News

1. Browser tools for GitHub Copilot in VS Code are generally available (github.blog)
2. Meta’s AI Storage Blueprint at Scale (engineering.fb.com)
3. 6 security settings every GitHub maintainer should enable this week (github.blog)
4. DigitalOcean Evaluations: Production Model and Router Testing for the Inference Stack (www.digitalocean.com)
5. Copilot CLI auto model selection routes based on task (github.blog)
6. Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402 (blog.cloudflare.com)
7. Content Independence Day, one year on: building the business model for the agentic Internet (blog.cloudflare.com)
8. Making AI search smarter (blog.cloudflare.com)
9. Your site, your rules: new AI traffic options for all customers (blog.cloudflare.com)
10. Building more resilient CNI: what industry pen testers told us (www.ncsc.gov.uk)
11. Top 1 Million Analysis – June 2026: The State of Crypto (scotthelme.ghost.io)
12. Unmasking the crawls with Attribution Business Insights (blog.cloudflare.com)
13. Tails 7.9.1 (tails.net)
14. Untitled Post (kentcdodds.com)
15. How GitHub maintains compliance for open source dependencies (github.blog)
16. Claude Sonnet 5 is generally available for GitHub Copilot (github.blog)
17. MCP Beyond the Chat Window: Build Diagnostics in CI (devblogs.microsoft.com)
18. GitHub code coverage merge protection for pull requests (github.blog)
19. Releases: Sidebar navigation and per-asset download counts (github.blog)
20. 10 Years of Meta’s Commitment to Python (engineering.fb.com)
21. Copilot Agent is now available in JetBrains AI Assistant (github.blog)
22. Open source license compliance is in public preview (github.blog)
23. Weekly Update 510: Live From Mallorca with Scott Helme (troyhunt.com)
24. What’s !important #14: Gap Decorations, random(), field sizing, and More (css-tricks.com)
    Dependabot no longer infers .npmrc (github.blog)
    Upcoming cloud data retention policy for closed security alerts (github.blog)
    Upcoming access restrictions to public API endpoints and UI views (github.blog)
    .NET 8 and .NET 9 will reach End of Support on November 10, 2026 (devblogs.microsoft.com)
    SkiaSharp 4.0 is here: announcing the first stable release (devblogs.microsoft.com)
    Highlights from Git 2.55 (github.blog)
    Packaging and Package Identity for .NET apps with WinApp CLI on Windows (devblogs.microsoft.com)
    Inside the Advisory Database and what happens when vulnerability volume breaks records (github.blog)
    WSL container is now available for public preview (devblogs.microsoft.com)
    Top 1 Million Analysis – June 2026: Ten Years of Web Security (scotthelme.ghost.io)
    The Shifting Line Between CSS States and JavaScript Events (css-tricks.com)
    GenPage: Towards End-to-End Generative Homepage Construction at Netflix (netflixtechblog.com)
    Next.js already traces your requests. Here's how to export them with OpenTelemetry. (blog.sentry.io)
    Rebuilding the computer room (alexwlchan.net)
    Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice? (snyk.io)
    Sysco - 2,691,852 breached accounts (haveibeenpwned.com)
    GitHub and UNDP team up to advance development priorities in Ghana with open source (github.blog)
    Transitioning as a Hubber (github.blog)
    American Tower - 216,601 breached accounts (haveibeenpwned.com)
    Evaluating performance and efficiency of the GitHub Copilot agentic harness across models and tasks (github.blog)
    Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study (engineering.fb.com)
    Run Codex in the cloud – DigitalOcean for Codex is now available (www.digitalocean.com)
    translateZ() (css-tricks.com)
    translateY() (css-tricks.com)
    translateX() (css-tricks.com)
    translate() (css-tricks.com)
    How we built saga rollbacks for Cloudflare Workflows (blog.cloudflare.com)
    Celebrating over 15,000 young creators at the Coolest Projects 2026 online showcase (www.raspberrypi.org)
    NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence (snyk.io)
    Why I wrote PEP 832 -- virtual environment discovery (snarky.ca)
    Resilience Patterns Can Make Your System Less Resilient (codeopinion.com)
    A dead CDN, a wildcard, and an attack waiting to happen: the netdna-ssl.com takeover (scotthelme.ghost.io)
    Madison Square Garden Sports - 9,796,738 breached accounts (haveibeenpwned.com)
    A Note to Our Customers and Partners (snyk.io)
    Unlocking the Cloudflare app ecosystem with OAuth for all (blog.cloudflare.com)
    Weekly Update 509 (troyhunt.com)
