The PHP development team has released PHP 8.2.35 to fix two critical security vulnerabilities, urging all users to update immediately as it's the last release before end of life on December 31, 2026.
The PHP project has released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.
A credential stealer and remote code execution backdoor were found in the LiteLLM 1.107.0 release on PyPI, which was later removed; versions 1.106.2 and rc releases are clean.
The DuckDB team has released version 2.0.0 LTS, codenamed "Cinnamon Teal", with numerous features and improvements, including asynchronous I/O, a first-class VARIANT type, agent mode, triggers, and an extensible SQL parser.
A security researcher reported that eight eMudhra intermediate certificates were compromised due to weak private keys, which can be easily factored. The affected certificates are still trusted by many non-browser software and devices until July 2039.
A coalition of maintainers, researchers, and security providers addressed critical vulnerabilities in PHP using AI capabilities. The response involved a proposed framework for responding to critical vulnerabilities in widely used software.
Off Rails is a set of Markdown files guiding coding agents to build full-stack Rust web apps with precise specs and conventions. The agent writes code, while humans write intent and specifications, ensuring consistency and enforcing rules.
Scientists have discovered two extinct species, a possum and a glider, in West Papua after 6,000 years of thought to be extinct. The discoveries are rare and remarkable, with the help of local elders who provided crucial information about their habitats.
Oregon has purchased Abiqua Falls, a 92-foot waterfall, for $2.1 million to protect and preserve it for future generations. The falls will be managed by the Oregon Parks and Recreation Department or another state agency after completing due diligence on environmental and archaeological information.
The author shares their journey of learning workflow automation with n8n, initially feeling overwhelmed and doubting their abilities due to lack of experience. They overcame this by starting small, seeking mistakes to learn from and avoiding external advice that didn't apply to them.
Researchers from OpenAI, PerturbAI, and Scripps Research used thousands of AI agents to analyze data from millions of mouse brain cells in 32 minutes. The agents connected gene disruptions with scientific literature findings, uncovering unexpected biological connections that can help scientists understand disease and identify new treatments.
‘Plasticorals’, coral rubble fused with plastic, are long-lasting reminders of human activity and highlight a potential threat to critical marine environments.
OpenAI and Google Cloud are partnering to bring OpenAI's frontier models into Google Cloud's Model Garden, giving customers native access to these models for complex agentic workflows. The integration will provide enterprises with control over sensitive data and high-performance infrastructure.
The author's DrupalCon Rotterdam keynote focused on closing the gap between Drupal's reputation and its capabilities, showcasing improvements in multilingual sites, JavaScript front-ends, headless Canvas, and AI.
A software engineer should update IoT devices with MCU capabilities that use public key infrastructure, as an eMudhra CA compromise allows for MITM attacks on unpatched devices. Most MCU-based systems are not impacted due to resource constraints and the need for a specific trust chain.
Combinator's agent-based system controls user actions, enforces policies and keeps credentials private. It integrates with 140 providers through a single SDK call, offering compliance and audit features.
BioWare, the legendary RPG studio behind Mass Effect and Dragon Age, is shutting down due to poor performance. EA has chosen not to continue development on the next Mass Effect game and laid off around 400 staffers, including 50 at BioWare.
The team ships hardware on software tempo, focusing on real deployment, short iteration loops, and hands-on ownership of specs. They prioritize user needs, iterating based on data and affordability, not just roadmaps.
The C++ standard library provides a set of classes for asynchronous programming, including std::promise and std::future, which are built around a single "source" class that produces values or exceptions. This source class ensures thread-safe access to its internal state using mutexes and condition variables.
The author discusses clx, a native Lua compiler that transforms Lua code into C++ for direct execution without a Lua VM. It aims to provide a native experience with performance benefits and integration capabilities.
Super Mario 64 is recreated as a living diorama on Apple Vision Pro, allowing players to walk around and interact with the game world in real space. Nintendo responded to similar technology by issuing DMCA takedowns and a lawsuit against Yuzu for its Super Mario 64 port.
Meta's Muse AI agent shares sensitive info via web links, prompting a suspension of the feature while it reviews and considers changes. Researchers found 6,800 shared conversation links that exposed confidential information due to a design flaw in the link construction process.
GitHub migrated Git repositories to Azure to handle exponential growth, reducing latency by moving replicas and changing quorum serialization to per-reference writes. This allows scaling reads and writes independently, improving throughput and enabling further expansion.
Sumi is a minimalist CSS framework that styles plain HTML with no classes, resulting in a finished look. It supports light and dark modes automatically following the visitor's system setting.
Decoherence in AI systems can lead to exponential growth of complexity, making it difficult for humans to maintain coherence and control. This phenomenon is not new, but its widespread use of AI has accelerated it.
Fire escapes were initially installed in tall buildings to provide an alternative escape route during fires, but their effectiveness and safety have been debated over time. The economics of real estate often prioritize cost savings over safety features.
Wiz Research discovered multiple critical vulnerabilities in PHP, a popular scripting language powering 70% of the web, allowing attackers to take control of servers and steal sensitive data. The vulnerabilities were found using AI models and can be exploited remotely without authentication.
The Earth's shadow and the Belt of Venus create distinct color bands during sunrise and sunset due to atmospheric light scattering. Light travels longer paths at dawn/dusk, scattering shorter wavelengths and allowing longer ones to dominate, resulting in vivid colors.
A scammer impersonated a Seattle-based life-drawing community organizer to discuss an author's book, but the meeting was revealed to be fake. The scammers were likely targeting authors for their money, using tactics such as offering fake publishing deals and social media management services.