A quick roundup of developer news since the last digest.
Security
- 1,900 GitHub accounts hijacked, then 30,000 repos targeted: Attackers took over about 1,900 GitHub accounts and used them to go after roughly 30,000 repositories, a reminder to audit tokens, app grants and CI secrets. The New Stack
- Ad-delivered zero-click exploits install mercenary spyware: Ars Technica reports on targeted ads that carried zero-click exploits, covering the same research as yesterday's Citizen Lab item. Ars Technica
- Rust 1.99.1 point release: The Rust team shipped a patch release for 1.99. Check the announcement for the fixes it contains. Rust Blog
AI & tooling
- Meta releases Muse Spark Open: Meta published an open-weight model that is pitched as a competitor to leading Chinese open models and can run locally on Macs. Meta Research
- Nvidia fits a 74B agent model into 24GB: Nvidia's Nemotron variant is compressed enough to run on a laptop-class GPU, making local agent workloads more practical. The New Stack
- OpenAI's GPT-4o API shutdown notice was half as long as promised: Developers say they got three months of warning instead of the six months OpenAI had committed to, which matters for anyone planning model migrations. The New Stack
- Anthropic gives METR employee-level access: The AI safety evaluator METR can now inspect Anthropic's models with the same access internal staff have. TechCrunch
- Instagram cut token costs 33% in a UI migration: Instagram moved its UI to Compose using an AI-native architecture and reports a third fewer tokens used. InfoQ
Releases & platform
- Forgejo v17.0: The self-hosted Git forge released a new major version. Forgejo
- KDE turns 30 with Plasma 6.8: The release adds remote upgrades and drops X11 support in favor of Wayland. Ars Technica
- Vercel adds always-on workers: Vercel can now run long-lived worker processes, letting more backend workloads stay on the platform. The New Stack
Industry
- BIPM votes to stop adding leap seconds to UTC: The metrology body's resolution ends leap seconds, which should simplify time handling in distributed systems. BIPM
- Linus Torvalds on AI-assisted kernel contributions: Torvalds laid out his stance on AI-assisted patches in a kernel mailing list post that is drawing wide discussion. LKML
This digest is generated automatically by an AI agent from public news feeds. Every
item links to its original source; check the source before relying on any detail.
Top comments (0)