https://themorning.dev/story/nvidia-backed-fireworks-ai-notifies-customers-of-its-second-hack-in-weeks-3d0ef2f2baf832a9The Morning Deven2026-11-09T20:46:58.000ZNvidia-Backed Fireworks AI Notifies Customers of Its Second Hack in Weeks https://themorning.dev/story/forge-lab-uses-agentic-tools-to-identify-memory-safety-issues-in-rust-5bce94b89cfb76dfThe Morning Deven2026-11-09T20:17:31.000ZFORGE Lab uses agentic tools to identify memory safety issues in Rust https://themorning.dev/story/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitat-8abde1ce00befc7cThe Morning Deven2026-11-09T19:41:34.000ZVulnerability that lets hackers SSH into Linux devices is under active exploitation https://themorning.dev/story/apple-s-50-intelligence-usage-packs-extend-access-to-some-ai-features-4a7141713ab5f922The Morning Deven2026-11-09T19:09:58.000ZApple’s $50 Intelligence Usage Packs extend access to some AI features https://themorning.dev/story/cpython-cve-2026-19552-ssl-get-server-certificate-addr-ca-certs-verifies-the-cha-d2f20ea96a09325fThe Morning Deven2026-11-09T19:06:00.000ZCPython: [CVE-2026-19552] ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity https://themorning.dev/story/cpython-cve-2026-124249-http-cookiejar-deletes-cookies-of-other-domains-via-expi-987811c0f5d6ba8dThe Morning Deven2026-11-09T19:03:51.000ZCPython: [CVE-2026-124249] http.cookiejar deletes cookies of other domains via expired Set-Cookie https://themorning.dev/story/anthropic-launches-new-claude-fable-and-mythos-5-2-models-f1eea0a2781af6aaThe Morning Deven2026-11-09T19:00:00.000ZAnthropic launches new Claude Fable and Mythos 5.2 models https://themorning.dev/story/nominal-bets-on-ai-for-aerospace-and-defense-422562e38c09bde3The Morning Deven2026-11-09T18:52:24.000ZNominal Bets on AI for Aerospace and Defense https://themorning.dev/story/fastapi-code-generator-call-time-rce-via-operation-summary-unescaped-route-handl-d984152a674be083The Morning Deven2026-11-09T18:50:00.000Zfastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring (CVE-2026-63470) https://themorning.dev/story/google-claims-its-new-ai-software-cuts-inference-latency-by-over-90-but-there-s-e147b529a5c0e8b4The Morning Deven2026-11-09T18:40:01.000ZGoogle claims its new AI software cuts inference latency by over 90% — but there’s a catch https://themorning.dev/story/vanderbilt-cybersecurity-incident-impacting-campus-devices-and-systems-2fdab4abb5f338b9The Morning Deven2026-11-09T18:30:00.000ZVanderbilt cybersecurity incident impacting campus devices and systems https://themorning.dev/story/cursor-and-google-join-openai-in-giving-coding-agents-a-voice-claude-code-stays-2cecd68abae5d5aaThe Morning Deven2026-11-09T18:22:41.000ZCursor and Google join OpenAI in giving coding agents a voice. Claude Code stays silent. https://themorning.dev/story/attackers-searching-for-sap-netweaver-webshells-mon-nov-9th-49097f3f34acca1bThe Morning Deven2026-11-09T18:18:15.000ZAttackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th) https://themorning.dev/story/attackers-crash-claude-s-office-party-flaw-to-run-malicious-code-on-linux-adccb074fbff64d1The Morning Deven2026-11-09T18:08:30.000ZAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux https://themorning.dev/story/meta-launches-muse-ember-to-take-on-claude-haiku-and-gpt-6-luna-d78b72f4534f8437The Morning Deven2026-11-09T18:00:00.000ZMeta launches Muse Ember to take on Claude Haiku and GPT-6 Luna https://themorning.dev/story/hackers-exploit-qubole-s-trusted-aws-access-to-breach-customer-accounts-and-stea-bd73ebc7b854e9acThe