News

1. The cost of saying yes has changed (github.blog)
2. Advanced search for Projects is generally available (github.blog)
3. Repository admins can archive pull requests (github.blog)
4. REST API endpoints for Visual Studio Subscription management (github.blog)
5. Xcode 27 runner image now in public preview (github.blog)
6. Announcing .NET Modernization for Beginners (devblogs.microsoft.com)
7. Your agent should understand what you see (blog.sentry.io)
8. Building education technology that children can trust (www.raspberrypi.org)
9. Improvements to secret scanning and public monitoring (github.blog)
10. pointer-events (css-tricks.com)
11. GitHub for Beginners: Your roadmap to mastering the GitHub essentials (github.blog)
12. Exploring Hierarchical Interest Representation For Meta Ads Deep Funnel Optimization (engineering.fb.com)
13. What’s !important #15: Boundary-aware CSS, Time-based CSS, Full-bleed CSS, and More (css-tricks.com)
14. Helping small businesses with free, hands-on cyber consultancy (www.ncsc.gov.uk)
15. Fluke - 821,100 breached accounts (haveibeenpwned.com)
16. Goose Creek - 6,574,121 breached accounts (haveibeenpwned.com)
17. Weekly Update 512: IoT Lockout Fail (troyhunt.com)
18. GitHub Copilot in Visual Studio — June update (github.blog)
19. GitHub Copilot for JetBrains expands BYOK capabilities (github.blog)
20. Code scanning shows AI security detections on pull requests (github.blog)
21. .NET and .NET Framework July 2026 servicing releases updates (devblogs.microsoft.com)
22. CoreCLR Progress and the Mono Timeline for .NET MAUI (devblogs.microsoft.com)
23. .NET 11 Preview 6 (github.com)
24. .NET 11 Preview 6 is now available! (devblogs.microsoft.com)
25. Dependabot version updates introduce default package cooldown (github.blog)
26. A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed (blog.cloudflare.com)
27. Security reviews now available in the GitHub Copilot app (github.blog)
28. AI literacy begins with data literacy: An example from healthcare (www.raspberrypi.org)
29. Building Service Topology at Scale: Architecture, Challenges, and Lessons Learned (netflixtechblog.com)
30. A Git hook to prevent committing directly to main (alexwlchan.net)
31. Modernizing the Meta Ads Service With an Open-Source Kernel Scheduler (engineering.fb.com)
32. Hello World #30 out now: Critical thinking in the age of AI (www.raspberrypi.org)
33. Introducing Precursor: detecting agentic behavior with continuous client-side signals (blog.cloudflare.com)
34. UK and Allies urge critical sectors to improve defences against Russian intelligence targeting (www.ncsc.gov.uk)
35. Mypy 2.3 Released (mypy-lang.org)
36. Glendale Community College - 793,925 breached accounts (haveibeenpwned.com)
37. Better tools made Copilot code review worse. Here’s how we actually improved it. (github.blog)
38. Empowering global AI literacy: Translating Experience AI resources into Croatian (www.raspberrypi.org)
39. Improving Smart Tiered Cache for Public Cloud Regions (blog.cloudflare.com)
40. Enhancing your enrichment offer? Code Club is the answer (www.raspberrypi.org)
41. Scale Faster with Managed Weaviate: Now in Public Preview on DigitalOcean (www.digitalocean.com)
42. Modernize .NET applications in the GitHub Copilot app (devblogs.microsoft.com)
43. How GitHub gave every repository a durable owner (github.blog)
44. Why we cannot wait for better post-quantum signature algorithms (blog.cloudflare.com)
45. Cyber Essentials Pathways: from proof of concept to cyber confidence (www.ncsc.gov.uk)
46. When and what should I be logging? (blog.sentry.io)
47. Symlinks Are Still Scary (And Yes, You Can Commit Them to Git) (snyk.io)
48. Automating cross-repo documentation with GitHub Agentic Workflows (github.blog)
49. GitHub availability report: June 2026 (github.blog)
50. Connection Allowlist: a network firewall, built into the browser (scotthelme.ghost.io)
51. How GitHub Copilot enables zero DNS configuration for GitHub Pages (github.blog)
52. Multi-Tenancy Isn’t About Databases (codeopinion.com)
