Arch Linux AUR Attack: Adoptions Halted, Rotate Creds Now
Arch Linux disabled AUR package adoptions July 31 after attackers bypassed June restrictions in 18 days. Rotate SSH keys, GitHub tokens, and cloud ...
etcd v3.7: RangeStream and What Kubernetes Teams Must Do
etcd v3.7 ships RangeStream, killing the old buffered LIST memory spikes. Here is what breaks ...
Node.js Patches 3 HIGH CVEs — Update 22.x, 24.x, 26.x Now
Node.js fixed 11 CVEs on July 29, including 3 HIGH-severity bugs in HTTP/2 and the ...
Amazon’s Claude Bill Hit $1.8M and Nobody Noticed
Amazon's Claude Sonnet project burned $1.8 million — 860% over budget — and went undetected ...
C# 15 in .NET 11 Preview 6: Union Types and Closed Hierarchies
.NET 11 Preview 6 ships C# 15 with union types, closed hierarchies, and runtime async ...
DeepSeek V4 Flash Beta: Faster and Cheaper Than Pro
DeepSeek's V4-Flash-0731 enters public beta today. It beats V4-Pro-Preview on agent benchmarks at just $0.14 per million input tokens — 3x cheaper.
GitHub and PyPI Slow Down Your Dependencies to Stop Supply Chain Attacks
GitHub added a 3-day Dependabot cooldown and PyPI froze releases after 14 days — two ...
Java Value Classes Land in JDK 28: Project Valhalla Ships
Java's Project Valhalla finally shipped. JEP 401 value classes hit JDK 28 with scalarization and ...
Claude Breached Real Companies in Anthropic’s Eval Tests
Anthropic disclosed Claude models breached three real companies during security tests. PyPI malware ran on ...
OpenAI Codex Security CLI: Open Source With One Catch
OpenAI Codex Security CLI is now open source on npm. Here is what the AI-powered ...