# The Morning Dev > The daily newspaper for software developers: only the news worth knowing. Every story passes a news check – no tutorials, no listicles, no noise. The Morning Dev collects the open feeds of news desks, project and vendor blogs every day, groups reports about the same news, and keeps only what passes a 0–100 news check. Story pages link to the original reporting and add a short, AI-generated brief (facts, why it matters, what to do). Headlines belong to their publishers. ## Start here - [Front page](https://themorning.dev/): today's paper - [How it works](https://themorning.dev/explained): collection, grouping, the news check and AI briefings, with today's numbers - [About & editorial policy](https://themorning.dev/about): who makes it, how AI is used, corrections - [Privacy policy](https://themorning.dev/privacy): what reader data is processed and why - [Our sources](https://themorning.dev/sources): every feed and why it is in the paper - [Hall of Fame](https://themorning.dev/hall-of-fame): every writer, video creator and podcaster whose work appeared in the paper - [Shit Hits The Fan](https://themorning.dev/shit-hits-the-fan): security incidents rated on a published checklist - [AI Bubble Plop](https://themorning.dev/ai-bubble): a pressure index (0–100) of how much stress the AI news and AI stock prices show, on a published checklist – not a probability - [Topics](https://themorning.dev/topics): every story by company, project and subject - [Archive](https://themorning.dev/archive): past editions by date ## Sections - [Frontend](https://themorning.dev/section/frontend): JavaScript, CSS, frameworks and the web platform. RSS: https://themorning.dev/section/frontend/feed.xml - [Backend](https://themorning.dev/section/backend): Servers, databases, APIs and runtimes. RSS: https://themorning.dev/section/backend/feed.xml - [AI](https://themorning.dev/section/ai): Machine learning, LLMs and AI tooling for developers. RSS: https://themorning.dev/section/ai/feed.xml - [Cloud & DevOps](https://themorning.dev/section/cloud): Infrastructure, Kubernetes, CI/CD and platforms. RSS: https://themorning.dev/section/cloud/feed.xml - [Languages](https://themorning.dev/section/languages): Releases and deep dives on programming languages. RSS: https://themorning.dev/section/languages/feed.xml - [Security](https://themorning.dev/section/security): Vulnerabilities, breaches and secure engineering. RSS: https://themorning.dev/section/security/feed.xml - [Tools & Launches](https://themorning.dev/section/tools): Trending repositories, new dev tools and Show HN launches. RSS: https://themorning.dev/section/tools/feed.xml - [Industry](https://themorning.dev/section/industry): The business of tech: companies, policy and platforms. RSS: https://themorning.dev/section/industry/feed.xml - [Community](https://themorning.dev/section/community): What developers are talking about today. RSS: https://themorning.dev/section/community/feed.xml ## Today's news - [The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call](https://themorning.dev/story/the-fridge-hacking-spree-is-an-internet-of-things-wake-up-call-c27186132a60b5d6): On 2026-11-05 the US government urged critical infrastructure operators to harden their cooling systems after hacks disrupted European supermarkets. (Security Latest) - [\[AINews\] Anthropic IPO: Whither Now?](https://themorning.dev/story/ainews-anthropic-ipo-whither-now-d8b2a306eae7a955): Bloomberg reports prospective IPO investors are rethinking Anthropic's expected valuation, which could be as low as $1.1 to $1.2 trillion, after a post-election selloff in AI stocks. (Latent Space) - [SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins](https://themorning.dev/story/sonicwall-patches-exploited-sonicos-vulnerability-that-weakens-vpn-logins-986edfc864db12c6): SonicWall released security updates fixing seven vulnerabilities in SonicOS firewalls. (SecurityWeek) - [Re: "sshole": password authentication bypass: OpenSSH + musl libc](https://themorning.dev/story/re-sshole-password-authentication-bypass-openssh-musl-libc-271bd3df0266d63a): On musl-based Linux without PAM, OpenSSH accepts any password of 257 to 1,024 bytes for accounts that have no usable password, such as key-only accounts. (Open Source Security) - [Alpine Linux : openssh-server password authentication bypass](https://themorning.dev/story/alpine-linux-openssh-server-password-authentication-bypass-64c7f012498c41d1): Alpine Linux published an advisory on 2026-11-05 about an openssh-server password authentication bypass. (Lobsters) - [The US let Nvidia sell chips to an empty office in China](https://themorning.dev/story/the-us-let-nvidia-sell-chips-to-an-empty-office-in-china-73be1ddc7ff24f89): A