53. Weekly Update 511: Live from my Riad in Marrakech (troyhunt.com)
54. Introducing Meerkat: an experiment in global consensus (blog.cloudflare.com)
55. Mypy 2.2 Released (mypy-lang.org)
56. How to publish to PyPI using GitHub Actions securely (snarky.ca)
57. Q1 2026 Innovation Graph update: Open source collaboration is accelerating worldwide (github.blog)
58. Get Ready For the Powerful CSS border-shape Property! (css-tricks.com)
59. Joy in learning computer science with Experience CS (www.raspberrypi.org)
60. Cloudflare proudly joins the UK government's Cyber Resilience Pledge (blog.cloudflare.com)
61. Cyber Shield: The path to an agentic AI future for cyber defence (www.ncsc.gov.uk)
62. Introducing the Cloud Challenge Book 2026 (technology.blog.gov.uk)
63. Getting Started with Anchor Positioning (www.joshwcomeau.com)
64. Your Worker can now have its own cache in front of it (blog.cloudflare.com)
65. Describing all my photos (alexwlchan.net)
66. Moody Bible Institute - 2,303,416 breached accounts (haveibeenpwned.com)
67. I don’t want to repeat repeat myself (alexwlchan.net)
68. Swimming Pools, Pee, and Trying to Delete Your Data From the Internet (troyhunt.com)
69. Agentic test processes, LLM benchmarks, and other notes on agentic coding from Galapagos Island (danluu.com)
70. Process names: The forgotten Observability channel (theorangeone.net)
71. How GitHub used secret scanning to reach inbox zero (github.blog)
72. Connecting government and academia: Responsible AI Through Cloud Technology event (technology.blog.gov.uk)
73. Built for Mass Scale: Hard-Won Lessons from Teams Running High Volume Inference Workloads in Production (www.digitalocean.com)
74. Any Apple update can break our app. Here's how we find out first. (blog.sentry.io)
75. Meta’s AI Storage Blueprint at Scale (engineering.fb.com)
76. 6 security settings every GitHub maintainer should enable this week (github.blog)
77. DigitalOcean Evaluations: Production Model and Router Testing for the Inference Stack (www.digitalocean.com)
78. Making AI search smarter (blog.cloudflare.com)
79. Your site, your rules: new AI traffic options for all customers (blog.cloudflare.com)
80. Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402 (blog.cloudflare.com)
81. Content Independence Day, one year on: building the business model for the agentic Internet (blog.cloudflare.com)
82. Building more resilient CNI: what industry pen testers told us (www.ncsc.gov.uk)
83. Top 1 Million Analysis – June 2026: The State of Crypto (scotthelme.ghost.io)
84. Reading the agent traces is how you make the call your eval can't (blog.sentry.io)
85. Unmasking the crawls with Attribution Business Insights (blog.cloudflare.com)
86. Tails 7.9.1 (tails.net)
87. MCP Beyond the Chat Window: Build Diagnostics in CI (devblogs.microsoft.com)
88. 10 Years of Meta’s Commitment to Python (engineering.fb.com)
89. Weekly Update 510: Live From Mallorca with Scott Helme (troyhunt.com)
90. What’s !important #14: Gap Decorations, random(), field-sizing, and More (css-tricks.com)
    .NET 8 and .NET 9 will reach End of Support on November 10, 2026 (devblogs.microsoft.com)
    SkiaSharp 4.0 is here: announcing the first stable release (devblogs.microsoft.com)
    Packaging and Package Identity for .NET apps with WinApp CLI on Windows (devblogs.microsoft.com)
    WSL container is now available for public preview (devblogs.microsoft.com)
    Top 1 Million Analysis – June 2026: Ten Years of Web Security (scotthelme.ghost.io)
    The Shifting Line Between CSS States and JavaScript Events (css-tricks.com)
    GenPage: Towards End-to-End Generative Homepage Construction at Netflix (netflixtechblog.com)
    Next.js already traces your requests. Here's how to export them with OpenTelemetry. (blog.sentry.io)
    Rebuilding the computer room (alexwlchan.net)
    Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice? (snyk.io)
    Sysco - 2,691,852 breached accounts (haveibeenpwned.com)
    American Tower - 216,601 breached accounts (haveibeenpwned.com)
    Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study (engineering.fb.com)
    Run Codex in the cloud – DigitalOcean for Codex is now available (www.digitalocean.com)
    translateZ() (css-tricks.com)
    translateY() (css-tricks.com)
    translateX() (css-tricks.com)
    translate() (css-tricks.com)
    How we built saga rollbacks for Cloudflare Workflows (blog.cloudflare.com)
    Celebrating over 15,000 young creators at the Coolest Projects 2026 online showcase (www.raspberrypi.org)
    NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence (snyk.io)
    Why I wrote PEP 832 -- virtual environment discovery (snarky.ca)
    Resilience Patterns Can Make Your System Less Resilient (codeopinion.com)
    A dead CDN, a wildcard, and an attack waiting to happen: the netdna-ssl.com takeover (scotthelme.ghost.io)
    Madison Square Garden Sports - 9,796,738 breached accounts (haveibeenpwned.com)
    A Note to Our Customers and Partners (snyk.io)
    Unlocking the Cloudflare app ecosystem with OAuth for all (blog.cloudflare.com)
    Weekly Update 509 (troyhunt.com)
    The White House's post-quantum executive order is an important milestone. It’s time to get to work (blog.cloudflare.com)
    How Meta Engineered Ultra-Narrow Batteries for AI Glasses (engineering.fb.com)
    How to design and present clear computing lessons (www.raspberrypi.org)
    Announcing Agentic Development Security (ADS) (snyk.io)
    The New Security Control Point: Governing AI Agents Inside the Execution Loop (snyk.io)
    What nearly 10,000 developer environments reveal about agentic development risk (snyk.io)
    When a vendor's breach becomes yours: lessons from the Klue incident (snyk.io)
    Toward More Controllable AI Video Editing: An Early Research Exploration at Netflix (netflixtechblog.com)
    Every Choice Changes Everything: The Show (blog.codinghorror.com)
    How Netflix Simplified Batch Compute with Kueue (netflixtechblog.com)
    How we found a bug in the hyper HTTP library (blog.cloudflare.com)
    Adopting AV1 for Real-Time Communication (RTC) at Scale (engineering.fb.com)
    Why No Passkeys? Naming the Top Sites That Still Don't Support Them (scotthelme.ghost.io)
    Using Scroll-Driven Animations for Opposing Scroll Directions (css-tricks.com)
    The AI shift in cyber risk: why leaders must act now (www.ncsc.gov.uk)
    A developer toolkit to make your website agent-ready (developer.chrome.com)
    Modern CSS theming with light-dark(), contrast-color(), and style queries (una.im)
    What can wonky APIs tell us about the web? (alexwlchan.net)
    JCPenney - 368,418 breached accounts (haveibeenpwned.com)
    The Data Canary: How Netflix Validates Catalog Metadata (netflixtechblog.com)
    Data Projects: Managing Data Assets at Netflix Scale (netflixtechblog.com)
    Predicting Risk in Content Launches: How Data-Driven Insights can Transform Launch Planning (netflixtechblog.com)
    The Evolution of Cassandra Data Movement at Netflix (netflixtechblog.com)
    Thinking Fast & Slow for a Personalized Notification System (netflixtechblog.com)
    A Human-Augmenting Agentic Workflow for Causal Inference (netflixtechblog.com)
    An update on FortiBleed — what’s happening with victim orgs (doublepulsar.com)
    A First Look at Scroll-Triggered Animations (css-tricks.com)
    Temporary Cloudflare Accounts for AI agents (blog.cloudflare.com)
    There Are No Instances in atproto (overreacted.io)
    Ralph Lauren - 139,903 breached accounts (haveibeenpwned.com)
    Operation Endgame 4.0 - 4,160,519 breached accounts (haveibeenpwned.com)
    Build your own vulnerability harness (blog.cloudflare.com)
    Celebrating 12 years of Project Galileo (blog.cloudflare.com)
    Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways (www.ncsc.gov.uk)
    The 'vibe coding spectrum' approach to AI-assisted software development (www.ncsc.gov.uk)
    Unlock runtime insights: Introducing third-party developer tools for Chrome DevTools for agents (developer.chrome.com)
