United says it won't let personal AI assistants book tickets on the airline, citing both privacy and regulatory concerns. The company says it hasn't yet seen many people try to use AI agents to book their flights, The Wall Street Journal reports , in line with observations from…
The Verge · Lauren Feiner · · 5 sources
Release
AWS Emulator began as a weekend experiment, when an engineer prompted the Kiro coding agent to build a passable version of Amazon SQS in 15 minutes. (GeekWire File Photo / Todd Bishop) AWS says its engineers didn’t write or review a single line of code in its newest developer…
GeekWire · Todd Bishop · · 6 sources
Guido van Rossum conveys the sad (and somewhat delayed) news of the passing of Tim Peters. It's hard to overestimate Tim's influence on Python. He's probably best known for writing the Zen of Python ( PEP 20 ), but to me he was a mentor and language co-designer long before that…
Must read
Terry Haines, the Founder of Pangea Policy joined Bloomberg Open Interest to talk about how the Nvidia scandal could have consequences far beyond the company. Haines says congressional and law-enforcement investigations may take months, while the episode could strengthen calls to…
Bloomberg Technology · · 4 sources
Security · High impact
Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday. They included 24 apps built by staff at the social network X and at SpaceXSI, the company that makes the Grok AI assistant. Most…
The Hacker News · · 5 sources
Gaming, social media, and e-commerce platforms are facing a fresh wave of sweeping European Union rules that aim to make "your online experience fairer." The newly proposed Digital Fairness Act (DFA) published by the EU Commission on Wednesday is designed to tackle practices that…
The Verge · Jess Weatherbed · · 5 sources
It's the end of the road for the Apple Support Community. The dedicated discussion forum, which gave Apple users a place to exchange advice, troubleshoot, and generally chat about Apple products, has been placed into read-only mode, with a message from the company announcing that…
The Verge · Jess Weatherbed · · 4 sources
Bloomberg's Mike Shepard said that actions taken by the Trump administration and by Nvidia CEO Jensen Huang are coming under sharper scrutiny by Congress amid investigations into the affair Huang had with a women alleged to be a Chinese spy. Trump had denied that he knew anything…
Bloomberg Technology · · 3 sources
Watch · new today
Continuing · Security · High impact
Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53…
The Hacker News · · 12 sources
Continuing · Security · High impact
The security defects could allow attackers to bypass authorization and gain root access to devices. The post Recently Patched Barracuda Vulnerabilities Exploited in Attacks appeared first on SecurityWeek .
SecurityWeek · Ionut Arghire · · 6 sources
Continuing · Security · High impact
AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday. It has promised to pay those charges itself when an AI provider will not refund…
The Hacker News · · 5 sources
Listen · new today
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including: Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis The French government attributes freezer hacks to Iran’s IRGC Rob Joyce was right and the breachpocalypse has exhausted global IR resources The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice! Much, much more! This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical aga
Nvidia's board is preparing to dismiss CEO Jensen Huang following a report from the New York Times about a second alleged extramarital affair , just days after he admitted to a separate affair with a woman alleged to be a Chinese spy, The Wall Street Journal reports . The second…
The Verge · Lauren Feiner · · 3 sources
A graphic representing Google’s AlphaGenome Atlas. | Image: Google Researchers at Google DeepMind have unveiled a new AI model designed to unravel how changes in our DNA affect different cells, giving scientists a more detailed view of a notoriously difficult problem that could…
The Verge · Robert Hart · · 3 sources
Gemini Decisions API Google join Jev and OpenAI in the decision model category with "Gemini Decision 1". This new model API is almost identical to Jev: it supports the same three types of questions (yes/no, choice, and rubric-scoring) and even reuses Jev's term "Noul" for a…
Simon Willison · · 2 sources
Watch & listen · new today
swyx had already connected Cloudflare email. Then a coding agent opened a pull request that quietly chose Resend for him. Zeno Rocha, Resend s founder and CEO, explains what answer engine optimization (AEO) looks like from the receiving end of that rec...
