https://themorning.dev/story/google-deepmind-s-ai-agents-make-1024-bit-rsa-keys-cheaper-to-attack-33c824e207021f77The Morning Deven2026-11-09T08:35:50.000ZGoogle DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack https://themorning.dev/story/cve-2026-113508-apache-airflow-logout-token-revocation-fails-open-errors-silentl-49b30f6b8221e8d3The Morning Deven2026-11-09T07:33:36.000ZCVE-2026-113508: Apache Airflow: Logout token revocation fails open; errors silently swallowed https://themorning.dev/story/cve-2026-113504-apache-airflow-secrets-masker-pattern-based-masking-bounded-at-d-240c8b7177de5d62The Morning Deven2026-11-09T07:31:35.000ZCVE-2026-113504: Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartext https://themorning.dev/story/cve-2026-111455-apache-airflow-connections-api-async-connection-test-authorizes-8f08a73c169d610aThe Morning Deven2026-11-09T07:29:41.000ZCVE-2026-111455: Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commit https://themorning.dev/story/cve-2026-111454-apache-airflow-api-asset-endpoints-return-scheduled-producing-co-c9a81408bf761efeThe Morning Deven2026-11-09T07:28:02.000ZCVE-2026-111454: Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read https://themorning.dev/story/cve-2026-111453-apache-airflow-api-asset-queuedevents-delete-checks-dag-edit-on-bcf2dc87366aa747The Morning Deven2026-11-09T07:26:21.000ZCVE-2026-111453: Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable Dag https://themorning.dev/story/cve-2026-111452-apache-airflow-secrets-masker-camelcase-key-names-privatekey-con-8c491033c2dfaf5cThe Morning Deven2026-11-09T07:24:40.000ZCVE-2026-111452: Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list https://themorning.dev/story/cve-2026-111421-apache-airflow-execution-api-set-xcom-skips-the-reserved-key-che-c7cca9f2d3ce944fThe Morning Deven2026-11-09T07:22:55.000ZCVE-2026-111421: Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XComs instantiate airflow.* classes on the API server https://themorning.dev/story/cve-2026-111395-apache-airflow-reserved-serialization-keys-in-dag-run-conf-crash-adb8b50b7bbc129fThe Morning Deven2026-11-09T07:21:09.000ZCVE-2026-111395: Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline callbacks https://themorning.dev/story/cve-2026-107474-apache-airflow-connections-api-apprise-connection-config-extra-r-867d29f2ef034498The Morning Deven2026-11-09T07:19:27.000ZCVE-2026-107474: Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext https://themorning.dev/story/cve-2026-101031-apache-airflow-shell-command-injection-in-the-example-dag-decora-0bab53b80ab6f311The Morning Deven2026-11-09T07:17:42.000ZCVE-2026-101031: Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier https://themorning.dev/story/cve-2026-96285-apache-airflow-scheduler-next-kwargs-deserialized-before-the-dict-b6c4f3ebf9ddb045The Morning Deven2026-11-09T07:14:26.000ZCVE-2026-96285: Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors https://themorning.dev/story/cve-2026-86829-apache-airflow-deserialization-of-task-controlled-xcom-values-in-d28c956794324d01The Morning Deven2026-11-09T07:12:41.000ZCVE-2026-86829: Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation https://themorning.dev/story/cisa-flags-sonicwall-sonicos-mfa-bypass-flaw-amid-reports-of-possible-exploitati-3d5dfb277e1d458fThe Morning Deven2026-11-09T06:05:24.000ZCISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation https://themorning.dev/story/cve-2026-68982-apache-airflow-celeryexecutor-forged-callback-workloads-run-on-ce-3ac2423429d1d628The Morning