    The full Snyk AI Security Platform, free for open source maintainers (snyk.io)
    CFGI - 248,235 breached accounts (haveibeenpwned.com)
    Tails 7.9 (tails.net)
    Intelligent Terminal 0.1.1 is here: bash support, new slash commands, and more customization (devblogs.microsoft.com)
    Bringing more agent harnesses and frameworks to Cloudflare, starting with Flue (blog.cloudflare.com)
    AI-Powered MSBuild Investigation with the Microsoft Binlog MCP Server (devblogs.microsoft.com)
    Server-Side Tools Are Now Available for DigitalOcean Inference Engine (www.digitalocean.com)
    The Siren Song of ariaNotify() (css-tricks.com)
    Stop Blaming Event-Driven Architecture (codeopinion.com)
    FortiBleed — 75k Fortinet firewalls have admin passwords cracked (doublepulsar.com)
    NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems (www.ncsc.gov.uk)
    What's New in WebGPU (Chrome 149-150) (developer.chrome.com)
    A Day in the Life of an AI Engineer in Snyk's Lisbon Office (snyk.io)
    A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope (snyk.io)
    Prop For That (css-tricks.com)
    What students and teachers in England want from a computing curriculum (www.raspberrypi.org)
    June 2026 Stealer Logs - 56,278,397 breached accounts (haveibeenpwned.com)
    What’s !important #13: @function, alpha(), CSS Wordle, and More (css-tricks.com)
    The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students (scotthelme.ghost.io)
    Weekly Update 508 (troyhunt.com)
    Berkadia - 305,216 breached accounts (haveibeenpwned.com)
    Infinite Campus - 137,123 breached accounts (haveibeenpwned.com)
    The Government Just Banned an AI Model. An Engineer's Perspective. (snyk.io)
    When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams (snyk.io)
    Why Isn’t My 3D View Transition Working? (css-tricks.com)
    Better, faster, less wrong: Enhancing issue grouping (blog.sentry.io)
    Young people’s computer programs get data from space (www.raspberrypi.org)
    Catch visual regressions with Snapshots, now in beta (blog.sentry.io)
    University of Nottingham - 454,635 breached accounts (haveibeenpwned.com)
    The Inference Alpha: Maximizing Frontier Models on AMD (www.digitalocean.com)
    Solving the ‘God Object’ Problem with Shared Identity (codeopinion.com)
    PowerToys 0.100 is here: new Shortcut Guide, Command Palette improvements and much more! (devblogs.microsoft.com)
    Weekly Update 507 (troyhunt.com)
    What We Learned Hiring 33 Engineers in Two Weeks (www.digitalocean.com)
    .NET 11 Preview 5 (github.com)
    Join the WebMCP origin trial (developer.chrome.com)
    Open-Sourcing dbsc-php: a Server Library for Device Bound Session Credentials in PHP (scotthelme.ghost.io)
    Works on my machine: how we use AI to reproduce reported bugs (blog.sentry.io)
    Using the Screen Capture API to record a browser window (alexwlchan.net)
    Baker Distributing - 102,935 breached accounts (haveibeenpwned.com)
    DBSC Beta at Report URI (scotthelme.ghost.io)
    Errors, traces, logs, metrics: when to reach for what (blog.sentry.io)
    Using Pytester to test my Playwright fixtures (alexwlchan.net)
    BCD Travel - 396,313 breached accounts (haveibeenpwned.com)
    Firewalling Docker with nftables (theorangeone.net)
    Model Evaluations: Prove Your Routing Policy Actually Works (www.digitalocean.com)
    Software supply chain attacks: check your dependencies (www.ncsc.gov.uk)
    Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp (snyk.io)
    Type Level Security: The future of secure AI code generation? (snyk.io)
    So You Have an AI Security Budget. Now what? (snyk.io)
    Tails 7.8.1 (tails.net)
    DentaQuest - 2,553,599 breached accounts (haveibeenpwned.com)
    The Team Behind Deploy: Shipping AI, the DigitalOcean Way (www.digitalocean.com)
    Powering the Inference Era: Inside the DigitalOcean Data & Learning Layer (www.digitalocean.com)
    Lights Out, Systems On: Validating Instant Power Loss Readiness (engineering.fb.com)
