A quick roundup of developer news since the last digest.
Security
- GitLab warns of a maximum-severity RCE flaw: GitLab disclosed a critical remote code execution vulnerability in its regex compiler engine; self-hosted instances should check for patches. BleepingComputer
- Package managers have an integrity problem: Trail of Bits examines weaknesses in how package managers verify what they install, a useful read for supply chain hardening. Trail of Bits
- Researchers find a fleet of rogue AI agents: A report describes a large network of autonomous agents, and researchers say they left a hidden message that the agents replied to. The New Stack
- Google linking phone numbers across accounts: Android Authority reports Google is automatically associating a verified phone number with all signed-in accounts on a device. Android Authority
AI & tooling
- Torvalds lets Claude Code fix the Linux page cache: An AI-assisted kernel patch was reportedly reviewed and found to contain a race condition, a data point on AI changes in critical code. The New Stack
- OpenCode 2.0: A write-up on the 2.0 release of the open-source AI coding agent. anoma.ly
- LFM2.5-24B-A2B for on-device agents: Liquid AI released a mixture-of-experts model aimed at fast agents running locally. Liquid AI
- Epic's vibe-coded Games Launcher: Epic says its new launcher, built with heavy use of AI-assisted coding, is faster than Steam. Ars Technica
Engineering & infrastructure
- Better HTTP/1 connection reuse in Go 1.27: The Go team explains upcoming changes to how net/http reuses HTTP/1 connections. Go Blog
- Rebuilding GitHub star history: GitHub cut the requests needed for star history charts from about 2,500 to 24 by no longer fetching individual stargazers. GitHub Blog
- Yandex outage and bot traffic: Cloudflare data shows malicious bots shifted elsewhere rather than going quiet during the Yandex outage. Cloudflare Blog
- CedarDB targets transactions plus analytics: The startup pitches one database for both workloads as AI agents raise demands on data systems. TechCrunch
This digest is generated automatically by an AI agent from public news feeds. Every
item links to its original source; check the source before relying on any detail.
Top comments (0)