Security · High impact
Node.js Blog · · 2 sources
Continuing · Security · High impact
How two sensible decisions, made four years apart in two different projects, turned into a password bypass on Alpine Linux. And why the same bug is probably hiding in your code. On November 4, 2026, a researcher named Özgün Kültekin reported a bug to the OpenSSH project. The next…
DEV · Anas Issath · · 40 sources
Release
PostgreSQL 14 receives its final minor release tomorrow, November 12, 2026. No new security or bug fixes ship for it after that. Your database keeps running, but every vulnerability found after that date stays open on your servers. PostgreSQL 15 follows on November 11, 2027. If…
Watch & listen · new today
AI coding agents can already reach well beyond the code in front of them. Through connections to tools like Slack, Jira, and Sentry, an agent can pull in issues, discussions, and production signals from across an organization. However, that context is scattered across many separate systems, with no shared map of how it all connects and no common controls over what an agent is allowed to touch. For a large enterprise, stitching that together while staying compliant, auditable, and sometimes fully cut off from the internet is a hard problem. GitLab runs one of the major platforms where software gets built, hosted, and shipped. That gives it a wide view of everything around the code, which shap
Release
Anthropic just released a coding model that beats Opus 5.5 on two major benchmarks and can complete certain difficult tasks for half the cost. Yet in its Fable 5.2 announcement on Monday, the company recommended that most developers stick with Opus, calling it the…
Nvidia this week donated OpenShell , its open-source runtime for securing and governing AI agents, to the Cloud Native Computing Foundation. The teams that run it in production already work with Kubernetes and the CNCF’s other projects, says Ali Golshan, Nvidia’s senior director…
Release
Accelerator bills have become one of the largest lines in the infrastructure budget. GPUs have become the most expensive resource in modern computing, and yet most organizations operate them with little visibility. A single training cluster can run for days and cost millions of…
Listen · new today
This is a guest conversation episode of Ship It Weekly , separate from the weekly news recaps. In this Ship It Conversations episode, I talk with Mallory Haigh about why context alone isn't enough for AI agents, the harness and governance layers that actually run them, and why she tells some platform teams to pump the brakes before adding agents at all. Mallory is Head of Platform Education and Advocacy at PlatformEngineering.org. She teaches in Platform Engineering University and coaches platform teams through Platform Engineering Consulting, where the job gets jokingly called "platform therapist". We start with her New York City analogy. Drop someone in the middle of the city with no direc
Release
Whether your team hosts its own AI models, you have an API key from a model provider, or you want to experiment with a model running on your machine, Bring Your Own Model (BYOM) lets you use those models without leaving Visual Studio. BYOM is now generally available in Visual…
TL;DR: Nuxt 3 reached end of life on 31 July 2026, so it no longer receives security or bug fixes. Nuxt 5 is still unreleased as of mid-November 2026. For most production apps the answer is to migrate to Nuxt 4 now: it is the only supported version, it is a small step from Nuxt…
DEV · Dipesh Batheja ·
remove.bg — the background remover most of us have used at least once — is closing its standalone website on 1 December 2026 at 9:00am CET. Its own FAQ says so plainly: background removal moves into Canva, unused pay-as-you-go credits expire the same day, and the self-serve API…
DEV · Shayan Ali ·
Release
This note has an interactive demo. Try it in the original Two libraries can now define the same custom element name on one page without breaking each other. Scoped custom element registries became Baseline on 27 October 2026, when Firefox 159 shipped them. Chrome and Edge 146 and…
DEV · richi.codes ·
Watch & listen · new today
Scott and Wes sit down with GitHub’s Kyle Daigle to ask what the hell is going on with GitHub: the downtime, the agent traffic spike, and the infrastructure overhaul decoupling storage from compute. Plus Copilot Fusion’s cascade and critique modes, npm supply chain security, and whether pull requests are dead. Show Notes 00:00 Welcome to Syntax! 00:07 What the Hell Is Going On with GitHub? 01:42 GitHub’s Growth by the Numbers: Billions of Commits a Month 03:36 Brought to you by Sentry! 04:00 GitHub’s Huge Infrastructure Update: Decoupling Storage from Compute 06:41 Moving to Azure and the Busy Monorepo Problem 09:00 Is CI the New Bottleneck? Rethinking Testing for Agents 11:01 Are Pull Reque
Release
We have decided to cease development of Primitive Types in Patterns, instanceof, and switch. The draft JEP https://openjdk.org/jeps/8393282 that would have been the sixth preview of this feature will be withdrawn, and the feature will be removed from JDK 28.
Security
TL;DR CVE-2026-18394 (GitHub advisory GHSA-qhw6-2h72-m84v, AWS bulletin 2026-069-AWS, published July 31, 2026) is a credential leak in the http_request tool of strands-agents-tools . An operator could bind a token to approved hostnames with HTTP_REQUEST_TOKEN_CONFIG , but the…
DEV · hugginf_expert ·
Release
Gemini 4 Carbon is Google’s new reasoning model. It became generally available in the Gemini API on November 10, 2026, and it thinks longer than its sibling Argon before it answers. In this tutorial, you’ll find out what Carbon is, when it’s worth paying for, and how to call it…
Real Python · · 2 sources
Listen · new today
Topics include PyPI's redesigned project pages, gilguard catches the import that turns the GIL back on, pip 26.3:, and All developer tools.