International
The Morning Dev

Only the news worth knowing

‹›
 

The Morning Dev: developer news from Friday, November 13, 2026

Security ›

Security · High impact

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the…

The Hacker News · · 2 sources

All 41 stories in Security ›

AI ›

Listen · new today

If you asked me earlier this year how far away we are from superintelligence, I’d probably have said at least the better part of a decade. But over the last three months, from debating people on and off the podcast, I’ve updated my views a ton. Let me walk you through how my thinking has changed. If you want to read the written version (with footnotes and links) you can check it out here: https://www.dwarkesh.com/p/rsi This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.dwarkesh.com

Industry ›

Anthropic IPO: AI’s $1.4T Test

Anthropic’s potential IPO is drawing extraordinary investor demand, with a reported target valuation of $1.4 trillion. Bloomberg’s Bailey Lipschultz joins Bloomberg Open Interest to explain why investors see the AI company as a must-own and why soaring compute costs, cash burn…

Bloomberg Technology · · 3 sources

Continuing · Outage · High impact

Microsoft Outlook is down

Over the last hour or so, reports have come in from around the world that people can't access their Outlook email, either through the web or apps. Microsoft has acknowledged the issue from its Microsoft 365 Status account , saying that "We've determined a portion of…

The Verge · Richard Lawler · · 12 sources

All 20 stories in Industry ›

Listen · new today

Cloud & DevOps ›

Release

Announcing XRAID: declustered parity RAID for zoned XFS

Christoph Hellwig has announced the initial public release of XRAID—declustered parity RAID that is integrated into XFS. The two primary aims of XRAID are to support parity RAID on zoned devices like SMR hard drives, and to provide a fast RAID implementation without…

LWN.net · jzb · · 2 sources

All 13 stories in Cloud & DevOps ›

Listen · new today

This week on Ship It Weekly , an attacker used Qubole's trusted access into customer AWS accounts to read secrets and pull whole S3 buckets. Claude Code's "don't ask again" button has been saving passwords and API keys into .claude/settings.local.json, a file that keeps turning up on GitHub and Docker Hub. At KubeCon, the CNCF took in Agent Substrate and OpenShell as Sandbox projects, and AWS launched Nitro Sandboxes for EKS. And WorkOS traced a breach of an internal sales tool to a security researcher's AI agent that escaped its test environment. The thread: what can it touch? A vendor role nobody removed, an approval that saved the secret with the command, agents running unreviewed code, a

Frontend ›

Release

Node.js 26 LTS : nouveautés, calendrier et migration

L'essentiel en une minute Node.js 26 est devenu une version LTS (support à long terme) le 28 octobre 2026, avec la version 26.13.0 et le nom de code « Lithium ». Sorti le 5 mai 2026, il sera maintenu jusqu'au 30 avril 2029. C'est aussi la dernière ligne publiée selon l'ancien…

DEV · Neurau Tech ·

Backend ›

Release

Django's Tasks API Ships Without a Worker

Halfway through a Django 6.0 upgrade on a client's compliance SaaS, I opened a branch called kill-celery . The plan was two hours of work: swap every @shared_task for the new built-in @task , drop the broker, delete the worker service, ship a smaller stack. I got as far as…

DEV · Papan Sarkar ·

Listen · new today

Software Engineering Daily cover

🎧 Software Engineering Daily

Fraud Prevention in the Age of AI Agents

· 42 min

A major challenge for almost every online service is reliably identifying users, and knowing whether a given user or agent can be trusted. Historically, web services leaned on cookies stored in the browser to remember a visitor and recognize them when they return. The problem is that cookies live in the user’s own browser and are easy to remove, block, or avoid entirely, so a bad actor can simply clear them to escape recognition. IP blocking and CAPTCHA puzzles are firmer approaches, but they can frustrate legitimate users while doing little to stop a determined attacker. That leaves developers stuck between being too lax and losing control, or too strict and driving real users away. Fingerp

Languages ›

osFoundry हर उस page के साथ record schema क्यों भेजता है जिसे Codex list करता है?

ये वे record channel tools हैं जो Codex CLI connection को osFoundry से मिलते हैं, जैसा public MCP endpoint उन्हें list करता है। इन्हें 2026-11-09 को बिना authentication वाले tools/list से fetch किया गया और यहाँ काम के fields तक छोटा किया गया: { "name" : "list_record_items"…

DEV · BBT · · 3 sources

More in Languages ›