Morning Deven2026-11-09T17:51:21.000ZHackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data https://themorning.dev/story/russian-cloud-firm-beget-rebuilds-from-scratch-after-data-wiper-attack-073e03d22daec48fThe Morning Deven2026-11-09T17:50:32.000ZRussian cloud firm Beget rebuilds from scratch after data wiper attack https://themorning.dev/story/nvidia-cracks-down-on-overseas-cloud-ai-gpu-rentals-for-china-305e87f3a3200e33The Morning Deven2026-11-09T17:48:17.000ZNvidia cracks down on overseas cloud AI GPU rentals for China https://themorning.dev/story/researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns-ea9844bbee9e3400The Morning Deven2026-11-09T17:31:00.000ZResearchers pwn automakers’ Android apps to remotely unlock cars, honk horns https://themorning.dev/story/announcing-clickhouse-observability-fully-managed-observability-on-clickhouse-cl-9de57fd4360325aeThe Morning Deven2026-11-09T17:00:00.000ZAnnouncing ClickHouse Observability - fully managed observability on ClickHouse Cloud https://themorning.dev/story/langfuse-launches-ai-gateway-721a37df7cec682aThe Morning Deven2026-11-09T16:57:37.000ZLangfuse launches AI Gateway https://themorning.dev/story/clickhouse-managed-postgres-goes-ga-and-xata-acquisition-brings-agentic-capabili-0d35ab125a955b3cThe Morning Deven2026-11-09T16:56:11.000ZClickHouse Managed Postgres goes GA and Xata acquisition brings agentic capabilities to the service https://themorning.dev/story/jsdelivr-handed-out-the-hijacked-axios-940-000-times-a4d7d0aef158342eThe Morning Deven2026-11-09T16:49:50.000ZjsDelivr handed out the hijacked axios 940,000 times https://themorning.dev/story/microsoft-takes-three-decades-to-make-sticky-keys-less-sticky-0411c3f3b8adeea6The Morning Deven2026-11-09T16:43:17.000ZMicrosoft takes three decades to make Sticky Keys less sticky https://themorning.dev/story/run-cost-effective-always-on-agents-to-monitor-your-environment-the-engineering-8f7ed21e7947ecd7The Morning Deven2026-11-09T16:30:31.000ZRun cost-effective, always-on agents to monitor your environment: the engineering behind Watchers https://themorning.dev/story/google-releases-gemini-4-argon-for-robotics-control-simulation-and-policy-improv-409713ace2f5605bThe Morning Deven2026-11-09T15:44:00.000ZGoogle Releases Gemini 4 Argon for Robotics Control, Simulation, and Policy Improvement https://themorning.dev/story/terminal2shell-critical-flaw-grants-instant-shell-access-on-every-major-os-b9964c329da3fa88The Morning Deven2026-11-09T15:41:50.000ZTerminal2Shell: Critical flaw grants instant shell access on every major OS https://themorning.dev/story/disney-and-adobe-are-building-generative-ai-tools-together-86961a9937fd8746The Morning Deven2026-11-09T15:38:56.000ZDisney and Adobe are building generative AI tools together https://themorning.dev/story/what-s-new-in-red-hat-openshift-5-for-developers-f790cfd742b058f4The Morning Deven2026-11-09T15:32:12.000ZWhat's new in Red Hat OpenShift 5 for developers https://themorning.dev/story/cryptocurrency-lawsuit-ethereum-foundation-required-suicide-pledge-3ba3de83ee386c1fThe Morning Deven2026-11-09T15:23:57.000ZCryptocurrency lawsuit: Ethereum Foundation required "suicide pledge" https://themorning.dev/story/eu-plans-crackdown-on-addictive-social-media-bot-features-558e331e52660483The Morning Deven2026-11-09T15:10:16.000ZEU Plans Crackdown on Addictive Social Media, Bot Features https://themorning.dev/story/git-considers-voting-to-determine-its-llm-policy-c5434a3b7350bffbThe Morning Deven2026-11-09T15:05:07.000Z[$] Git