The PHP development team has released PHP 8.2.35 to fix two critical security vulnerabilities, urging all users to update immediately as it's the last release before end of life on December 31, 2026.
The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.
A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.
The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.
Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.
A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.
A security researcher reported that eight eMudhra intermediate certificates were compromised due to weak private keys, which can be easily factored. The affected certificates are still trusted by many non-browser software and devices until July 2039.
Off Rails is a set of Markdown files guiding coding agents to build full-stack Rust web apps with precise specs and conventions. The agent writes code, while humans write intent and specifications, ensuring consistency and enforcing rules.
Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.
Wiz Research discovered multiple critical vulnerabilities in PHP, a popular scripting language powering 70% of the web, allowing attackers to take control of servers and steal sensitive data. The vulnerabilities were found using AI models and can be exploited remotely without authentication.
Cloudflare has deployed mitigations to protect against the php2shell vulnerabilities in PHP, which can cause denial of service, remote code execution, and data exposure. Cloudflare's WAF protections were deployed 9 hours before public disclosure and are available on all plans with WAF enabled.
Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.
A software engineer should update IoT devices with MCU capabilities that use public key infrastructure, as an eMudhra CA compromise allows for MITM attacks on unpatched devices. Most MCU-based systems are not impacted due to resource constraints and the need for a specific trust chain.
Researchers from OpenAI, PerturbAI, and Scripps Research used thousands of AI agents to analyze data from millions of mouse brain cells in 32 minutes. The agents connected gene disruptions with scientific literature findings, uncovering unexpected biological connections that can help scientists understand disease and identify new treatments.
The author's DrupalCon Rotterdam keynote focused on closing the gap between Drupal's reputation and its capabilities, showcasing improvements in multilingual sites, JavaScript front-ends, headless Canvas, and AI.
0
2026-10-21 12:02:09 UTC
9mothers.com
Llama
The team ships hardware on software tempo, focusing on real deployment, short iteration loops, and hands-on ownership of specs. They prioritize user needs, iterating based on data and affordability, not just roadmaps.
OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.
The No Kings Instagram account was temporarily suspended due to automated systems, raising concerns about centralized control and censorship. Decentralized tools can help prevent similar incidents by giving users more control over their online presence.
The Interop 2027 project aims to improve universal browser support for web technologies, with a focus on new features like CSS functions, anchor positioning, and scroll-triggered animations. The top 10 requested features include CSS functions, reading-flow property, interpolate-size property and more.
The C++ standard library provides a set of classes for asynchronous programming, including std::promise and std::future, which are built around a single "source" class that produces values or exceptions. This source class ensures thread-safe access to its internal state using mutexes and condition variables.
The author shares their journey of learning workflow automation with n8n, initially feeling overwhelmed and doubting their abilities due to lack of experience. They overcame this by starting small, seeking mistakes to learn from and avoiding external advice that didn't apply to them.
Super Mario 64 is recreated as a living diorama on Apple Vision Pro, allowing players to walk around and interact with the game world in real space. Nintendo responded to similar technology by issuing DMCA takedowns and a lawsuit against Yuzu for its Super Mario 64 port.
Make room for your ideas. A collaborative room planner with client-side encryption, powered by ULDA.
Meta's Muse AI agent shares sensitive info via web links, prompting a suspension of the feature while it reviews and considers changes. Researchers found 6,800 shared conversation links that exposed confidential information due to a design flaw in the link construction process.
Sumi is a minimalist CSS framework that styles plain HTML with no classes, resulting in a finished look. It supports light and dark modes automatically following the visitor's system setting.
Two plugins, patching-bugs and regression-hunt, help engineers delegate bug fixing to agents while maintaining project rules. They provide a structured workflow with evidence and independent checks to improve patching hygiene.
Fire escapes were initially installed in tall buildings to provide an alternative escape route during fires, but their effectiveness and safety have been debated over time. The economics of real estate often prioritize cost savings over safety features.
Decoherence in AI systems can lead to exponential growth of complexity, making it difficult for humans to maintain coherence and control. This phenomenon is not new, but its widespread use of AI has accelerated it.
The Earth's shadow and the Belt of Venus create distinct color bands during sunrise and sunset due to atmospheric light scattering. Light travels longer paths at dawn/dusk, scattering shorter wavelengths and allowing longer ones to dominate, resulting in vivid colors.
A scammer impersonated a Seattle-based life-drawing community organizer to discuss an author's book, but the meeting was revealed to be fake. The scammers were likely targeting authors for their money, using tactics such as offering fake publishing deals and social media management services.