    The White House's post-quantum executive order is an important milestone. It’s time to get to work (blog.cloudflare.com)
    How Meta Engineered Ultra-Narrow Batteries for AI Glasses (engineering.fb.com)
    I automated my job (and it made me a better leader) (github.blog)
    GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source (github.blog)
    How to design and present clear computing lessons (www.raspberrypi.org)
    What nearly 10,000 developer environments reveal about agentic development risk (snyk.io)
    The New Security Control Point: Governing AI Agents Inside the Execution Loop (snyk.io)
    Announcing Agentic Development Security (ADS) (snyk.io)
    When a vendor's breach becomes yours: lessons from the Klue incident (snyk.io)
    Toward More Controllable AI Video Editing: An Early Research Exploration at Netflix (netflixtechblog.com)
    Every Choice Changes Everything: The Show (blog.codinghorror.com)
    How Netflix Simplified Batch Compute with Kueue (netflixtechblog.com)
    How we found a bug in the hyper HTTP library (blog.cloudflare.com)
    From pledge to practice: Building a more inclusive open source ecosystem (github.blog)
    Adopting AV1 for Real-Time Communication (RTC) at Scale (engineering.fb.com)
    Why No Passkeys? Naming the Top Sites That Still Don't Support Them (scotthelme.ghost.io)
    Using Scroll-Driven Animations for Opposing Scroll Directions (css-tricks.com)
    The AI shift in cyber risk: why leaders must act now (www.ncsc.gov.uk)
    A developer toolkit to make your website agent-ready (developer.chrome.com)
    Modern CSS theming with light-dark(), contrast-color(), and style queries (una.im)
    What can wonky APIs tell us about the web? (alexwlchan.net)
    JCPenney - 368,418 breached accounts (haveibeenpwned.com)
    The Data Canary: How Netflix Validates Catalog Metadata (netflixtechblog.com)
    Data Projects: Managing Data Assets at Netflix Scale (netflixtechblog.com)
    Predicting Risk in Content Launches: How Data-Driven Insights can Transform Launch Planning (netflixtechblog.com)
    The Evolution of Cassandra Data Movement at Netflix (netflixtechblog.com)
    Thinking Fast & Slow for a Personalized Notification System (netflixtechblog.com)
    A Human-Augmenting Agentic Workflow for Causal Inference (netflixtechblog.com)
    From Silos to Service Topology: Why Netflix Built a Real-Time Service Map (netflixtechblog.com)
    An update on FortiBleed — what’s happening with victim orgs (doublepulsar.com)
    A First Look at Scroll-Triggered Animations (css-tricks.com)
    Temporary Cloudflare Accounts for AI agents (blog.cloudflare.com)
    There Are No Instances in atproto (overreacted.io)
    Ralph Lauren - 139,903 breached accounts (haveibeenpwned.com)
    Operation Endgame 4.0 - 4,160,519 breached accounts (haveibeenpwned.com)
    Build your own vulnerability harness (blog.cloudflare.com)
    Celebrating 12 years of Project Galileo (blog.cloudflare.com)
    The 'vibe coding spectrum' approach to AI-assisted software development (www.ncsc.gov.uk)
    Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways (www.ncsc.gov.uk)
    Unlock runtime insights: Introducing third-party developer tools for Chrome DevTools for agents (developer.chrome.com)
    The full Snyk AI Security Platform, free for open source maintainers (snyk.io)
    CFGI - 248,235 breached accounts (haveibeenpwned.com)
    Tails 7.9 (tails.net)
    Intelligent Terminal 0.1.1 is here: bash support, new slash commands, and more customization (devblogs.microsoft.com)
    Bringing more agent harnesses and frameworks to Cloudflare, starting with Flue (blog.cloudflare.com)
    AI-Powered MSBuild Investigation with the Microsoft Binlog MCP Server (devblogs.microsoft.com)
    Server-Side Tools Are Now Available for DigitalOcean Inference Engine (www.digitalocean.com)
    The Siren Song of ariaNotify() (css-tricks.com)
    Stop Blaming Event-Driven Architecture (codeopinion.com)
    FortiBleed — 75k Fortinet firewalls have admin passwords cracked (doublepulsar.com)
    Introducing the Cloudflare One stack: agent-powered deployment (blog.cloudflare.com)
    NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems (www.ncsc.gov.uk)
    What's New in WebGPU (Chrome 149-150) (developer.chrome.com)
    A Day in the Life of an AI Engineer in Snyk's Lisbon Office (snyk.io)
    A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope (snyk.io)
    Prop For That (css-tricks.com)
    Cloudflare DMARC Management is now generally available (blog.cloudflare.com)