considers voting to determine its LLM policy https://themorning.dev/story/medium-is-launching-a-new-note-taking-app-called-tk-c5df2e12516405baThe Morning Deven2026-11-09T15:04:45.000ZMedium is launching a new note-taking app called TK https://themorning.dev/story/microsoft-s-azure-linux-gets-470-plus-security-fixes-in-one-almighty-patching-se-fc813b911c0a9ac4The Morning Deven2026-11-09T15:02:00.000ZMicrosoft's Azure Linux gets 470-plus security fixes in one almighty patching session https://themorning.dev/story/malicious-bee-js-npm-release-and-swarm-desktop-releases-deliver-sleepyduck-ether-43e001200d16b54aThe Morning Deven2026-11-09T14:52:15.147ZMalicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor https://themorning.dev/story/cloudflare-develops-public-certificate-authority-for-post-quantum-web-security-4ade5241ebc40902The Morning Deven2026-11-09T14:35:00.000ZCloudflare Develops Public Certificate Authority for Post-Quantum Web Security https://themorning.dev/story/bitter-hackers-deploy-new-paprat-backdoor-in-cyberespionage-campaign-targeting-s-7bdf0c6dc5dcaaf0The Morning Deven2026-11-09T14:31:29.000ZBitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia https://themorning.dev/story/who-gives-a-crap-hackers-apparently-after-toilet-paper-maker-s-customer-data-exp-a18ce332976ade3aThe Morning Deven2026-11-09T14:30:00.000ZWho Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed https://themorning.dev/story/alleged-ai-aided-cyberattack-exploits-assistant-interface-to-breach-german-web-h-e9e255b082200425The Morning Deven2026-11-09T14:15:00.000ZAlleged AI-aided cyberattack exploits assistant interface to breach German web host https://themorning.dev/story/revolve-puts-data-breach-victim-count-at-1-5-million-7cf7e23f889027d0The Morning Deven2026-11-09T14:08:08.000ZRevolve Puts Data Breach Victim Count at 1.5 Million https://themorning.dev/story/security-updates-for-monday-a335f3674491a1aeThe Morning Deven2026-11-09T14:02:31.000ZSecurity updates for Monday https://themorning.dev/story/practice-makes-precise-at-corl-nvidia-and-partners-reveal-how-robots-rehearse-de-97be7dad625b85b1The Morning Deven2026-11-09T14:00:01.000ZPractice Makes Precise: At CoRL, NVIDIA and Partners Reveal How Robots Rehearse Delicate Work in Simulation https://themorning.dev/story/automattic-debuts-a-platform-to-deploy-vibe-coding-apps-amid-a-changing-internet-95c3c02be004506dThe Morning Deven2026-11-09T14:00:00.000ZAutomattic debuts a platform to deploy vibe coding apps amid a changing internet https://themorning.dev/story/outlook-com-bounces-legit-emails-as-microsoft-s-authentication-crackdown-goes-si-2bf3346c67e6baa4The Morning Deven2026-11-09T13:30:00.000ZOutlook.com bounces legit emails as Microsoft's authentication crackdown goes sideways https://themorning.dev/story/pypi-makes-release-attestations-easier-to-find-with-new-security-tab-3f1364bdf6a8ff26The Morning Deven2026-11-09T13:23:29.000ZPyPI makes release attestations easier to find with new security tab https://themorning.dev/story/plex2shell-exploited-against-qnap-nas-users-ca8912a2e710a7bfThe Morning Deven2026-11-09T13:13:28.000ZPlex2Shell Exploited Against QNAP NAS Users https://themorning.dev/story/anthropic-s-fab-le-5-1-is-live-at-10-50-new-model-breakdown-and-benchmark-jump-a0b11b2d54a609beThe Morning Deven2026-11-09T13:00:00.000ZAnthropic's Fab le 5.1 is live at $10/$50: new model breakdown and benchmark jump https://themorning.dev/story/launching-the-vite-ecosystem-fund-d079a8b6909b9b85The Morning Deven2026-11-09T13:00:00.000ZLaunching