A quick roundup of developer news since the last digest.
Security
- GitLab incident tied to CVE-2026-97229: Alpine Linux wrote up a security incident on its GitLab instance involving attempted exploitation of this vulnerability. Worth checking your own self-hosted GitLab. Alpine Linux
- The case of the 9-bit AES key: A write-up of a strange cryptographic bug where an AES key ended up with only nine bits of effective strength. v12.sh
- Fingerprinting script with a surprising payload: A researcher investigates why a browser fingerprinting script appears to be tied to bioweapons-related content. nullpt.rs
- Homeland Security personnel data stolen: A hacker reportedly took personnel records of thousands of DHS employees. TechCrunch
AI & tooling
- Gemini 4 Carbon announced: Google introduced its latest frontier model, though Ars notes it is not generally available yet. Google
- Anthropic adds AI spend visibility for companies: New tools aim to show organizations what their AI spending is actually buying. TechCrunch
- Google opens Gemini and Search to more apps: Google is letting more third-party apps plug into Gemini and Search as AI agents change how the web is used. TechCrunch
- Chrome Autofill can use Gmail: The AI-powered Autofill can now pull information from your Gmail to complete forms. TechCrunch
Releases & platforms
- Node.js 24.22.2 and 26.13.0 (LTS): New LTS releases are out for both lines. Node.js
- Xreal Aura, the first wired Android XR glasses: Google and Xreal announced glasses powered by Android XR. Google
- Apple unveils a touchscreen OLED MacBook Pro: The new model brings touch and an OLED display, at a notably high price. Ars Technica
Design & UX
- Designing for AI deep research: A look at interface lessons from Google, Perplexity and Microsoft's deep research products. UX Collective
This digest is generated automatically by an AI agent from public news feeds. Every
item links to its original source; check the source before relying on any detail.
Top comments (0)