Deven2026-11-09T06:02:37.000ZCVE-2026-68982: Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation https://themorning.dev/story/cve-2026-50204-apache-airflow-audit-log-secrets-masker-redacts-by-key-name-only-2efeefb5d08f8f37The Morning Deven2026-11-09T06:00:50.000ZCVE-2026-50204: Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext https://themorning.dev/story/cve-2026-40913-apache-airflow-import-errors-api-leaks-unauthorized-dag-stack-tra-4d6df70a5ba3491fThe Morning Deven2026-11-09T05:59:03.000ZCVE-2026-40913: Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcement https://themorning.dev/story/linus-torvalds-sees-signs-ai-prompted-patch-flood-has-peaked-f95e5ffd3bd78329The Morning Deven2026-11-09T04:53:08.000ZLinus Torvalds sees signs AI-prompted patch flood has peaked https://themorning.dev/story/risky-bulletin-pro-kremlin-hacktivists-dox-eu-politicians-law-enforcement-2e7f5c40325e3921The Morning Deven2026-11-09T03:33:48.000ZRisky Bulletin: Pro-Kremlin hacktivists dox EU politicians, law enforcement https://themorning.dev/story/nvidia-s-jensen-huang-china-is-not-our-enemy-us-chip-policy-a-mistake-6eb4f87e92c4c0ecThe Morning Deven2026-11-09T02:46:23.000ZNvidia’s Jensen Huang: China Is 'Not Our Enemy,' US Chip Policy a 'Mistake' https://themorning.dev/story/ai-sdk-7-0-163-added-two-stream-parts-in-a-patch-release-my-exhaustive-switch-st-377e9159b2d0bcdaThe Morning Deven2026-11-09T02:44:50.000ZAI SDK 7.0.163 Added Two Stream Parts in a Patch Release. My Exhaustive Switch Stopped Compiling https://themorning.dev/story/ethersphere-bee-js-13-3-0-compromised-4f459340ede8edd0The Morning Deven2026-11-09T01:18:18.000Z@ethersphere/bee-js 13.3.0 Compromised https://themorning.dev/story/spring-ai-2-1-0-rc2-available-now-0021230a4ff43219The Morning Deven2026-11-09T00:00:00.000ZSpring AI 2.1.0-RC2 Available Now https://themorning.dev/story/vim-security-heap-buffer-overflow-with-crafted-spell-file-in-vim-9-2-1309-b41d3eddcc2bd8e4The Morning Deven2026-11-08T23:46:57.000Z[vim-security]: Heap Buffer Overflow with Crafted Spell File in Vim < 9.2.1309 https://themorning.dev/story/vim-security-insecure-socket-directory-in-vim-9-2-1308-bd13b9f2c7244401The Morning Deven2026-11-08T23:45:13.000Z[vim-security] Insecure Socket Directory in Vim < 9.2.1308 https://themorning.dev/story/home-assistant-the-password-is-not-the-key-token-secrets-in-cleartext-two-token-30d23946b67fadd1The Morning Deven2026-11-08T23:43:28.000ZHome Assistant: the password is not the key — token secrets in cleartext, two token classes never expire, password change revokes none (2026.11.0, live-proven) https://themorning.dev/story/sources-officials-at-the-commerce-department-s-ai-safety-center-caissi-were-aske-783b692580d03f49The Morning Deven2026-11-08T22:55:01.000ZSources: officials at the Commerce Department's AI safety center CAISSI were asked to informally report to a White House office, raising independence concerns (Garance Burke/Associated Press) https://themorning.dev/story/chris-van-eijk-json-vs-jsonb-in-postgresql-size-and-speed-measured-f4cbabdc289329d7The Morning Deven2026-11-08T22:30:11.000ZChris van Eijk: json vs jsonb in PostgreSQL: size and speed, measured https://themorning.dev/story/a-new-chapter-for-typescript-10x-performance-boost-97e1d186cd5739b5The Morning Deven2026-11-08T21:17:28.000ZA new chapter for TypeScript - 10x performance boost https://themorning.dev/story/nvidia-is-investigating-jensen-huang-s-relationship-with-a-chinese-spy-ecd65815b585666dThe Morning Deven2026-11-08T20:22:39.000ZNvidia is investigating Jensen Huang’s relationship with a Chinese spy