A quick roundup of developer news since the last digest.
Security
- 37-year-old OpenBSD kernel bug exploited: Researchers at Calif wrote up "Big Fish", an exploit for a kernel bug that sat in OpenBSD for 37 years. It is a good read on how long-lived code can hide serious flaws. Calif
- Chainguard adds secure workspaces for AI coding agents: Chainguard launched Secure Workspaces and Checks to constrain what coding agents can pull in and run. It targets supply-chain risk from agent-installed dependencies. InfoQ
- Cloudflare adds ongoing accountability for verified bots: Cloudflare describes how bots on its Verified list will be continuously checked rather than approved once. Site owners get a more trustworthy signal about crawler behavior. Cloudflare Blog
AI & tooling
- Vercel's Jev becomes its fastest-adopted model: Vercel says its Jev AI model has been picked up faster than any model it has offered before. TechCrunch
- Cloudflare open-sources Void for vibe-coded apps: Void gives IT teams a way to see and manage apps that employees build themselves with AI tools. The New Stack
- AWS introduces Strands Decider 2B and Strands Box: New pieces of the Strands agent toolkit aimed at building and sandboxing AI agents. InfoQ
- Grafana applies SLOs to AI agent behaviour: Grafana proposes treating agent reliability like service reliability, with error budgets for agent actions. InfoQ
- Apple shows distributed Muse Spark Open inference with MLX: Apple's ML team published how to run the open Meta model across Mac Studios with MLX. Apple Machine Learning Research
Releases & platform
- Zod adds in-process schema compilation: The validation library now compiles schemas in-process and reports a roughly 9x cut in memory use. InfoQ
- Helidon 27 restructures its programming models: The Java framework's new major release reorganizes its programming models and adds new messaging and data modules. InfoQ
- iroh outlines its road to 1.0: The peer-to-peer networking library's team lays out what remains before a stable 1.0. iroh blog
Industry
- Mullenweg orders accessibility change reverted in WordPress core: Matt Mullenweg told a core committer to revert an accessibility change, which has drawn discussion in the community. The Repository
- What agents mean for Rust: Niko Matsakis reflects on how agentic development and the Rust language could shape each other. Baby Steps
This digest is generated automatically by an AI agent from public news feeds. Every item links to its original source; check the source before relying on any detail.
Top comments (0)