the Vite Ecosystem Fund https://themorning.dev/story/google-escalates-nvidia-rivalry-with-new-versions-of-its-tpu-systems-1363cdb142dc5b30The Morning Deven2026-11-09T12:30:00.000ZGoogle Escalates Nvidia Rivalry With New Versions of Its TPU Systems https://themorning.dev/story/instagram-s-ai-age-detection-is-expanding-globally-b984208759f6953bThe Morning Deven2026-11-09T12:00:00.000ZInstagram’s AI age detection is expanding globally https://themorning.dev/story/what-s-new-in-node-js-27-010ba45a8f15200bThe Morning Deven2026-11-09T11:48:55.000ZWhat's new in Node.js 27 https://themorning.dev/story/amd-admits-gpu-driver-bug-is-writing-data-continuously-wearing-out-ssds-64a9b8e5670479dcThe Morning Deven2026-11-09T11:46:33.000ZAMD admits GPU driver bug is writing data continuously, wearing out SSDs https://themorning.dev/story/portal-breach-at-germany-s-top-university-exposes-every-registered-user-s-passwo-b535061e31173c75The Morning Deven2026-11-09T11:44:20.000ZPortal breach at Germany's top university exposes every registered user's password https://themorning.dev/story/the-us-occ-grants-coinbase-full-approval-for-a-trust-bank-charter-sources-say-it-ebaef60b2b5aa4a4The Morning Deven2026-11-09T11:40:00.000ZThe US OCC grants Coinbase full approval for a trust bank charter; sources say it could expand Coinbase's stablecoin business and let it issue stablecoins (Olga Kharif/Bloomberg) https://themorning.dev/story/openai-and-anthropic-valuations-fall-as-ai-market-rout-hits-fundraising-af08e1f33b668617The Morning Deven2026-11-09T11:28:16.000ZOpenAI and Anthropic Valuations Fall as AI Market Rout Hits Fundraising https://themorning.dev/story/default-admin-admin-server-password-helps-researchers-hack-two-automakers-unlock-c5154d08fadfed61The Morning Deven2026-11-09T11:27:53.000ZDefault 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars https://themorning.dev/story/amplifon-americas-data-breach-impacts-1-3-million-156a0344f3303140The Morning Deven2026-11-09T11:20:09.000ZAmplifon Americas Data Breach Impacts 1.3 Million https://themorning.dev/story/aws-launches-torchneuron-to-run-pytorch-models-on-aws-trainium-without-modificat-60bffcfdca69eb79The Morning Deven2026-11-09T11:00:00.000ZAWS Launches TorchNeuron to Run PyTorch Models on AWS Trainium Without Modifications https://themorning.dev/story/web3auth-flaw-exploited-to-steal-keplr-crypto-provider-empties-other-wallets-for-a02fb0af291601b9The Morning Deven2026-11-09T10:56:25.000ZWeb3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety https://themorning.dev/story/over-3-million-people-hit-by-frontline-education-data-breach-3c0c651efea81480The Morning Deven2026-11-09T10:09:02.000ZOver 3 Million People Hit by Frontline Education Data Breach https://themorning.dev/story/lnbits-urges-all-operators-to-shut-down-their-bitcoin-lightning-wallet-servers-a-62af4291e17cf20fThe Morning Deven2026-11-09T10:01:21.000ZLNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks https://themorning.dev/story/us-federal-prosecutors-say-businesses-have-lost-129m-to-scam-calls-using-ai-gene-3798acc6ede853ecThe Morning Deven2026-11-09T09:50:00.000ZUS federal prosecutors say businesses have lost $129M+ to scam calls using AI-generated voices to mimic company executives in the 18 months since July 2024 (Adeel Hassan/New York Times) https://themorning.dev/story/taiwan-based-hacker-used-bossai-ai-agents-to-steal-taipei-emergency-dispatch-rec-e8082cc54dfbdb4bThe Morning Deven2026-11-09T09:01:50.000ZTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records