1_DevOps'ish

Attackers are exploiting the patched Ghost CMS flaw CVE-2026-26980, compromising over 700 unpatched sites, including universities.

The company will reduce roughly 20% of its workforce after a steep stock decline and rising AI-related costs.

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

An early update on what we've learned from Project Glasswing.

Free full-featured web-based audio & waveform editing tool - pkalogiros/AudioMass

Out of all the migrations I help teams with, Go to Rust is a bit of an outlier. It’s not a question of “is Rust faster?” or “does Rust have types?”, Go already gets you most of the way there. The discussion is mostly about correctness guar…

🌱 Private, quiet space for thinking. A simple app for your .md files. - zakirullin/files.md

A new kind of language for a new kind of computer. Contribute to openprose/prose development by creating an account on GitHub.

In this article, I try to understand why coding agents can be infuriating to use. I think the problem is their conversational UX: they behave enough like helpful colleagues to trigger our social instincts, but they don't learn, adapt, or take responsibility the way people do, which makes their repeated mistakes feel much more frustrating than they should.

The release candidate for the next Model Context Protocol (MCP) specification is now available: a stateless protocol core, the Extensions framework, Tasks, MCP Apps, authorization hardening, and a formal deprecation policy.

We're in the transition period -- all of us.

Read-only inventory collector for package, extension, and developer-tool metadata on macOS and Linux developer endpoints, built for fast supply-chain exposure checks. - perplexityai/bumblebee

TrapDoor crypto stealer hits 36 malicious packages across npm, PyPI, and Crates.io, targeting crypto, DeFi, AI, and security developers.

Will Jason Statham save us?

Gov. Gavin Newsom issued an executive order to explore an overhaul of labor policies to deal with potential mass job displacement from artificial intelligence.

Reveals decent new homegrown accelerator and tiny production volumes

A decade ago I wrote the design doc for SPIFFE. Workload identity is finally having its moment.

Deleting a Google API key doesn't revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google has declined to fix it.

This TeamPCP attack is a serious wakeup call about software supply chain security — and the problems with implicit trust.

Google's Gemini Spark launches as a 24/7 cloud agent, splitting AI agents between managed convenience and OpenClaw's self-hosted control.

Dirty Frag, Copy Fail, and Fragesia show the new reality

Microsoft has not made the Maia 200 chips available to customers, but they are used in the company's data centers, offering better efficiency than other silicon.

When the future of pgBackRest suddenly became uncertain, the PostgreSQL ecosystem reacted quickly. At Percona, we believed the most important question was not: what replaces it? but: how do we ensure pgBackRest remains healthy, sustainable, and open for everyone? That distinction matters. pgBackRest is critical infrastructure used by enterprises around the world to protect some … Continued

A highly critical SQL injection vulnerability in Drupal core's database abstraction layer affects sites running PostgreSQL.

"I can’t take it anymore. The threats," the treasurer said. The planned data center is part of OpenAI and Oracle's Stargate initiative.

But the devs admit there's still a lot of work to be done to get the Flipper One market-ready, and they are looking for contributors.

Nvidia CEO Jensen Huang said the company has "largely conceded" China's advanced artificial intelligence chip market to Huawei.