https://themorning.dev/story/opensuse-tumbleweed-transitioning-to-agama-installer-a30269397cdbc93cThe Morning Deven2026-11-10T10:53:06.000ZopenSUSE Tumbleweed Transitioning To Agama Installer https://themorning.dev/story/siri-ai-developer-preview-what-ios-developers-can-build-today-and-what-they-can-0abf19049dab37b9The Morning Deven2026-11-10T10:50:17.000ZSiri AI Developer Preview: What iOS Developers Can Build Today (and What They Can’t) https://themorning.dev/story/all-net-connected-vehicles-from-two-major-automakers-allowed-hackers-to-remotely-080710622d63b59bThe Morning Deven2026-11-10T10:50:00.000ZAll net-connected vehicles from two major automakers allowed hackers to remotely unlock doors and start the engine https://themorning.dev/story/rpm-v6-format-approved-for-fedora-46-thinlto-flag-rejected-d05d538362a4756eThe Morning Deven2026-11-10T10:37:05.000ZRPM v6 Format Approved For Fedora 46, ThinLTO Flag Rejected https://themorning.dev/story/apple-patches-imessage-group-chat-privacy-flaws-and-bluetooth-pairing-vulnerabil-ba7507c6f20e8122The Morning Deven2026-11-10T10:16:51.000ZApple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities https://themorning.dev/story/russian-turla-hackers-use-new-cereal-malware-to-steal-emails-from-government-exc-7d35c70e67083122The Morning Deven2026-11-10T10:07:29.000ZRussian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers https://themorning.dev/story/windows-settings-backup-is-on-by-default-starting-with-windows-11-26h2-eb8503f8804a356eThe Morning Deven2026-11-10T10:03:40.000ZWindows settings backup is on by default starting with Windows 11 26H2 https://themorning.dev/story/sap-patches-four-cvss-10-0-flaws-including-two-enabling-remote-code-execution-ce0b470d4dea056eThe Morning Deven2026-11-10T10:02:40.000ZSAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution https://themorning.dev/story/ibm-aspera-faspex-signalwire-freeswitch-vulnerabilities-exploited-in-attacks-e61330c9778509bdThe Morning Deven2026-11-10T09:42:27.000ZIBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks https://themorning.dev/story/microsoft-teaches-schools-that-free-email-was-just-a-phase-70f18a2a580446bcThe Morning Deven2026-11-10T09:29:00.000ZMicrosoft teaches schools that free email was just a phase https://themorning.dev/story/meituan-releases-weights-for-longcat-2-5-a-1-6t-parameter-moe-model-for-long-hor-118661df2449c6dfThe Morning Deven2026-11-10T08:50:03.000ZMeituan releases weights for LongCat-2.5, a 1.6T-parameter MoE model for long-horizon agentic tasks, under the MIT license, after unveiling it on November 1 (Carl Franzen/VentureBeat) https://themorning.dev/story/coordinated-disclosure-sblim-sfcb-pre-auth-remote-dos-and-latent-oob-nul-write-v-d340f4ffe8b458cfThe Morning Deven2026-11-10T08:40:22.000Z[Coordinated disclosure] sblim-sfcb: pre-auth remote DoS (and latent OOB NUL write) via unbounded quoted-attribute scan in CIM-XML parser (cimXmlParser.c getValue) https://themorning.dev/story/google-cloud-spend-caps-reach-general-availability-with-api-and-monthly-resets-75c0fa4f4d060e7cThe Morning Deven2026-11-10T08:39:00.000ZGoogle Cloud Spend Caps Reach General Availability with API and Monthly Resets https://themorning.dev/story/thailand-sets-70-decibel-noise-heat-limits-for-data-centers-f35d851cd4a19dfbThe Morning Deven2026-11-10T07:59:08.000ZThailand Sets 70-Decibel Noise, Heat Limits for Data Centers https://themorning.dev/story/introducing-our-smallest-most-efficient-model-muse-ember-fabe838d73f55c38The Morning Deven2026-11-10T07:28:21.000ZIntroducing Our Smallest, Most Efficient Model: Muse Ember https://themorning.dev/story/security-flaws-across-uk-government-sites-exposed-god-tier-information-2eff05fe6c164061The Morning Deven2026-11-10T07:00:00.000ZSecurity Flaws Across UK Government Sites Exposed ‘God-Tier’ Information https://themorning.dev/story/google-issues-chrome-security-update-for-eighth-actively-exploited-zero-day-of-2-9844bc61915e12dbThe Morning Deven2026-11-10T06:52:54.000ZGoogle Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 https://themorning.dev/story/n-able-takes-n-central-cloud-offline-after-researcher-discloses-33-zero-days-wit-329980cc6fad8b73The Morning Deven2026-11-10T06:44:36.000ZN-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits https://themorning.dev/story/effect-4-0-ships-dependency-free-rewrite-with-5x-smaller-bundles-and-long-term-s-a569f48789e3ea85The Morning Deven2026-11-10T06:33:00.000ZEffect 4.0 Ships: Dependency-Free Rewrite with 5x Smaller Bundles and Long-Term Support