https://themorning.dev/story/secret-scanning-detects-secrets-in-github-actions-workflow-logs-06e2b9999d4d574bThe Morning Deven2026-11-09T09:01:37.000ZSecret scanning detects secrets in GitHub Actions workflow logs https://themorning.dev/story/google-deepmind-s-ai-agents-make-1024-bit-rsa-keys-cheaper-to-attack-33c824e207021f77The Morning Deven2026-11-09T08:35:50.000ZGoogle DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack https://themorning.dev/story/chatgpt-desktop-forwards-your-ssh-agent-to-remote-machines-8ceada5f95028093The Morning Deven2026-11-09T08:17:49.000ZChatGPT Desktop forwards your SSH agent to remote machines https://themorning.dev/story/cve-2026-113508-apache-airflow-logout-token-revocation-fails-open-errors-silentl-49b30f6b8221e8d3The Morning Deven2026-11-09T07:33:36.000ZCVE-2026-113508: Apache Airflow: Logout token revocation fails open; errors silently swallowed https://themorning.dev/story/cve-2026-113504-apache-airflow-secrets-masker-pattern-based-masking-bounded-at-d-240c8b7177de5d62The Morning Deven2026-11-09T07:31:35.000ZCVE-2026-113504: Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartext https://themorning.dev/story/cve-2026-111455-apache-airflow-connections-api-async-connection-test-authorizes-8f08a73c169d610aThe Morning Deven2026-11-09T07:29:41.000ZCVE-2026-111455: Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commit https://themorning.dev/story/cve-2026-111454-apache-airflow-api-asset-endpoints-return-scheduled-producing-co-c9a81408bf761efeThe Morning Deven2026-11-09T07:28:02.000ZCVE-2026-111454: Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read https://themorning.dev/story/cve-2026-111453-apache-airflow-api-asset-queuedevents-delete-checks-dag-edit-on-bcf2dc87366aa747The Morning Deven2026-11-09T07:26:21.000ZCVE-2026-111453: Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable Dag https://themorning.dev/story/cve-2026-111452-apache-airflow-secrets-masker-camelcase-key-names-privatekey-con-8c491033c2dfaf5cThe Morning Deven2026-11-09T07:24:40.000ZCVE-2026-111452: Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list https://themorning.dev/story/cve-2026-111421-apache-airflow-execution-api-set-xcom-skips-the-reserved-key-che-c7cca9f2d3ce944fThe Morning Deven2026-11-09T07:22:55.000ZCVE-2026-111421: Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XComs instantiate airflow.* classes on the API server https://themorning.dev/story/cve-2026-111395-apache-airflow-reserved-serialization-keys-in-dag-run-conf-crash-adb8b50b7bbc129fThe Morning Deven2026-11-09T07:21:09.000ZCVE-2026-111395: Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline callbacks https://themorning.dev/story/cve-2026-107474-apache-airflow-connections-api-apprise-connection-config-extra-r-867d29f2ef034498The Morning Deven2026-11-09T07:19:27.000ZCVE-2026-107474: Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext https://themorning.dev/story/cve-2026-101031-apache-airflow-shell-command-injection-in-the-example-dag-decora-0bab53b80ab6f311The Morning Deven2026-11-09T07:17:42.000ZCVE-2026-101031: Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier https://themorning.dev/story/cve-2026-96285-apache-airflow-scheduler-next-kwargs-deserialized-before-the-dict-b6c4f3ebf9ddb045The Morning Deven2026-11-09T07:14:26.000ZCVE-2026-96285: Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors https://themorning.dev/story/cve-2026-86829-apache-airflow-deserialization-of-task-controlled-xcom-values-in-d28c956794324d01The Morning Deven2026-11-09T07:12:41.000ZCVE-2026-86829: Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation https://themorning.dev/story/u-s-agencies-warn-refrigeration-controller-attacks-could-cause-fires-and-invento-df6a1e5a88d8a5b7The Morning Deven2026-11-09T06:15:10.000ZU.