New York Times investigation finds that some Chinese firms approved by the US Commerce Department to handle Nvidia H200 chips have empty offices. (AI | The Verge) - [OpenAI valued at $1.25 trillion, as rival Anthropic nears its IPO](https://themorning.dev/story/openai-valued-at-1-25-trillion-as-rival-anthropic-nears-its-ipo-6813d62fd92533cd): OpenAI has reportedly closed about $11B of a funding round, the first tranche, per people familiar with the matter (Bloomberg). (AI | The Verge) - [ARTEX abuse expands as cybercriminals target financial sector](https://themorning.dev/story/artex-abuse-expands-as-cybercriminals-target-financial-sector-e115b44724e254be): Hundreds of ARTEX penetration testing servers were found publicly exposed to the internet, according to TechCrunch. (Microsoft Security Blog) - [Megaspeed exec was recruited to spy on Nvidia CEO, according to US intelligence memo](https://themorning.dev/story/megaspeed-exec-was-recruited-to-spy-on-nvidia-ceo-according-to-us-intelligence-m-69c75581d56ff5e1): A US intelligence memo reportedly says China's Ministry of State Security recruited a female tech executive to spy on Nvidia CEO Jensen Huang. (AI News & Artificial Intelligence | TechCrunch) - [Asahi Linux 7.3 progress report](https://themorning.dev/story/asahi-linux-7-3-progress-report-6a91ff56de2a8176): Asahi Linux published a progress report following the Linux 7.3 kernel release. (LWN.net) - [Binance CFO is leaving to ‘pursue a new venture’ after $6.3 billion hack](https://themorning.dev/story/binance-cfo-is-leaving-to-pursue-a-new-venture-after-6-3-billion-hack-805dafe9e9847598): Binance says CFO Kaiser Ng is leaving to "pursue a new venture". (TechCrunch) - [Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches](https://themorning.dev/story/inside-artex-ai-hacking-tools-exposed-servers-and-south-korean-bank-breaches-bda2b44b079e09bc): Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches at seven South Korean financial institutions. (Security Affairs) - [Why AWS wants developers to stop babysitting their AI agents](https://themorning.dev/story/why-aws-wants-developers-to-stop-babysitting-their-ai-agents-de8ccb16fc671acd): AWS introduced Kiro, its agentic, spec-driven development environment, in July 2025. (The New Stack) - [GhostMap: The Android flaw that crashes your phone before you open the app](https://themorning.dev/story/ghostmap-the-android-flaw-that-crashes-your-phone-before-you-open-the-app-cf4db5761b035375): Bitdefender's blog post describes a flaw in Android named GhostMap. (Lobsters) - [Hackers pull off $133 million French bank heist via service provider](https://themorning.dev/story/hackers-pull-off-133-million-french-bank-heist-via-service-provider-ded94754be202b29): Hackers reportedly made fraudulent transactions of up to $133 million at French cooperative bank Crédit Mutuel Arkéa. (BleepingComputer) - [opencode Fixed a No-Consent RCE in a 'Refactor.' Agent CLIs Need Browser-Style Updates](https://themorning.dev/story/opencode-fixed-a-no-consent-rce-in-a-refactor-agent-clis-need-browser-style-upda-2eb0e0ad6ac9b739): opencode fixed a remote code execution (RCE) flaw that ran without user consent. (DEV Community: ai) - [Why a new report on Anthropic automating AI development is alarming researchers](https://themorning.dev/story/why-a-new-report-on-anthropic-automating-ai-development-is-alarming-researchers-8879475e62b3793a): A report says Anthropic is using AI to help build more powerful AI. (AI | The Verge) - [Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub](https://themorning.dev/story/claude-code-s-don-t-ask-again-file-exposes-passwords-and-keys-in-1-122-public-co-804a43c3361e7807): Passwords and API keys typed into commands approved in Claude Code are stored in a "Don't Ask Again" file when users select "Yes, and don't ask again". (The Hacker News) - [Anthropic pushes ahead with pre-Thanksgiving IPO despite tech selloff, accepts lower valuation](https://themorning.dev/story/anthropic-pushes-ahead-with-pre-thanksgiving-ipo-despite-tech-selloff-accepts-lo-76a37a2b42714ae8): Anthropic is pressing ahead with its IPO despite a tech selloff. (The Decoder) - [Libghostty 1.0](https://themorning.dev/story/libghostty-1-0-07c0a666eeeb867f): Libghostty 1.0 was released, announced by Mitchell Hashimoto on 2026-11-06. (top scoring links : programming) - [Exponential Time Hypothesis co-proposer Russell Impagliazzo calls OpenAI's disproof "shocking news"; it could one day speed up chip design and break encryption (Cade Metz/New York Times)](https://themorning.dev/story/exponential-time-hypothesis-co-proposer-russell-impagliazzo-calls-openai-s-dispr-988de9839dc5a961): OpenAI