https://themorning.dev/story/cisa-warns-of-active-exploitation-of-openssh-gpustack-freeswitch-and-ibm-flaws-b579a343e6b64babThe Morning Deven2026-11-10T06:31:42.000ZCISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws https://themorning.dev/story/over-575-malicious-openclaw-skills-delivered-malware-to-windows-and-macos-4b5815d13aa1db94The Morning Deven2026-11-10T05:30:59.000ZOver 575 malicious OpenClaw skills delivered malware to Windows and macOS https://themorning.dev/story/a-new-ai-tool-from-google-deepmind-proved-the-signal-protocol-is-secure-c98e24de8e306e06The Morning Deven2026-11-10T05:01:00.000ZA New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure https://themorning.dev/story/moonshot-rents-nvidia-s-top-ai-chips-in-china-documents-show-40881cc5fab2fef0The Morning Deven2026-11-10T04:54:37.000ZMoonshot Rents Nvidia’s Top AI Chips in China, Documents Show https://themorning.dev/story/trump-picks-palantir-s-losapio-to-head-cisa-40624752f33038d2The Morning Deven2026-11-10T03:38:11.000ZTrump picks Palantir’s LoSapio to head CISA https://themorning.dev/story/cisco-to-link-all-future-products-to-its-saas-y-cloud-control-management-tool-a066efdc1712419fThe Morning Deven2026-11-10T03:32:40.000ZCisco to link all future products to its SaaS-y Cloud Control management tool https://themorning.dev/story/next-js-16-4-6-now-gzips-route-handlers-i-checked-streams-downloads-and-pre-comp-693fd0c0d7f107faThe Morning Deven2026-11-10T02:44:16.000ZNext.js 16.4.6 Now Gzips Route Handlers. I Checked Streams, Downloads and Pre-Compressed Bodies https://themorning.dev/story/australia-to-create-ai-safety-regulator-mandatory-safety-rules-0efe3a3dc1058fc5The Morning Deven2026-11-10T02:26:20.000ZAustralia to Create AI Safety Regulator, Mandatory Safety Rules https://themorning.dev/story/dokploy-the-validator-allows-the-backtick-a-member-s-database-password-change-is-171642f4d02fcce4The Morning Deven2026-11-10T02:17:08.000ZDokploy: the validator allows the backtick — a member's database password change is host RCE, 9.9 on the vendor's own vector (v0.31.0, live-proven) https://themorning.dev/story/anthropic-retracts-filing-that-showed-ipo-target-reuters-says-6e66d0729cb45efdThe Morning Deven2026-11-10T01:43:10.000ZAnthropic Retracts Filing That Showed IPO Target, Reuters Says https://themorning.dev/story/homeassistant-ai-ha-mcp-81f33d0f3f662b41The Morning Deven2026-11-10T01:01:31.231Zhomeassistant-ai/ha-mcp https://themorning.dev/story/ai-hallucinated-packages-nov-2-8-2026-180-new-names-313abc15c1fc846aThe Morning Deven2026-11-10T00:26:57.000ZAI-hallucinated packages, Nov 2–8, 2026: 180 new names https://themorning.dev/story/mesa-26-3-released-with-vk-amd-anti-lag-for-radv-many-other-vulkan-improvements-c0e79975dea1211fThe Morning Deven2026-11-10T00:19:46.000ZMesa 26.3 Released With VK_AMD_anti_lag For RADV, Many Other Vulkan Improvements https://themorning.dev/story/anthropic-s-super-bug-finding-mythos-model-is-going-into-cisco-and-ibm-products-d3f5f59ecb3bcdf4The Morning Deven2026-11-10T00:00:20.000ZAnthropic's super bug-finding Mythos model is going into Cisco and IBM products https://themorning.dev/story/krb5-1-22-3-is-released-with-fixes-for-21-cves-fd38c8adaeebd5d1The Morning Deven2026-11-09T23:56:23.000Zkrb5-1.22.3 is released, with fixes for 21 CVEs https://themorning.dev/story/firefox-160-available-with-speech-to-text-mkv-files-with-flac-mp3-pcm-audio-78f573851870f55eThe Morning Deven2026-11-09T23:12:33.000ZFirefox 160 Available With Speech-To-Text, MKV Files With FLAC / MP3 / PCM Audio https://themorning.dev/story/hotel-giant-wyndham-exposed-customer-data-after-app-security-lapse-fffcae2ee0fe3118The Morning Deven2026-11-09T23:03:46.000ZHotel giant Wyndham exposed customer data after app security lapse https://themorning.dev/story/openai-dots-can-coordinate-tasks-across-multiple-connected-local-computers-ce06b66dea1553b8The Morning Deven2026-11-09T22:45:30.000ZOpenAI Dots Can Coordinate Tasks Across Multiple Connected Local Computers https://themorning.dev/story/kubeflow-pipelines-api-server-lacks-authorization-for-shared-pipeline-uploads-cv-19e26d4c7fd5ccb4The Morning Deven2026-11-09T22:22:41.000ZKubeflow Pipelines API server lacks authorization for shared pipeline uploads (CVE-2026-77596) https://themorning.dev/story/pocket-id-email-verification-token-remains-valid-after-address-change-enabling-a-2a6eb1b7648bdfa1The Morning Deven2026-11-09T22:12:21.000ZPocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing (CVE-2026-115770) https://themorning.dev/story/tpu-8tx-and-tpu-8i-max-d38ba6f8d5314abcThe Morning