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses https://themorning.dev/story/cisa-flags-sonicwall-sonicos-mfa-bypass-flaw-amid-reports-of-possible-exploitati-3d5dfb277e1d458fThe Morning Deven2026-11-09T06:05:24.000ZCISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation https://themorning.dev/story/cve-2026-68982-apache-airflow-celeryexecutor-forged-callback-workloads-run-on-ce-3ac2423429d1d628The Morning Deven2026-11-09T06:02:37.000ZCVE-2026-68982: Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation https://themorning.dev/story/cve-2026-50204-apache-airflow-audit-log-secrets-masker-redacts-by-key-name-only-2efeefb5d08f8f37The Morning Deven2026-11-09T06:00:50.000ZCVE-2026-50204: Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext https://themorning.dev/story/cve-2026-40913-apache-airflow-import-errors-api-leaks-unauthorized-dag-stack-tra-4d6df70a5ba3491fThe Morning Deven2026-11-09T05:59:03.000ZCVE-2026-40913: Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcement https://themorning.dev/story/linus-torvalds-sees-signs-ai-prompted-patch-flood-has-peaked-f95e5ffd3bd78329The Morning Deven2026-11-09T04:53:08.000ZLinus Torvalds sees signs AI-prompted patch flood has peaked https://themorning.dev/story/risky-bulletin-pro-kremlin-hacktivists-dox-eu-politicians-law-enforcement-2e7f5c40325e3921The Morning Deven2026-11-09T03:33:48.000ZRisky Bulletin: Pro-Kremlin hacktivists dox EU politicians, law enforcement https://themorning.dev/story/nvidia-s-jensen-huang-china-is-not-our-enemy-us-chip-policy-a-mistake-6eb4f87e92c4c0ecThe Morning Deven2026-11-09T02:46:23.000ZNvidia’s Jensen Huang: China Is 'Not Our Enemy,' US Chip Policy a 'Mistake' https://themorning.dev/story/ai-sdk-7-0-163-added-two-stream-parts-in-a-patch-release-my-exhaustive-switch-st-377e9159b2d0bcdaThe Morning Deven2026-11-09T02:44:50.000ZAI SDK 7.0.163 Added Two Stream Parts in a Patch Release. My Exhaustive Switch Stopped Compiling https://themorning.dev/story/huawei-says-it-s-made-a-100-percent-chinese-pc-94acbee62afa84e1The Morning Deven2026-11-09T02:14:17.000ZHuawei says it’s made a 100 percent Chinese PC https://themorning.dev/story/spring-ai-2-1-0-rc2-available-now-0021230a4ff43219The Morning Deven2026-11-09T00:00:00.000ZSpring AI 2.1.0-RC2 Available Now https://themorning.dev/story/sunsetting-sourcegraph-cody-and-building-the-future-of-code-intelligence-4a369b2596c9fd42The Morning Deven2026-11-09T00:00:00.000ZSunsetting Sourcegraph Cody and building the future of code intelligence https://themorning.dev/story/vim-security-heap-buffer-overflow-with-crafted-spell-file-in-vim-9-2-1309-b41d3eddcc2bd8e4The Morning Deven2026-11-08T23:46:57.000Z[vim-security]: Heap Buffer Overflow with Crafted Spell File in Vim < 9.2.1309 https://themorning.dev/story/vim-security-insecure-socket-directory-in-vim-9-2-1308-bd13b9f2c7244401The Morning Deven2026-11-08T23:45:13.000Z[vim-security] Insecure Socket Directory in Vim < 9.2.1308 https://themorning.dev/story/home-assistant-the-password-is-not-the-key-token-secrets-in-cleartext-two-token-30d23946b67fadd1The Morning Deven2026-11-08T23:43:28.000ZHome Assistant: the password is not the key — token secrets in cleartext, two token classes never expire, password change revokes none (2026.11.0, live-proven) https://themorning.dev/story/sources-officials-at-the-commerce-department-s-ai-safety-center-caissi-were-aske-783b692580d03f49The