CD when every engineer runs a fleet of agents, and who trains junior engineers when AI can fix the bugs. Ryan is the CTO at BambooHR and a former VP of Engineering at Adobe. He's watched engineering organizations change from Omniture to Adobe to BambooHR, and he says he's spent more time coding this year than in the rest of his career combined. We start with why. Ryan will never write production code for his team again, but he wants to use the same tools and learn the same techni
Release
Rider 2026.3 ships alongside the release of .NET 11 with complete support on day one! Download Rider 2026.3 See the extensive list of all updates for AI, .NET, and game development on our What’s New in Rider 2026.3 page. JetBrains Air JetBrains Air brings a complete agentic…
Release
Today, we are announcing Visual Studio 2026 Long-Term Servicing Channel (LTSC) 18.11 alongside Visual Studio 2026 18.12 on the Stable channel. LTSC 18.11 will receive two years of support, through November 14, 2028, rather than the one year of LTSC support we previously…
Release
ReSharper C++ 2026.3 is here, with a new Class Layout tool window that visualizes the memory layout of your classes and helps you spot wasted space.. This release also improves format string analysis to cover std::format , std::print , and the {fmt} library. Other highlights…
Release
Laravel Rest Api 3.0 rebuilds the package around typed fields, adds metric endpoints and write confirmations, and documents your API with Scramble. The post Laravel Rest Api 3.0: Typed Fields, Metrics, and OpenAPI Docs appeared first on Laravel News . Join the Laravel Newsletter…
Watch & listen · new today
AI coding agents can already reach well beyond the code in front of them. Through connections to tools like Slack, Jira, and Sentry, an agent can pull in issues, discussions, and production signals from across an organization. However, that context is scattered across many separate systems, with no shared map of how it all connects and no common controls over what an agent is allowed to touch. For a large enterprise, stitching that together while staying compliant, auditable, and sometimes fully cut off from the internet is a hard problem. GitLab runs one of the major platforms where software gets built, hosted, and shipped. That gives it a wide view of everything around the code, which shap
Release
Next.js 16.4.6 shipped overnight with a one-line release note: "Automatically compress route handler responses if not already compressed." If you self-host with next start , that's a real change. Your API routes were never gzipped before, and now they are. Compression and…
Listen · new today
Wes, Scott, and CJ are back with two weeks of news: Reddit is forcing everyone to log in, r/opensource bans anything AI, and CSS-Tricks is independent again. Plus Anomaly's Hex dictation app, Mitchell Hashimoto's Rex terminal, TanStack Redact, Cloudflare's TypeScript port to Rust, Vercel's Agent Desktop, the new touchscreen MacBook Pros, a flood of CVEs, and a certificate authority whose private key was the number 4. Show Notes 00:00 Welcome to Syntax! 01:11 Anomaly’s Hex Dictation App 05:00 The Battle to Own Your Computer 07:45 Raycast’s iOS Keyboard 10:11 The New AI Design Meta 11:05 Rex: A Next Gen Terminal 17:37 Rex Remote Hosts and Scripting 22:55 Reddit Is Closing Its Doors 28:46 Bots