Deven2026-11-09T21:56:57.000ZTPU 8tx and TPU 8i Max https://themorning.dev/story/cve-2026-124077-apache-commons-codec-nul-bytes-in-tree-entry-names-cause-git-swh-aa4467a7bc8edf68The Morning Deven2026-11-09T21:54:35.000ZCVE-2026-124077: Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class) https://themorning.dev/story/cve-2026-119078-apache-commons-codec-blake3-dofinalize-is-stateless-the-document-2895c222c6610986The Morning Deven2026-11-09T21:52:54.000ZCVE-2026-119078: Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keys https://themorning.dev/story/cisa-announces-enhanced-reporting-form-for-cyber-incidents-907718f8d43040edThe Morning Deven2026-11-09T21:38:20.000ZCISA Announces Enhanced Reporting Form for Cyber Incidents https://themorning.dev/story/nvidia-intervened-in-us-probe-of-megaspeed-chip-smuggling-d632a535d7566ecbThe Morning Deven2026-11-09T21:28:26.000ZNvidia Intervened in US Probe of Megaspeed Chip Smuggling https://themorning.dev/story/google-rolls-out-new-ai-chips-to-challenge-nvidia-1b26b34384c08573The Morning Deven2026-11-09T21:12:56.000ZGoogle Rolls Out New AI Chips to Challenge Nvidia https://themorning.dev/story/nvidia-backed-fireworks-ai-notifies-customers-of-its-second-hack-in-weeks-3d0ef2f2baf832a9The Morning Deven2026-11-09T20:46:58.000ZNvidia-Backed Fireworks AI Notifies Customers of Its Second Hack in Weeks https://themorning.dev/story/forge-lab-uses-agentic-tools-to-identify-memory-safety-issues-in-rust-5bce94b89cfb76dfThe Morning Deven2026-11-09T20:17:31.000ZFORGE Lab uses agentic tools to identify memory safety issues in Rust https://themorning.dev/story/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitat-8abde1ce00befc7cThe Morning Deven2026-11-09T19:41:34.000ZVulnerability that lets hackers SSH into Linux devices is under active exploitation https://themorning.dev/story/apple-s-50-intelligence-usage-packs-extend-access-to-some-ai-features-4a7141713ab5f922The Morning Deven2026-11-09T19:09:58.000ZApple’s $50 Intelligence Usage Packs extend access to some AI features https://themorning.dev/story/cpython-cve-2026-19552-ssl-get-server-certificate-addr-ca-certs-verifies-the-cha-d2f20ea96a09325fThe Morning Deven2026-11-09T19:06:00.000ZCPython: [CVE-2026-19552] ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity https://themorning.dev/story/cpython-cve-2026-124249-http-cookiejar-deletes-cookies-of-other-domains-via-expi-987811c0f5d6ba8dThe Morning Deven2026-11-09T19:03:51.000ZCPython: [CVE-2026-124249] http.cookiejar deletes cookies of other domains via expired Set-Cookie https://themorning.dev/story/anthropic-launches-new-claude-fable-and-mythos-5-2-models-f1eea0a2781af6aaThe Morning Deven2026-11-09T19:00:00.000ZAnthropic launches new Claude Fable and Mythos 5.2 models https://themorning.dev/story/nominal-bets-on-ai-for-aerospace-and-defense-422562e38c09bde3The Morning Deven2026-11-09T18:52:24.000ZNominal Bets on AI for Aerospace and Defense https://themorning.dev/story/fastapi-code-generator-call-time-rce-via-operation-summary-unescaped-route-handl-d984152a674be083The Morning Deven2026-11-09T18:50:00.000Zfastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring (CVE-2026-63470) https://themorning.dev/story/google-claims-its-new-ai-software-cuts-inference-latency-by-over-90-but-there-s-e147b529a5c0e8b4The Morning Deven2026-11-09T18:40:01.000ZGoogle claims its new AI software cuts inference latency by over 90% — but there’s a catch https://themorning.dev/story/vanderbilt-cybersecurity-incident-impacting-campus-devices-and-systems-2fdab4abb5f338b9The Morning Deven2026-11-09T18:30:00.000ZVanderbilt cybersecurity incident impacting campus devices and systems https://themorning.dev/story/google-gemini-routes-personal-drive-files-and-emails-to-human-annotators-fea55cef604184d4The Morning Deven2026-11-09T18:24:38.000ZGoogle Gemini routes personal Drive files and emails to human annotators https://themorning.dev/story/cursor-and-google-join-openai-in-giving-coding-agents-a-voice-claude-code-stays-2cecd68abae5d5aaThe Morning Deven2026-11-09T18:22:41.000ZCursor and Google join OpenAI in giving coding agents a voice. Claude Code stays silent. https://themorning.dev/story/attackers-searching-for-sap-netweaver-webshells-mon-nov-9th-49097f3f34acca1bThe Morning Deven2026-11-09T18:18:15.000ZAttackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th) https://themorning.dev/story/attackers-crash-claude-s-office-party-flaw-to-run-malicious-code-on-linux-adccb074fbff64d1The Morning Deven2026-11-09T18:08:30.000ZAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux https://themorning.dev/story/meta-launches-muse-ember-to-take-on-claude-haiku-and-gpt-6-luna-d78b72f4534f8437The Morning Deven2026-11-09T18:00:00.000ZMeta launches Muse Ember to take on Claude Haiku and GPT-6 Luna https://themorning.dev/story/hackers-exploit-qubole-s-trusted-aws-access-to-breach-customer-accounts-and-stea-bd73ebc7b854e9acThe Morning Deven2026-11-09T17:51:21.000ZHackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data https://themorning.dev/story/russian-cloud-firm-beget-rebuilds-from-scratch-after-data-wiper-attack-073e03d22daec48fThe Morning Deven2026-11-09T17:50:32.000ZRussian cloud firm Beget rebuilds from scratch after data wiper attack https://themorning.dev/story/nvidia-cracks-down-on-overseas-cloud-ai-gpu-rentals-for-china-305e87f3a3200e33The Morning Deven2026-11-09T17:48:17.000ZNvidia cracks down on overseas cloud AI GPU rentals for China https://themorning.dev/story/researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns-ea9844bbee9e3400The Morning Deven2026-11-09T17:31:00.000ZResearchers pwn automakers’ Android apps to remotely unlock cars, honk horns https://themorning.dev/story/announcing-clickhouse-observability-fully-managed-observability-on-clickhouse-cl-9de57fd4360325aeThe Morning Deven2026-11-09T17:00:00.000ZAnnouncing ClickHouse Observability - fully managed observability on ClickHouse Cloud https://themorning.dev/story/langfuse-launches-ai-gateway-721a37df7cec682aThe Morning Deven2026-11-09T16:57:37.000ZLangfuse launches AI Gateway https://themorning.dev/story/clickhouse-managed-postgres-goes-ga-and-xata-acquisition-brings-agentic-capabili-0d35ab125a955b3cThe Morning Deven2026-11-09T16:56:11.000ZClickHouse Managed Postgres goes GA and Xata acquisition brings agentic capabilities to the service https://themorning.dev/story/jsdelivr-handed-out-the-hijacked-axios-940-000-times-a4d7d0aef158342eThe Morning Deven2026-11-09T16:49:50.000ZjsDelivr handed out the hijacked axios 940,000 times https://themorning.dev/story/microsoft-takes-three-decades-to-make-sticky-keys-less-sticky-0411c3f3b8adeea6The Morning Deven2026-11-09T16:43:17.000ZMicrosoft takes three decades to make Sticky Keys less sticky https://themorning.dev/story/run-cost-effective-always-on-agents-to-monitor-your-environment-the-engineering-8f7ed21e7947ecd7The Morning Deven2026-11-09T16:30:31.000ZRun cost-effective, always-on agents to monitor your environment: the engineering behind Watchers https://themorning.dev/story/google-releases-gemini-4-argon-for-robotics-control-simulation-and-policy-improv-409713ace2f5605bThe Morning Deven2026-11-09T15:44:00.000ZGoogle Releases Gemini 4 Argon for Robotics Control, Simulation, and Policy Improvement https://themorning.dev/story/terminal2shell-critical-flaw-grants-instant-shell-access-on-every-major-os-b9964c329da3fa88The Morning Deven2026-11-09T15:41:50.000ZTerminal2Shell: Critical flaw grants instant shell access on every major OS https://themorning.dev/story/disney-and-adobe-are-building-generative-ai-tools-together-86961a9937fd8746The Morning Deven2026-11-09T15:38:56.000ZDisney and Adobe are building generative AI tools together https://themorning.dev/story/what-s-new-in-red-hat-openshift-5-for-developers-f790cfd742b058f4The Morning Deven2026-11-09T15:32:12.000ZWhat's new in Red Hat OpenShift 5 for developers https://themorning.dev/story/cryptocurrency-lawsuit-ethereum-foundation-required-suicide-pledge-3ba3de83ee386c1fThe Morning Deven2026-11-09T15:23:57.000ZCryptocurrency lawsuit: Ethereum Foundation required "suicide pledge" https://themorning.dev/story/eu-plans-crackdown-on-addictive-social-media-bot-features-558e331e52660483The Morning Deven2026-11-09T15:10:16.000ZEU Plans Crackdown on Addictive Social Media, Bot Features https://themorning.dev/story/git-considers-voting-to-determine-its-llm-policy-c5434a3b7350bffbThe Morning Deven2026-11-09T15:05:07.000Z[$] Git considers voting to determine its LLM policy https://themorning.dev/story/medium-is-launching-a-new-note-taking-app-called-tk-c5df2e12516405baThe Morning Deven2026-11-09T15:04:45.000ZMedium is launching a new note-taking app called TK https://themorning.dev/story/microsoft-s-azure-linux-gets-470-plus-security-fixes-in-one-almighty-patching-se-fc813b911c0a9ac4The Morning Deven2026-11-09T15:02:00.000ZMicrosoft's Azure Linux gets 470-plus security fixes in one almighty patching session https://themorning.dev/story/malicious-bee-js-npm-release-and-swarm-desktop-releases-deliver-sleepyduck-ether-43e001200d16b54aThe Morning