Morning Deven2026-11-08T22:55:01.000ZSources: officials at the Commerce Department's AI safety center CAISSI were asked to informally report to a White House office, raising independence concerns (Garance Burke/Associated Press) https://themorning.dev/story/chris-van-eijk-json-vs-jsonb-in-postgresql-size-and-speed-measured-f4cbabdc289329d7The Morning Deven2026-11-08T22:30:11.000ZChris van Eijk: json vs jsonb in PostgreSQL: size and speed, measured https://themorning.dev/story/a-new-chapter-for-typescript-10x-performance-boost-97e1d186cd5739b5The Morning Deven2026-11-08T21:17:28.000ZA new chapter for TypeScript - 10x performance boost https://themorning.dev/story/nvidia-is-investigating-jensen-huang-s-relationship-with-a-chinese-spy-ecd65815b585666dThe Morning Deven2026-11-08T20:22:39.000ZNvidia is investigating Jensen Huang’s relationship with a Chinese spy https://themorning.dev/story/outlook-com-is-quietly-rejecting-email-from-domains-without-dmarc-ec6779b05ebb24a9The Morning Deven2026-11-08T19:20:32.000ZOutlook.com Is Quietly Rejecting Email from Domains Without DMARC https://themorning.dev/story/apple-is-racing-to-make-siri-more-agentic-53044e44b3aab431The Morning Deven2026-11-08T19:18:19.000ZApple is racing to make Siri more agentic https://themorning.dev/story/goldman-sachs-is-pulling-claude-code-from-its-bankers-and-traders-a78801b830361293The Morning Deven2026-11-08T18:16:07.000ZGoldman Sachs Is Pulling Claude Code from Its Bankers and Traders https://themorning.dev/story/deepseek-s-ai-agent-platform-hits-1-54-million-daily-users-934985cf01b72207The Morning Deven2026-11-08T18:01:43.000ZDeepSeek’s AI Agent Platform Hits 1.54 Million Daily Users https://themorning.dev/story/don-t-hand-propaganda-a-gift-reading-the-brenner-base-tunnel-se-breach-calmly-94bf2b9a700d8710The Morning Deven2026-11-08T17:46:16.000ZDon’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly https://themorning.dev/story/excluding-anthropic-s-ipo-ai-companies-sold-or-priced-300b-of-stock-in-2026-with-e45e8506200d276bThe Morning Deven2026-11-08T17:45:00.000ZExcluding Anthropic's IPO, AI companies sold or priced $300B+ of stock in 2026, with ~$100B more on tap, raising questions about how much the market can absorb (Alex Eichenstein/The Information) https://themorning.dev/story/better-auth-s-november-security-release-what-to-patch-and-rotate-today-51fdede5243f13cdThe Morning Deven2026-11-08T17:44:14.000ZBetter Auth's November Security Release: What to Patch and Rotate Today https://themorning.dev/story/elvis-and-eminem-rights-holders-are-suing-suno-ae06ecf7187204d4The Morning Deven2026-11-08T17:23:19.000ZElvis and Eminem rights holders are suing Suno https://themorning.dev/story/iris-ohyama-data-cloud-breach-exposes-info-of-7-7-million-customers-840fc9184c683327The Morning Deven2026-11-08T15:43:08.000ZIris Ohyama data cloud breach exposes info of 7.7 million customers https://themorning.dev/story/perplexity-s-ai-agents-keep-working-after-you-close-the-tab-81c28ede29aae0e0The Morning Deven2026-11-08T15:30:00.000ZPerplexity’s AI agents keep working after you close the tab https://themorning.dev/story/positive-technologies-ecaea03198acc6adThe Morning Deven2026-11-08T15:00:01.000ZТри часа на всю атаку: ИИ-агенты взломали российскую компанию. Что выяснила Positive Technologies https://themorning.dev/story/apple-explores-turning-siri-ai-into-chatgpt-dots-like-agent-ios-28-shake-up-34520e7f743e70e4The Morning Deven2026-11-08T15:00:01.000ZApple