https://themorning.dev/story/outlook-com-is-quietly-rejecting-email-from-domains-without-dmarc-ec6779b05ebb24a9The Morning Deven2026-11-08T19:20:32.000ZOutlook.com Is Quietly Rejecting Email from Domains Without DMARC https://themorning.dev/story/apple-is-racing-to-make-siri-more-agentic-53044e44b3aab431The Morning Deven2026-11-08T19:18:19.000ZApple is racing to make Siri more agentic https://themorning.dev/story/goldman-sachs-is-pulling-claude-code-from-its-bankers-and-traders-a78801b830361293The Morning Deven2026-11-08T18:16:07.000ZGoldman Sachs Is Pulling Claude Code from Its Bankers and Traders https://themorning.dev/story/deepseek-s-ai-agent-platform-hits-1-54-million-daily-users-934985cf01b72207The Morning Deven2026-11-08T18:01:43.000ZDeepSeek’s AI Agent Platform Hits 1.54 Million Daily Users https://themorning.dev/story/don-t-hand-propaganda-a-gift-reading-the-brenner-base-tunnel-se-breach-calmly-94bf2b9a700d8710The Morning Deven2026-11-08T17:46:16.000ZDon’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly https://themorning.dev/story/excluding-anthropic-s-ipo-ai-companies-sold-or-priced-300b-of-stock-in-2026-with-e45e8506200d276bThe Morning Deven2026-11-08T17:45:00.000ZExcluding Anthropic's IPO, AI companies sold or priced $300B+ of stock in 2026, with ~$100B more on tap, raising questions about how much the market can absorb (Alex Eichenstein/The Information) https://themorning.dev/story/better-auth-s-november-security-release-what-to-patch-and-rotate-today-51fdede5243f13cdThe Morning Deven2026-11-08T17:44:14.000ZBetter Auth's November Security Release: What to Patch and Rotate Today https://themorning.dev/story/elvis-and-eminem-rights-holders-are-suing-suno-ae06ecf7187204d4The Morning Deven2026-11-08T17:23:19.000ZElvis and Eminem rights holders are suing Suno https://themorning.dev/story/iris-ohyama-data-cloud-breach-exposes-info-of-7-7-million-customers-840fc9184c683327The Morning Deven2026-11-08T15:43:08.000ZIris Ohyama data cloud breach exposes info of 7.7 million customers https://themorning.dev/story/perplexity-s-ai-agents-keep-working-after-you-close-the-tab-81c28ede29aae0e0The Morning Deven2026-11-08T15:30:00.000ZPerplexity’s AI agents keep working after you close the tab https://themorning.dev/story/positive-technologies-ecaea03198acc6adThe Morning Deven2026-11-08T15:00:01.000ZТри часа на всю атаку: ИИ-агенты взломали российскую компанию. Что выяснила Positive Technologies https://themorning.dev/story/apple-explores-turning-siri-ai-into-chatgpt-dots-like-agent-ios-28-shake-up-34520e7f743e70e4The Morning Deven2026-11-08T15:00:01.000ZApple Explores Turning Siri AI Into ChatGPT Dots-Like Agent; iOS 28 Shake-Up https://themorning.dev/story/japanese-arcades-suffer-week-long-blackout-following-sega-server-hack-0ce0b41235fb1e8aThe Morning Deven2026-11-08T15:00:00.000ZJapanese arcades suffer week-long blackout following Sega server hack https://themorning.dev/story/three-ai-vendors-restructured-usage-limits-in-two-weeks-what-it-means-if-you-pay-a9f2909736bbe44eThe Morning Deven2026-11-08T15:00:00.000ZThree AI vendors restructured usage limits in two weeks: what it means if you pay for AI https://themorning.dev/story/openai-raises-11b-at-a-1-25t-valuation-ea31161d462c8ec0The Morning Deven2026-11-08T14:49:23.000ZOpenAI raises $11B at a $1.25T valuation https://themorning.dev/story/the-end-of-an-era-as-linux-7-5-purges-the-last-30-year-old-intel-mmx-optimizatio-b898af538ee978d3The Morning Deven2026-11-08T14:40:00.000ZThe end of an era as Linux 7.5 purges the last 30-year-old Intel MMX optimizations from