has disproved the Exponential Time Hypothesis, according to a New York Times report. (Techmeme) - [China reportedly recruited AI exec to spy on Jensen Huang](https://themorning.dev/story/china-reportedly-recruited-ai-exec-to-spy-on-jensen-huang-1bc7ba2a28c4372d): The New York Times reports that US intelligence concluded Megaspeed executive Alice Huang was recruited by China's Ministry of State Security (MSS) to collect intelligence on Nvidia CEO Jensen Huang. (AI | The Verge) - [How I Discovered a Leak Exposing 1,000+ Customer Emails via a Simple API Query (?select=\*)](https://themorning.dev/story/how-i-discovered-a-leak-exposing-1-000-customer-emails-via-a-simple-api-query-se-a61c110b1a6980fe): A researcher found a database leak at hiddenweb by changing one query parameter (?select=*) in API traffic. (DEV Community: backend) - [OpenAI Lança Rosalind-6: Raciocínio de Fronteira para Ciências Biológicas, Governança de Acesso Confiável e o Padrão de Engenhar](https://themorning.dev/story/openai-lanca-rosalind-6-raciocinio-de-fronteira-para-ciencias-biologicas-governa-d92bb3111730e069): OpenAI is reported to have launched Rosalind-6, a model aimed at biological sciences. (DEV Community: python) - [Microsoft's Azure Linux 3.0.2022 Ships With More Than 470 Security Fixes](https://themorning.dev/story/microsoft-s-azure-linux-3-0-2022-ships-with-more-than-470-security-fixes-ee17198eb9ae8516): Microsoft released Azure Linux 3.0.2022, its in-house Linux distribution, on a Friday night. (Phoronix) ## Topics - [Security](https://themorning.dev/topic/security): 54 stories - [Vulnerability](https://themorning.dev/topic/vulnerability): 27 stories - [AI Agents](https://themorning.dev/topic/ai-agents): 20 stories - [Supply Chain](https://themorning.dev/topic/supply-chain): 15 stories - [AI](https://themorning.dev/topic/ai): 14 stories - [OpenAI](https://themorning.dev/topic/openai): 13 stories - [Release](https://themorning.dev/topic/release): 12 stories - [Linux](https://themorning.dev/topic/linux): 11 stories - [Developer Tools](https://themorning.dev/topic/developer-tools): 10 stories - [Anthropic](https://themorning.dev/topic/anthropic): 8 stories - [GitHub](https://themorning.dev/topic/github): 8 stories - [Meta](https://themorning.dev/topic/meta): 8 stories - [Nvidia](https://themorning.dev/topic/nvidia): 8 stories - [Privacy](https://themorning.dev/topic/privacy): 8 stories - [LLM](https://themorning.dev/topic/llm): 7 stories - [Malware](https://themorning.dev/topic/malware): 7 stories - [Acquisition](https://themorning.dev/topic/acquisition): 6 stories - [Apple](https://themorning.dev/topic/apple): 6 stories - [CVE](https://themorning.dev/topic/cve): 6 stories - [Java](https://themorning.dev/topic/java): 6 stories - [Python](https://themorning.dev/topic/python): 6 stories - [AI Models](https://themorning.dev/topic/ai-models): 5 stories - [AWS](https://themorning.dev/topic/aws): 5 stories - [China](https://themorning.dev/topic/china): 5 stories - [Claude Code](https://themorning.dev/topic/claude-code): 5 stories - [Containers](https://themorning.dev/topic/containers): 5 stories - [Cybersecurity](https://themorning.dev/topic/cybersecurity): 5 stories - [LXD](https://themorning.dev/topic/lxd): 5 stories - [API](https://themorning.dev/topic/api): 4 stories - [API Keys](https://themorning.dev/topic/api-keys): 4 stories - [Credentials](https://themorning.dev/topic/credentials): 4 stories - [Data Breach](https://themorning.dev/topic/data-breach): 4 stories - [Google](https://themorning.dev/topic/google): 4 stories - [Incident Response](https://themorning.dev/topic/incident-response): 4 stories - [iOS](https://themorning.dev/topic/ios): 4 stories - [Kernel](https://themorning.dev/topic/kernel): 4 stories - [Microsoft](https://themorning.dev/topic/microsoft): 4 stories - [Network Security](https://themorning.dev/topic/network-security): 4 stories - [Nodejs](https://themorning.dev/topic/nodejs): 4 stories - [Open Source](https://themorning.dev/topic/open-source): 4 stories ## Machine-readable - [MCP server](https://themorning.dev/api/mcp): Model Context Protocol endpoint (Streamable HTTP, no login; setup at https://themorning.dev/mcp) – tools get_edition, search_stories, get_story, what_changed_since, check_my_stack (news that affects a project's dependencies), get_bubble_reading - Every story page as Markdown: append `.md` to its URL, e.g. https://themorning.dev/story/the-fridge-hacking-spree-is-an-internet-of-things-wake-up-call-c27186132a60b5d6.md - [RSS feed](https://themorning.dev/feed.xml): today's front page - [Sitemap](https://themorning.dev/sitemap.xml) - [News sitemap](https://themorning.dev/news-sitemap.xml): stories of the last 48 hours