    Seamless PWA origin migration: Change domains without losing users (developer.chrome.com)
    Chrome 150 beta (developer.chrome.com)
    Welcoming the Philippine Government to Have I Been Pwned (troyhunt.com)
    The New Security Risks of the Agentic Development Lifecycle (snyk.io)
    Modular Monolith Boundaries Done Wrong (codeopinion.com)
    Open by Design: How NVIDIA and DigitalOcean Are Building the Stack for the Always-On Agentic Era (www.digitalocean.com)
    Announcing Intelligent Terminal 0.1 (devblogs.microsoft.com)
    Device Bound Session Credentials: Making Stolen Cookies Useless (scotthelme.ghost.io)
    What's new in DevTools (Chrome 149) (developer.chrome.com)
    New in Chrome 149 (developer.chrome.com)
    Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection (snyk.io)
    The Inference Tax: How Prefix-Aware Routing Eliminates the Hidden Cost of LLMs at Scale (www.digitalocean.com)
    DigitalOcean Serverless Inference: A Deep Dive (www.digitalocean.com)
    1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever (troyhunt.com)
    Edmunds - 177,860 breached accounts (haveibeenpwned.com)
    Weekly Update 506 (troyhunt.com)
    Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages (snyk.io)
    Atlas Menu - 63,926 breached accounts (haveibeenpwned.com)
    AI Disruptors: How the Next Generation of Business is Being Built (www.digitalocean.com)
    Rendering a chat thread in CSS and JavaScript (alexwlchan.net)
    New to the web platform in May (web.dev)
    Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI (snyk.io)
    How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development (snyk.io)
    OpenCode Now Supports DigitalOcean Inference Router for Intelligent Model Routing (www.digitalocean.com)
    Microsoft’s stance on zero day exploits is a dumpster fire of their own making (doublepulsar.com)
    How we cut build times by two-thirds by deleting our CMS (blog.sentry.io)
    Scalable, Cost-Efficient AI: Introducing Unified Batch Inference on DigitalOcean (www.digitalocean.com)
    Stop Joining Tables In Your “Modular” Monolith (codeopinion.com)
    Adopting open-source in local government  (technology.blog.gov.uk)
    Designing secure access with ZTNA (www.ncsc.gov.uk)
    April 2026 Baseline monthly digest (web.dev)
    Continuous Offensive Security: The Line We've Been Walking (snyk.io)
    You don’t need to pick one: how Sentry and OpenTelemetry work together (blog.sentry.io)
    SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems (engineering.fb.com)
    Your agent can't fix what it can't see (blog.sentry.io)
    CSS vs. JavaScript (www.joshwcomeau.com)
    Build new features using built-in AI in Chrome (developer.chrome.com)
    Welcoming the Bhutanese Government to Have I Been Pwned (troyhunt.com)
    Weekly Update 505 (troyhunt.com)
    Laravel Lang Supply Chain Advisory (snyk.io)
    Request-Based Autoscaling Is Now Generally Available on App Platform (www.digitalocean.com)
    What's new in web extensions: I/O 2026 recap (developer.chrome.com)
    Snyk announces Anthropic updates: Evo integrates with Claude Enterprise, and Snyk Desk comes to Claude Desktop (snyk.io)
    Passkeys, Permissions Policy and Bug Hunting in 1Password's WebAuthn Wrapper (scotthelme.ghost.io)
    The product analytics you already have (blog.sentry.io)
    Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future (snyk.io)
    Tails 7.8 (tails.net)
    Scaling Software Architecture Without Overengineering (codeopinion.com)
    How We Built DigitalOcean Inference Router (www.digitalocean.com)
    Open-Sourcing passkeys-php: A Security-Focused WebAuthn Library for PHP (scotthelme.ghost.io)
    A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office (snyk.io)
    The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised (snyk.io)
    XSS Is Deadly for Passkeys: The Hidden Risk of Attestation None (scotthelme.ghost.io)
    Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account (snyk.io)