Pentium age https://themorning.dev/story/anthropic-buys-power-for-ai-data-centres-in-3-4b-deal-ft-says-b911ef86f5c7b684The Morning Deven2026-11-08T11:48:21.000ZAnthropic Buys Power for AI Data Centres in $3.4B Deal, FT Says https://themorning.dev/story/gcc-17-feature-development-ends-next-week-1bc338d79dab44bdThe Morning Deven2026-11-08T11:12:21.000ZGCC 17 Feature Development Ends Next Week https://themorning.dev/story/claude-sonnet-4-6-is-here-1m-context-opus-level-coding-at-sonnet-prices-7bc3a6d13881dacfThe Morning Deven2026-11-08T10:42:02.000ZClaude Sonnet 4.6 Is Here: 1M Context, Opus-Level Coding at Sonnet Prices https://themorning.dev/story/apple-s-grey-list-what-it-means-for-developers-and-how-to-work-around-it-544de4b0e89b4d21The Morning Deven2026-11-08T10:42:00.000ZApple’s Grey List: What It Means for Developers and How to Work Around It https://themorning.dev/story/internet-governance-about-to-get-its-quadrennial-stress-test-at-itu-meeting-3e95397a13cefab5The Morning Deven2026-11-08T09:33:00.000ZInternet governance about to get its quadrennial stress test at ITU meeting https://themorning.dev/story/unrealircd-6-2-7-1-released-hot-patch-cve-2026-114713-38b0487cb4f32252The Morning Deven2026-11-08T09:09:07.000ZUnrealIRCd 6.2.7.1 released & hot-patch (CVE-2026-114713) https://themorning.dev/story/google-cloud-adds-self-managed-vmware-cloud-foundation-on-bare-metal-d5be8a41cb902045The Morning Deven2026-11-08T07:16:00.000ZGoogle Cloud Adds Self-Managed VMware Cloud Foundation on Bare Metal https://themorning.dev/story/cloudflare-scales-d1-control-plane-to-millions-of-databases-c030d0661f3fda17The Morning Deven2026-11-08T06:34:00.000ZCloudflare Scales D1 Control Plane to Millions of Databases https://themorning.dev/story/mistral-small-58-empty-replies-in-300-tool-calls-and-the-retry-loop-6b16772c653ca861The Morning Deven2026-11-08T06:05:00.000ZMistral Small: 58 empty replies in 300 tool calls, and the retry loop https://themorning.dev/story/oxlint-js-plugins-your-custom-eslint-rules-no-longer-keep-you-on-eslint-eca65d7f5b93fb5dThe Morning Deven2026-11-08T00:24:29.000ZOxlint JS Plugins: Your Custom ESLint Rules No Longer Keep You on ESLint https://themorning.dev/story/github-new-pull-request-overview-page-in-public-preview-a91cf3926bcc636eThe Morning Deven2026-11-07T23:09:40.000ZGitHub New pull request overview page in public preview https://themorning.dev/story/cursor-now-talks-back-voice-chat-with-your-coding-agent-45a29edcdd84a84aThe Morning Deven2026-11-07T22:50:34.000ZCursor Now Talks Back: Voice Chat With Your Coding Agent https://themorning.dev/story/megaspeed-exec-was-recruited-to-spy-on-nvidia-ceo-according-to-us-intelligence-m-69c75581d56ff5e1The Morning Deven2026-11-07T21:17:08.000ZMegaspeed exec was recruited to spy on Nvidia CEO, according to US intelligence memo https://themorning.dev/story/opencode-fixed-a-no-consent-rce-in-a-refactor-agent-clis-need-browser-style-upda-2eb0e0ad6ac9b739The Morning Deven2026-11-07T21:01:23.000Zopencode Fixed a No-Consent RCE in a 'Refactor.' Agent CLIs Need Browser-Style Updates https://themorning.dev/story/ghostmap-the-android-flaw-that-crashes-your-phone-before-you-open-the-app-cf4db5761b035375The Morning Deven2026-11-07T18:12:57.000ZGhostMap: The Android flaw that crashes your phone before you open the app https://themorning.dev/story/the-end-of-microsoft-research-s-ai-frontiers-group-1eeaf5457cb1a01aThe Morning Deven2026-11-07T18:02:17.000ZThe end of Microsoft Research's AI Frontiers group https://themorning.dev/story/anthropic-pushes-ahead-with-pre-thanksgiving-ipo-despite-tech-selloff-accepts-lo-76a37a2b42714ae8The