Deven2026-11-09T14:52:15.147ZMalicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor https://themorning.dev/story/cloudflare-develops-public-certificate-authority-for-post-quantum-web-security-4ade5241ebc40902The Morning Deven2026-11-09T14:35:00.000ZCloudflare Develops Public Certificate Authority for Post-Quantum Web Security https://themorning.dev/story/bitter-hackers-deploy-new-paprat-backdoor-in-cyberespionage-campaign-targeting-s-7bdf0c6dc5dcaaf0The Morning Deven2026-11-09T14:31:29.000ZBitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia https://themorning.dev/story/who-gives-a-crap-hackers-apparently-after-toilet-paper-maker-s-customer-data-exp-a18ce332976ade3aThe Morning Deven2026-11-09T14:30:00.000ZWho Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed https://themorning.dev/story/alleged-ai-aided-cyberattack-exploits-assistant-interface-to-breach-german-web-h-e9e255b082200425The Morning Deven2026-11-09T14:15:00.000ZAlleged AI-aided cyberattack exploits assistant interface to breach German web host https://themorning.dev/story/revolve-puts-data-breach-victim-count-at-1-5-million-7cf7e23f889027d0The Morning Deven2026-11-09T14:08:08.000ZRevolve Puts Data Breach Victim Count at 1.5 Million https://themorning.dev/story/security-updates-for-monday-a335f3674491a1aeThe Morning Deven2026-11-09T14:02:31.000ZSecurity updates for Monday https://themorning.dev/story/practice-makes-precise-at-corl-nvidia-and-partners-reveal-how-robots-rehearse-de-97be7dad625b85b1The Morning Deven2026-11-09T14:00:01.000ZPractice Makes Precise: At CoRL, NVIDIA and Partners Reveal How Robots Rehearse Delicate Work in Simulation https://themorning.dev/story/automattic-debuts-a-platform-to-deploy-vibe-coding-apps-amid-a-changing-internet-95c3c02be004506dThe Morning Deven2026-11-09T14:00:00.000ZAutomattic debuts a platform to deploy vibe coding apps amid a changing internet https://themorning.dev/story/outlook-com-bounces-legit-emails-as-microsoft-s-authentication-crackdown-goes-si-2bf3346c67e6baa4The Morning Deven2026-11-09T13:30:00.000ZOutlook.com bounces legit emails as Microsoft's authentication crackdown goes sideways https://themorning.dev/story/pypi-makes-release-attestations-easier-to-find-with-new-security-tab-3f1364bdf6a8ff26The Morning Deven2026-11-09T13:23:29.000ZPyPI makes release attestations easier to find with new security tab https://themorning.dev/story/plex2shell-exploited-against-qnap-nas-users-ca8912a2e710a7bfThe Morning Deven2026-11-09T13:13:28.000ZPlex2Shell Exploited Against QNAP NAS Users https://themorning.dev/story/anthropic-s-fab-le-5-1-is-live-at-10-50-new-model-breakdown-and-benchmark-jump-a0b11b2d54a609beThe Morning Deven2026-11-09T13:00:00.000ZAnthropic's Fab le 5.1 is live at $10/$50: new model breakdown and benchmark jump https://themorning.dev/story/launching-the-vite-ecosystem-fund-d079a8b6909b9b85The Morning Deven2026-11-09T13:00:00.000ZLaunching the Vite Ecosystem Fund https://themorning.dev/story/iris-plaza-breach-may-have-exposed-data-of-7-7-million-customers-a278123ac0f5b1d4The Morning Deven2026-11-09T12:41:27.000ZIris Plaza Breach May Have Exposed Data of 7.7 Million Customers https://themorning.dev/story/google-escalates-nvidia-rivalry-with-new-versions-of-its-tpu-systems-1363cdb142dc5b30The Morning Deven2026-11-09T12:30:00.000ZGoogle Escalates Nvidia Rivalry With New Versions of Its TPU Systems https://themorning.dev/story/hackers-exploiting-sshole-authentication-bypass-in-openssh-de97195118397262The Morning Deven2026-11-09T12:13:32.000ZHackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH https://themorning.dev/story/instagram-s-ai-age-detection-is-expanding-globally-b984208759f6953bThe Morning Deven2026-11-09T12:00:00.000ZInstagram’s AI age detection is expanding globally https://themorning.dev/story/what-s-new-in-node-js-27-010ba45a8f15200bThe Morning Deven2026-11-09T11:48:55.000ZWhat's new in Node.js 27 https://themorning.dev/story/amd-admits-gpu-driver-bug-is-writing-data-continuously-wearing-out-ssds-64a9b8e5670479dcThe Morning Deven2026-11-09T11:46:33.000ZAMD admits GPU driver bug is writing data continuously, wearing out SSDs https://themorning.dev/story/portal-breach-at-germany-s-top-university-exposes-every-registered-user-s-passwo-b535061e31173c75The Morning Deven2026-11-09T11:44:20.000ZPortal breach at Germany's top university exposes every registered user's password https://themorning.dev/story/the-us-occ-grants-coinbase-full-approval-for-a-trust-bank-charter-sources-say-it-ebaef60b2b5aa4a4The Morning Deven2026-11-09T11:40:00.000ZThe US OCC grants Coinbase full approval for a