Explores Turning Siri AI Into ChatGPT Dots-Like Agent; iOS 28 Shake-Up https://themorning.dev/story/japanese-arcades-suffer-week-long-blackout-following-sega-server-hack-0ce0b41235fb1e8aThe Morning Deven2026-11-08T15:00:00.000ZJapanese arcades suffer week-long blackout following Sega server hack https://themorning.dev/story/three-ai-vendors-restructured-usage-limits-in-two-weeks-what-it-means-if-you-pay-a9f2909736bbe44eThe Morning Deven2026-11-08T15:00:00.000ZThree AI vendors restructured usage limits in two weeks: what it means if you pay for AI https://themorning.dev/story/openai-raises-11b-at-a-1-25t-valuation-ea31161d462c8ec0The Morning Deven2026-11-08T14:49:23.000ZOpenAI raises $11B at a $1.25T valuation https://themorning.dev/story/the-end-of-an-era-as-linux-7-5-purges-the-last-30-year-old-intel-mmx-optimizatio-b898af538ee978d3The Morning Deven2026-11-08T14:40:00.000ZThe end of an era as Linux 7.5 purges the last 30-year-old Intel MMX optimizations from Pentium age https://themorning.dev/story/anthropic-buys-power-for-ai-data-centres-in-3-4b-deal-ft-says-b911ef86f5c7b684The Morning Deven2026-11-08T11:48:21.000ZAnthropic Buys Power for AI Data Centres in $3.4B Deal, FT Says https://themorning.dev/story/gcc-17-feature-development-ends-next-week-1bc338d79dab44bdThe Morning Deven2026-11-08T11:12:21.000ZGCC 17 Feature Development Ends Next Week https://themorning.dev/story/claude-sonnet-4-6-is-here-1m-context-opus-level-coding-at-sonnet-prices-7bc3a6d13881dacfThe Morning Deven2026-11-08T10:42:02.000ZClaude Sonnet 4.6 Is Here: 1M Context, Opus-Level Coding at Sonnet Prices https://themorning.dev/story/apple-s-grey-list-what-it-means-for-developers-and-how-to-work-around-it-544de4b0e89b4d21The Morning Deven2026-11-08T10:42:00.000ZApple’s Grey List: What It Means for Developers and How to Work Around It https://themorning.dev/story/internet-governance-about-to-get-its-quadrennial-stress-test-at-itu-meeting-3e95397a13cefab5The Morning Deven2026-11-08T09:33:00.000ZInternet governance about to get its quadrennial stress test at ITU meeting https://themorning.dev/story/unrealircd-6-2-7-1-released-hot-patch-cve-2026-114713-38b0487cb4f32252The Morning Deven2026-11-08T09:09:07.000ZUnrealIRCd 6.2.7.1 released & hot-patch (CVE-2026-114713) https://themorning.dev/story/google-cloud-adds-self-managed-vmware-cloud-foundation-on-bare-metal-d5be8a41cb902045The Morning Deven2026-11-08T07:16:00.000ZGoogle Cloud Adds Self-Managed VMware Cloud Foundation on Bare Metal https://themorning.dev/story/cloudflare-scales-d1-control-plane-to-millions-of-databases-c030d0661f3fda17The Morning Deven2026-11-08T06:34:00.000ZCloudflare Scales D1 Control Plane to Millions of Databases https://themorning.dev/story/mistral-small-58-empty-replies-in-300-tool-calls-and-the-retry-loop-6b16772c653ca861The Morning Deven2026-11-08T06:05:00.000ZMistral Small: 58 empty replies in 300 tool calls, and the retry loop https://themorning.dev/story/oxlint-js-plugins-your-custom-eslint-rules-no-longer-keep-you-on-eslint-eca65d7f5b93fb5dThe Morning Deven2026-11-08T00:24:29.000ZOxlint JS Plugins: Your Custom ESLint Rules No Longer Keep You on ESLint https://themorning.dev/story/github-new-pull-request-overview-page-in-public-preview-a91cf3926bcc636eThe Morning Deven2026-11-07T23:09:40.000ZGitHub New pull request overview page in public preview https://themorning.dev/story/cursor-now-talks-back-voice-chat-with-your-coding-agent-45a29edcdd84a84aThe Morning Deven2026-11-07T22:50:34.000ZCursor Now Talks Back: Voice Chat With Your Coding Agent