Release · High impact
Google is continuing its elemental AI naming scheme with the new Gemini 4 Hydrogen . These names are less descriptive than the Pro/Flash monikers of earlier releases, but Hydrogen's purpose is clear: It replaces the faster, more economical Flash models most people in Google's…
Ars Technica · Ryan Whitwam · · 7 sources
Outage
Over the last hour or so, reports have come in from around the world that people can't access their Outlook email, either through the web or apps. Microsoft has acknowledged the issue from its Microsoft 365 Status account , saying that "We've determined a portion of…
The Verge · Richard Lawler · · 11 sources
Must read
Jensen Huang at GTC Berlin last month. | Photo: Soeren Stache / picture alliance via Getty Images Nvidia's board announced that Jensen Huang - its longtime co-founder, president, and CEO - has resigned after reports of two extramarital affairs, one with an alleged Chinese spy and…
The Verge · Hayden Field · · 17 sources
Security · High impact
The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote access software, and not a new vulnerability, it has emerged. Blackpoint Cyber's Adversary Pursuit Group (APG), which shared the…
The Hacker News · · 6 sources
Continuing · Security · High impact
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable. The post Notion Customer Data Compromised in Fireworks AI Hack appeared first on SecurityWeek .
SecurityWeek · Ionut Arghire · · 10 sources
Continuing · Security · High impact
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones. The post Hackers Target N-central Zero-Days as N-able Rushes Patches appeared first on SecurityWeek .
SecurityWeek · Ionut Arghire · · 9 sources
“Sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases" and more, United Airlines said.
The Record · · 4 sources
Security · High impact
A coordinated botnet of compromised GitHub accounts launched a widespread attack, opening seemingly harmless pull requests before pushing a malicious shell script directly to default branches. The script, dubbed **wfx**, executed through GitHub Actions to steal secrets before the…
StepSecurity Blog · · 5 sources
Listen · new today
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including: Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis The French government attributes freezer hacks to Iran’s IRGC Rob Joyce was right and the breachpocalypse has exhausted global IR resources The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice! Much, much more! This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical aga
Release
Google launched Gemini 4 Hydrogen on Thursday alongside a new system that changes how coding agents use AI models. Rather than keeping its most capable model running across an entire session, Google is pairing Hydrogen with the more powerful Gemini 4 Carbon and switching between…
The New Stack · Amanda Caswell · · 4 sources
Security · High impact
PostgreSQL 18.7, 17.12, 16.16, 15.20, 14.25, and 19 RC2 all released today due to 52 new security issues being disclosed...
Phoronix · Michael Larabel · · 3 sources
Coding agents are pretty good at working in parallel : one writes a new API endpoint, another updates the tests, while a third fixes a bug elsewhere in the codebase. However, they’re not quite so adept at knowing what their coding counterparts are doing — put several on one…
Listen · new today
This is a guest conversation episode of Ship It Weekly , separate from the weekly news recaps. In this Ship It Conversations episode, I talk with Mallory Haigh about why context alone isn't enough for AI agents, the harness and governance layers that actually run them, and why she tells some platform teams to pump the brakes before adding agents at all. Mallory is Head of Platform Education and Advocacy at PlatformEngineering.org. She teaches in Platform Engineering University and coaches platform teams through Platform Engineering Consulting, where the job gets jokingly called "platform therapist". We start with her New York City analogy. Drop someone in the middle of the city with no direc
Security · High impact
Teresa Xie / Bloomberg : Binance says it has covered all of the $6.3B in cryptoassets stolen on October 29, using its profits and emergency funds to replace common and obscure tokens — Binance said it has covered all of the $6.3 billion in cryptoassets pilfered from…
Techmeme · · 6 sources
Cerebras Systems Inc. gave a sales forecast for the current quarter that exceeded analysts’ estimates, signaling that a push to challenge Nvidia Corp. in AI chips is paying off.
Bloomberg Technology · Ian King · · 2 sources
Outage
Bricklink, a popular online marketplace that Lego bought in 2019 where fans can buy and sell parts and sets, has been down for a week and the company doesn't know when it will return. The team who runs the site has been sharing updates over the past week including estimates of…
The Verge · Andrew Liszewski · · 2 sources
Smartglasses have always faced an uphill road to acceptance. Not only is propping a computer up on your nose an uncomfortable proposition, but the privacy aspect has been vexing people since the Google Glass days . Now, Google is ready to take another swing at " intelligent…
Ars Technica · Ryan Whitwam · · 4 sources
CHICAGO—Families joined protests in seven cities nationwide on Wednesday, rallying against what they see as Google’s bid to entrench its AI models in schools, turn kids of all ages into Gemini guinea pigs, and hook them on AI. The backlash follows a Google statement last week…
Release
Powered by Gemini 4 Hydrogen, Google's AI Mode is getting better at understanding complex queries, surfacing relevant links, and delivering richer visual responses.
Listen · new today
Drug discovery and development has long relied on expensive, time-consuming empirical trial and error. By shifting the discovery process onto computers, Isomorphic Labs wants to fundamentally change medicine from a process of discovery to one of precision engineering. Elad Gil sits down with Isomorphic’s president Max Jaderberg to discuss his vision for using predictive AI models to achieve experimental accuracy. Max details how the success of AlphaFold provided the first proof of concept that a deep learning model could generalize in the field of biology, and how an AI model’s compounding of learnings allows it to achieve generalizability with scale, thus greatly increasing the probability
Security
The Pulse is a series covering events, insights, and trends within Big Tech and startups. Today, we cover: What can we learn from the Railway hack? Cloud platform Railway has published an extremely detailed postmortem about their recent hack in which the attacker likely used…
Release
Postgres API and ABI stability has been a topic of discussion for a long time. To understand why this matters so much, start with Dave Stokes recent blog post [ Is PostgreSQL Really Winning Part 2: The Evidence Beyond the Rankings ]. It’s fundamentally about “a slow core with a…
Release
Discord on Linux got a glow-up: a new Rust updater, hardware encoding, Wayland screen share, Steam Deck support, and global keybinds. And we’re not done yet!
Watch & listen · new today
A major challenge for almost every online service is reliably identifying users, and knowing whether a given user or agent can be trusted. Historically, web services leaned on cookies stored in the browser to remember a visitor and recognize them when they return. The problem is that cookies live in the user’s own browser and are easy to remove, block, or avoid entirely, so a bad actor can simply clear them to escape recognition. IP blocking and CAPTCHA puzzles are firmer approaches, but they can frustrate legitimate users while doing little to stop a determined attacker. That leaves developers stuck between being too lax and losing control, or too strict and driving real users away. Fingerp
Release
The Rust team is happy to announce a new version of Rust, 1.100.0. Rust is a programming language empowering everyone to build reliable and efficient software. If you have a previous version of Rust installed via rustup , you can get 1.100.0 with: $ rustup update stable If you…
Rust Blog · The Rust Release Team · · 3 sources
Agent Skills now belongs to the Linux Foundation, not to one AI company. Here's what that changes, where each agent looks for skills, and a complete writing-quality skill you can drop into Claude Code, Codex and Gemini CLI today. Image generated by AI TL;DR: On October 22, 2026…
DEV · Mohab Abdelkarim ·
Security · High impact
How Spring's ApplicationContext hierarchy caused a JWT bypass in Axelix when Actuator ran on a separate management port.
Release
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security https://developers.openai.com/codex/security Codex Security Codex Security helps you find, investigate, and fix…