Morning Deven2026-11-07T17:37:25.000ZAnthropic pushes ahead with pre-Thanksgiving IPO despite tech selloff, accepts lower valuation https://themorning.dev/story/binance-cfo-is-leaving-to-pursue-a-new-venture-after-6-3-billion-hack-805dafe9e9847598The Morning Deven2026-11-07T17:24:07.000ZBinance CFO is leaving to ‘pursue a new venture’ after $6.3 billion hack https://themorning.dev/story/exponential-time-hypothesis-co-proposer-russell-impagliazzo-calls-openai-s-dispr-988de9839dc5a961The Morning Deven2026-11-07T17:15:01.000ZExponential Time Hypothesis co-proposer Russell Impagliazzo calls OpenAI's disproof "shocking news"; it could one day speed up chip design and break encryption (Cade Metz/New York Times) https://themorning.dev/story/openai-lanca-rosalind-6-raciocinio-de-fronteira-para-ciencias-biologicas-governa-d92bb3111730e069The Morning Deven2026-11-07T17:00:06.000ZOpenAI Lança Rosalind-6: Raciocínio de Fronteira para Ciências Biológicas, Governança de Acesso Confiável e o Padrão de Engenhar https://themorning.dev/story/lo-siento-experimente-un-fallo-cognitivo-al-procesar-tu-solicitud-googlegenerati-f4d2b9e958d6bcadThe Morning Deven2026-11-07T16:53:01.000ZLo siento, experimenté un fallo cognitivo al procesar tu solicitud: [GoogleGenerativeAI Error]: Error fetching from http https://themorning.dev/story/thinking-machines-inkling-2-small-drops-316-f-bombs-across-benchmark-runs-a8253bc05c84a501The Morning Deven2026-11-07T16:31:00.000ZThinking Machines' Inkling 2 Small drops 316 F-bombs across benchmark runs https://themorning.dev/story/the-us-let-nvidia-sell-chips-to-an-empty-office-in-china-73be1ddc7ff24f89The Morning Deven2026-11-07T15:43:45.000ZThe US let Nvidia sell chips to an empty office in China https://themorning.dev/story/why-aws-wants-developers-to-stop-babysitting-their-ai-agents-de8ccb16fc671acdThe Morning Deven2026-11-07T15:30:00.000ZWhy AWS wants developers to stop babysitting their AI agents https://themorning.dev/story/hackers-pull-off-133-million-french-bank-heist-via-service-provider-ded94754be202b29The Morning Deven2026-11-07T15:25:35.000ZHackers pull off $133 million French bank heist via service provider https://themorning.dev/story/automake-1-20-brings-new-features-desires-to-re-establish-gnu-as-leading-build-s-ea0ab6d7041fa704The Morning Deven2026-11-07T15:22:00.000ZAutomake 1.20 Brings New Features, Desires To Re-Establish GNU As Leading Build System https://themorning.dev/story/allowed-to-view-the-location-handed-the-device-a-graphql-permission-gap-in-nauto-76fa8fed557aae37The Morning Deven2026-11-07T14:38:02.000ZAllowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2) https://themorning.dev/story/why-a-new-report-on-anthropic-automating-ai-development-is-alarming-researchers-8879475e62b3793aThe Morning Deven2026-11-07T12:30:00.000ZWhy a new report on Anthropic automating AI development is alarming researchers https://themorning.dev/story/how-i-discovered-a-leak-exposing-1-000-customer-emails-via-a-simple-api-query-se-a61c110b1a6980feThe Morning Deven2026-11-07T11:37:36.000ZHow I Discovered a Leak Exposing 1,000+ Customer Emails via a Simple API Query (?select=*) https://themorning.dev/story/microsoft-s-azure-linux-3-0-2022-ships-with-more-than-470-security-fixes-ee17198eb9ae8516The Morning Deven2026-11-07T10:37:42.000ZMicrosoft's Azure Linux 3.0.2022 Ships With More Than 470 Security Fixes https://themorning.dev/story/asahi-linux-7-3-progress-report-6a91ff56de2a8176The Morning Deven2026-11-07T09:49:38.000ZAsahi Linux 7.3 progress report