trust bank charter; sources say it could expand Coinbase's stablecoin business and let it issue stablecoins (Olga Kharif/Bloomberg) https://themorning.dev/story/openai-and-anthropic-valuations-fall-as-ai-market-rout-hits-fundraising-af08e1f33b668617The Morning Deven2026-11-09T11:28:16.000ZOpenAI and Anthropic Valuations Fall as AI Market Rout Hits Fundraising https://themorning.dev/story/default-admin-admin-server-password-helps-researchers-hack-two-automakers-unlock-c5154d08fadfed61The Morning Deven2026-11-09T11:27:53.000ZDefault 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars https://themorning.dev/story/amplifon-americas-data-breach-impacts-1-3-million-156a0344f3303140The Morning Deven2026-11-09T11:20:09.000ZAmplifon Americas Data Breach Impacts 1.3 Million https://themorning.dev/story/aws-launches-torchneuron-to-run-pytorch-models-on-aws-trainium-without-modificat-60bffcfdca69eb79The Morning Deven2026-11-09T11:00:00.000ZAWS Launches TorchNeuron to Run PyTorch Models on AWS Trainium Without Modifications https://themorning.dev/story/web3auth-flaw-exploited-to-steal-keplr-crypto-provider-empties-other-wallets-for-a02fb0af291601b9The Morning Deven2026-11-09T10:56:25.000ZWeb3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety https://themorning.dev/story/over-3-million-people-hit-by-frontline-education-data-breach-3c0c651efea81480The Morning Deven2026-11-09T10:09:02.000ZOver 3 Million People Hit by Frontline Education Data Breach https://themorning.dev/story/lnbits-urges-all-operators-to-shut-down-their-bitcoin-lightning-wallet-servers-a-62af4291e17cf20fThe Morning Deven2026-11-09T10:01:21.000ZLNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks https://themorning.dev/story/us-federal-prosecutors-say-businesses-have-lost-129m-to-scam-calls-using-ai-gene-3798acc6ede853ecThe Morning Deven2026-11-09T09:50:00.000ZUS federal prosecutors say businesses have lost $129M+ to scam calls using AI-generated voices to mimic company executives in the 18 months since July 2024 (Adeel Hassan/New York Times) https://themorning.dev/story/taiwan-based-hacker-used-bossai-ai-agents-to-steal-taipei-emergency-dispatch-rec-e8082cc54dfbdb4bThe Morning Deven2026-11-09T09:01:50.000ZTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records https://themorning.dev/story/secret-scanning-detects-secrets-in-github-actions-workflow-logs-06e2b9999d4d574bThe Morning Deven2026-11-09T09:01:37.000ZSecret scanning detects secrets in GitHub Actions workflow logs https://themorning.dev/story/google-deepmind-s-ai-agents-make-1024-bit-rsa-keys-cheaper-to-attack-33c824e207021f77The Morning Deven2026-11-09T08:35:50.000ZGoogle DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack https://themorning.dev/story/chatgpt-desktop-forwards-your-ssh-agent-to-remote-machines-8ceada5f95028093The Morning Deven2026-11-09T08:17:49.000ZChatGPT Desktop forwards your SSH agent to remote machines https://themorning.dev/story/cve-2026-113508-apache-airflow-logout-token-revocation-fails-open-errors-silentl-49b30f6b8221e8d3The Morning Deven2026-11-09T07:33:36.000ZCVE-2026-113508: Apache Airflow: Logout token revocation fails open; errors silently swallowed https://themorning.dev/story/cve-2026-113504-apache-airflow-secrets-masker-pattern-based-masking-bounded-at-d-240c8b7177de5d62The Morning Deven2026-11-09T07:31:35.000ZCVE-2026-113504: Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartext https://themorning.dev/story/cve-2026-111455-apache-airflow-connections-api-async-connection-test-authorizes-8f08a73c169d610aThe Morning Deven2026-11-09T07:29:41.000ZCVE-2026-111455: Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commit https://themorning.dev/story/cve-2026-111454-apache-airflow-api-asset-endpoints-return-scheduled-producing-co-c9a81408bf761efeThe Morning Deven2026-11-09T07:28:02.000ZCVE-2026-111454: Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read https://themorning.dev/story/cve-2026-111453-apache-airflow-api-asset-queuedevents-delete-checks-dag-edit-on-bcf2dc87366aa747The Morning Deven2026-11-09T07:26:21.000ZCVE-2026-111453: Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable Dag https://themorning.dev/story/cve-2026-111452-apache-airflow-secrets-masker-camelcase-key-names-privatekey-con-8c491033c2dfaf5cThe Morning Deven2026-11-09T07:24:40.000ZCVE-2026-111452: Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list https://themorning.dev/story/cve-2026-111421-apache-airflow-execution-api-set-xcom-skips-the-reserved-key-che-c7cca9f2d3ce944fThe Morning Deven2026-11-09T07:22:55.000ZCVE-2026-111421: Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XComs instantiate airflow.