The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.
A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.
Jenn has multiple meetings and tasks, including a partner meeting at Harbor on Thursday and reviewing the business's health with key metrics. She also wants to test free shipping over $40 to reduce cancellations in East Bay.
A security researcher reported that eight eMudhra intermediate certificates were compromised due to weak private keys, which can be easily factored. The affected certificates are still trusted by many non-browser software and devices until July 2039.
The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.
BioWare, the legendary RPG studio behind Mass Effect and Dragon Age, is shutting down due to poor performance. EA has chosen not to continue development on the next Mass Effect game and laid off around 400 staffers, including 50 at BioWare.
A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.
Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.
Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.
The PHP development team has released PHP 8.2.35 to fix two critical security vulnerabilities, urging all users to update immediately as it's the last release before end of life on December 31, 2026.
The author reflects on the impact of AI tools in software development, noting that while they can automate tedious tasks, they also create new challenges such as debugging and code quality issues. The author predicts that the future of programming will involve more focus on specification, testing, and verification rather than coding itself.
A required part of this site couldn’t load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a different browser.
OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.
Anthropic aims to develop advanced AI for humanity's benefit, balancing financial interests with public good. The company tracks its progress and plans to continue serving the public interest through safe, trustworthy AI development.
Get an alert when an attacker visits your URL (then redirect them and collect more info). Get an alert when an attacker uses your Azure Service Principal certificate to login with. Get an alert when an attacker opens a fake app from your Identity Provider dashboard.
Windows 11 still includes a Windows 95 kernel fragment via EmulateHeap to support legacy apps. This compatibility fix mimics old memory management quirks, allowing outdated software to run without crashing.
Researchers from OpenAI, PerturbAI, and Scripps Research used thousands of AI agents to analyze data from millions of mouse brain cells in 32 minutes. The agents connected gene disruptions with scientific literature findings, uncovering unexpected biological connections that can help scientists understand disease and identify new treatments.
GitHub has migrated 99.99999% of its repositories to Azure, with the remaining ones held back by a 25ms round trip latency issue. The company is now working on a new storage architecture that minimizes coordination and decouples storage from compute, allowing for more efficient scaling and read traffic management.
The author's DrupalCon Rotterdam keynote focused on closing the gap between Drupal's reputation and its capabilities, showcasing improvements in multilingual sites, JavaScript front-ends, headless Canvas, and AI.
A software engineer should update IoT devices with MCU capabilities that use public key infrastructure, as an eMudhra CA compromise allows for MITM attacks on unpatched devices. Most MCU-based systems are not impacted due to resource constraints and the need for a specific trust chain.
0
2026-10-21 12:25:14 UTC
9mothers.com
Llama
The team ships hardware on software tempo, focusing on real deployment, short iteration loops, and hands-on ownership of specs. They prioritize user needs, iterating based on data and affordability, not just roadmaps.
On October 21, 2026, we released versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. ...
The Linux kernel will no longer require Assisted-by tags for patches created with Large Language Models, but maintainers want to know how these patches were made. The decision aims to make it harder for new contributors and aid corporations in removing the GPL license on Linux.
Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.
Meta ordered to pay $25 billion in penalties by a New Mexico court for violating state data privacy laws stemming from the Cambridge Analytica scandal. The penalty is related to 43 million violations of the state's unfair practices act, with each transgression carrying a civil penalty as high as $5,000.
The author created a native Lua compiler called clx, which compiles Lua 5.5 source code into C++ and then compiles the generated C++ code into a standalone executable. This approach eliminates the need for a Lua VM in the executable, providing a genuinely native experience without depending on lua55.dll or liblua55.so.
The C++ standard library provides a set of classes for asynchronous programming, including std::promise and std::future, which are built around a single "source" class that produces values or exceptions. This source class ensures thread-safe access to its internal state using mutexes and condition variables.
Super Mario 64 is recreated as a living diorama on Apple Vision Pro, allowing players to walk around and interact with the game world in real space. Nintendo responded to similar technology by issuing DMCA takedowns and a lawsuit against Yuzu for its Super Mario 64 port.
Creator shares experiences in building and running multiple companies, including voice-over community platform Casting Call Club. He also writes about his personal journey from prison to seven-figure success and interplanetary war in a videogame novel.
Meta's Muse AI agent shares sensitive info via web links, prompting a suspension of the feature while it reviews and considers changes. Researchers found 6,800 shared conversation links that exposed confidential information due to a design flaw in the link construction process.