* classes on the API server https://themorning.dev/story/cve-2026-111395-apache-airflow-reserved-serialization-keys-in-dag-run-conf-crash-adb8b50b7bbc129fThe Morning Deven2026-11-09T07:21:09.000ZCVE-2026-111395: Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline callbacks https://themorning.dev/story/cve-2026-107474-apache-airflow-connections-api-apprise-connection-config-extra-r-867d29f2ef034498The Morning Deven2026-11-09T07:19:27.000ZCVE-2026-107474: Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext https://themorning.dev/story/cve-2026-101031-apache-airflow-shell-command-injection-in-the-example-dag-decora-0bab53b80ab6f311The Morning Deven2026-11-09T07:17:42.000ZCVE-2026-101031: Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier https://themorning.dev/story/cve-2026-96285-apache-airflow-scheduler-next-kwargs-deserialized-before-the-dict-b6c4f3ebf9ddb045The Morning Deven2026-11-09T07:14:26.000ZCVE-2026-96285: Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors https://themorning.dev/story/cve-2026-86829-apache-airflow-deserialization-of-task-controlled-xcom-values-in-d28c956794324d01The Morning Deven2026-11-09T07:12:41.000ZCVE-2026-86829: Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation https://themorning.dev/story/u-s-agencies-warn-refrigeration-controller-attacks-could-cause-fires-and-invento-df6a1e5a88d8a5b7The Morning Deven2026-11-09T06:15:10.000ZU.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses https://themorning.dev/story/cisa-flags-sonicwall-sonicos-mfa-bypass-flaw-amid-reports-of-possible-exploitati-3d5dfb277e1d458fThe Morning Deven2026-11-09T06:05:24.000ZCISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation https://themorning.dev/story/cve-2026-68982-apache-airflow-celeryexecutor-forged-callback-workloads-run-on-ce-3ac2423429d1d628The Morning Deven2026-11-09T06:02:37.000ZCVE-2026-68982: Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation https://themorning.dev/story/cve-2026-50204-apache-airflow-audit-log-secrets-masker-redacts-by-key-name-only-2efeefb5d08f8f37The Morning Deven2026-11-09T06:00:50.000ZCVE-2026-50204: Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext https://themorning.dev/story/cve-2026-40913-apache-airflow-import-errors-api-leaks-unauthorized-dag-stack-tra-4d6df70a5ba3491fThe Morning Deven2026-11-09T05:59:03.000ZCVE-2026-40913: Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcement https://themorning.dev/story/linus-torvalds-sees-signs-ai-prompted-patch-flood-has-peaked-f95e5ffd3bd78329The Morning Deven2026-11-09T04:53:08.000ZLinus Torvalds sees signs AI-prompted patch flood has peaked https://themorning.dev/story/risky-bulletin-pro-kremlin-hacktivists-dox-eu-politicians-law-enforcement-2e7f5c40325e3921The Morning Deven2026-11-09T03:33:48.000ZRisky Bulletin: Pro-Kremlin hacktivists dox EU politicians, law enforcement https://themorning.dev/story/nvidia-s-jensen-huang-china-is-not-our-enemy-us-chip-policy-a-mistake-6eb4f87e92c4c0ecThe Morning Deven2026-11-09T02:46:23.000ZNvidia’s Jensen Huang: China Is 'Not Our Enemy,' US Chip Policy a 'Mistake' https://themorning.dev/story/ai-sdk-7-0-163-added-two-stream-parts-in-a-patch-release-my-exhaustive-switch-st-377e9159b2d0bcdaThe Morning Deven2026-11-09T02:44:50.000ZAI SDK 7.0.163 Added Two Stream Parts in a Patch Release. My Exhaustive Switch Stopped Compiling https://themorning.dev/story/huawei-says-it-s-made-a-100-percent-chinese-pc-94acbee62afa84e1The Morning Deven2026-11-09T02:14:17.000ZHuawei says it’s made a 100 percent Chinese PC https://themorning.dev/story/spring-ai-2-1-0-rc2-available-now-0021230a4ff43219The Morning Deven2026-11-09T00:00:00.000ZSpring AI 2.1.0-RC2 Available Now https://themorning.dev/story/sunsetting-sourcegraph-cody-and-building-the-future-of-code-intelligence-4a369b2596c9fd42The Morning Deven2026-11-09T00:00:00.000ZSunsetting Sourcegraph Cody and building the future of code intelligence https://themorning.dev/story/vim-security-heap-buffer-overflow-with-crafted-spell-file-in-vim-9-2-1309-b41d3eddcc2bd8e4The Morning Deven2026-11-08T23:46:57.000Z[vim-security]: Heap Buffer Overflow with Crafted Spell File in Vim < 9.2.1309 https://themorning.dev/story/vim-security-insecure-socket-directory-in-vim-9-2-1308-bd13b9f2c7244401The Morning Deven2026-11-08T23:45:13.000Z[vim-security] Insecure Socket Directory in Vim < 9.2.1308 https://themorning.dev/story/home-assistant-the-password-is-not-the-key-token-secrets-in-cleartext-two-token-30d23946b67fadd1The Morning Deven2026-11-08T23:43:28.000ZHome Assistant: the password is not the key — token secrets in cleartext, two token classes never expire, password change revokes none (2026.11.0, live-proven) https://themorning.dev/story/sources-officials-at-the-commerce-department-s-ai-safety-center-caissi-were-aske-783b692580d03f49The Morning Deven2026-11-08T22:55:01.000ZSources: officials at the Commerce Department's AI safety center CAISSI were asked to informally report to a White House office, raising independence concerns (Garance Burke/Associated Press) https://themorning.dev/story/chris-van-eijk-json-vs-jsonb-in-postgresql-size-and-speed-measured-f4cbabdc289329d7The Morning Deven2026-11-08T22:30:11.000ZChris van Eijk: json vs jsonb in PostgreSQL: size and speed, measured https://themorning.dev/story/a-new-chapter-for-typescript-10x-performance-boost-97e1d186cd5739b5The Morning Deven2026-11-08T21:17:28.000ZA new chapter for TypeScript - 10x performance boost https://themorning.dev/story/nvidia-is-investigating-jensen-huang-s-relationship-with-a-chinese-spy-ecd65815b585666dThe Morning Deven2026-11-08T20:22:39.000ZNvidia is investigating Jensen Huang’s relationship with a Chinese spy https://themorning.dev/story/outlook-com-is-quietly-rejecting-email-from-domains-without-dmarc-ec6779b05ebb24a9The Morning Deven2026-11-08T19:20:32.000ZOutlook.com Is Quietly Rejecting Email from Domains Without DMARC https://themorning.dev/story/apple-is-racing-to-make-siri-more-agentic-53044e44b3aab431The Morning Deven2026-11-08T19:18:19.000ZApple is racing to make Siri more agentic https://themorning.dev/story/goldman-sachs-is-pulling-claude-code-from-its-bankers-and-traders-a78801b830361293The Morning Deven2026-11-08T18:16:07.000ZGoldman Sachs Is Pulling Claude Code from Its Bankers and Traders https://themorning.dev/story/deepseek-s-ai-agent-platform-hits-1-54-million-daily-users-934985cf01b72207The Morning Deven2026-11-08T18:01:43.000ZDeepSeek’s AI Agent Platform Hits 1.54 Million Daily Users https://themorning.dev/story/don-t-hand-propaganda-a-gift-reading-the-brenner-base-tunnel-se-breach-calmly-94bf2b9a700d8710The Morning Deven2026-11-08T17:46:16.000ZDon’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly https://themorning.dev/story/excluding-anthropic-s-ipo-ai-companies-sold-or-priced-300b-of-stock-in-2026-with-e45e8506200d276bThe Morning Deven2026-11-08T17:45:00.000ZExcluding Anthropic's IPO, AI companies sold or priced $300B+ of stock in 2026, with ~$100B more on tap, raising questions about how much the market can absorb (Alex Eichenstein/The Information) https://themorning.dev/story/better-auth-s-november-security-release-what-to-patch-and-rotate-today-51fdede5243f13cdThe Morning Deven2026-11-08T17:44:14.000ZBetter Auth's November Security Release: What to Patch and Rotate Today https://themorning.dev/story/elvis-and-eminem-rights-holders-are-suing-suno-ae06ecf7187204d4The Morning Deven2026-11-08T17:23:19.000ZElvis and Eminem rights holders are suing Suno https://themorning.dev/story/perplexity-s-ai-agents-keep-working-after-you-close-the-tab-81c28ede29aae0e0The Morning Deven2026-11-08T15:30:00.000ZPerplexity’s AI agents keep working after you close the tab https://themorning.dev/story/positive-technologies-ecaea03198acc6adThe Morning Deven2026-11-08T15:00:01.000ZТри часа на всю атаку: ИИ-агенты взломали российскую компанию. Что выяснила Positive Technologies https://themorning.dev/story/apple-explores-turning-siri-ai-into-chatgpt-dots-like-agent-ios-28-shake-up-34520e7f743e70e4The Morning Deven2026-11-08T15:00:01.000ZApple Explores Turning Siri AI Into ChatGPT Dots-Like Agent; iOS 28 Shake-Up https://themorning.dev/story/japanese-arcades-suffer-week-long-blackout-following-sega-server-hack-0ce0b41235fb1e8aThe Morning Deven2026-11-08T15:00:00.000ZJapanese arcades suffer week-long blackout following Sega server hack https://themorning.dev/story/three-ai-vendors-restructured-usage-limits-in-two-weeks-what-it-means-if-you-pay-a9f2909736bbe44eThe Morning Deven2026-11-08T15:00:00.000ZThree AI vendors restructured usage limits in two weeks: what it means if you pay for AI https://themorning.dev/story/openai-raises-11b-at-a-1-25t-valuation-ea31161d462c8ec0The Morning Deven2026-11-08T14:49:23.000ZOpenAI raises $11B at a $1.25T valuation https://themorning.dev/story/the-end-of-an-era-as-linux-7-5-purges-the-last-30-year-old-intel-mmx-optimizatio-b898af538ee978d3The Morning Deven2026-11-08T14:40:00.000ZThe end of an era as Linux 7.5 purges the last 30-year-old Intel MMX optimizations from Pentium age