    What students and teachers in England want from a computing curriculum (www.raspberrypi.org)
    June 2026 Stealer Logs - 56,278,397 breached accounts (haveibeenpwned.com)
    What’s !important #13: @function, alpha(), CSS Wordle, and More (css-tricks.com)
    Growing the Cloudflare AI team with talent from Ensemble AI (blog.cloudflare.com)
    The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students (scotthelme.ghost.io)
    Weekly Update 508 (troyhunt.com)
    Berkadia - 305,216 breached accounts (haveibeenpwned.com)
    Infinite Campus - 137,123 breached accounts (haveibeenpwned.com)
    The Government Just Banned an AI Model. An Engineer's Perspective. (snyk.io)
    When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams (snyk.io)
    Why Isn’t My 3D View Transition Working? (css-tricks.com)
    There’s no need to include ‘navigation’ in your navigation labels (css-tricks.com)
    Scaling Security Insights: how we achieved a 10x increase in global scanning capacity (blog.cloudflare.com)
    Better, faster, less wrong: Enhancing issue grouping (blog.sentry.io)
    Young people’s computer programs get data from space (www.raspberrypi.org)
    Catch visual regressions with Snapshots, now in beta (blog.sentry.io)
    University of Nottingham - 454,635 breached accounts (haveibeenpwned.com)
    Join us for .NET Day on Agentic Modernization Livestream (devblogs.microsoft.com)
    The Inference Alpha: Maximizing Frontier Models on AMD (www.digitalocean.com)
    Solving the ‘God Object’ Problem with Shared Identity (codeopinion.com)
    Creating Memorable Web Experiences: A Modern CSS Toolkit (css-tricks.com)
    Route public traffic to private applications with Cloudflare (blog.cloudflare.com)
    PowerToys 0.100 is here: new Shortcut Guide, Command Palette improvements and much more! (devblogs.microsoft.com)
    Weekly Update 507 (troyhunt.com)
    What We Learned Hiring 33 Engineers in Two Weeks (www.digitalocean.com)
    .NET 11 Preview 5 (github.com)
    .NET 11 Preview 5 is now available! (devblogs.microsoft.com)
    .NET and .NET Framework June 2026 servicing releases updates (devblogs.microsoft.com)
    Join the WebMCP origin trial (developer.chrome.com)
    Defend against frontier cyber models: Cloudflare's architecture as customer zero (blog.cloudflare.com)
    .NET at Microsoft Build 2026: Must watch sessions (devblogs.microsoft.com)
    Open-Sourcing dbsc-php: a Server Library for Device Bound Session Credentials in PHP (scotthelme.ghost.io)
    Scroll-Driven, Scroll-Triggered, Scroll States, and View Transitions (css-tricks.com)
    Turning Cloudflare’s threat indicators into real-time WAF rules (blog.cloudflare.com)
    Works on my machine: how we use AI to reproduce reported bugs (blog.sentry.io)
    Using the Screen Capture API to record a browser window (alexwlchan.net)
    Baker Distributing - 102,935 breached accounts (haveibeenpwned.com)
    DBSC Beta at Report URI (scotthelme.ghost.io)
    Errors, traces, logs, metrics: when to reach for what (blog.sentry.io)
    Using Pytester to test my Playwright fixtures (alexwlchan.net)
    BCD Travel - 396,313 breached accounts (haveibeenpwned.com)
    Firewalling Docker with nftables (theorangeone.net)
    Model Evaluations: Prove Your Routing Policy Actually Works (www.digitalocean.com)
    Software supply chain attacks: check your dependencies (www.ncsc.gov.uk)
    Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp (snyk.io)
    So You Have an AI Security Budget. Now what? (snyk.io)
    Type Level Security: The future of secure AI code generation? (snyk.io)
    Tails 7.8.1 (tails.net)
    DentaQuest - 2,553,599 breached accounts (haveibeenpwned.com)
    The Team Behind Deploy: Shipping AI, the DigitalOcean Way (www.digitalocean.com)
    Powering the Inference Era: Inside the DigitalOcean Data & Learning Layer (www.digitalocean.com)
    Lights Out, Systems On: Validating Instant Power Loss Readiness (engineering.fb.com)
    Support your young people with our AI literacy resources (www.raspberrypi.org)
    Seamless PWA origin migration: Change domains without losing users (developer.chrome.com)
    Chrome 150 beta (developer.chrome.com)
    Welcoming the Philippine Government to Have I Been Pwned (troyhunt.com)
    The New Security Risks of the Agentic Development Lifecycle (snyk.io)
    Modular Monolith Boundaries Done Wrong (codeopinion.com)
    Open by Design: How NVIDIA and DigitalOcean Are Building the Stack for the Always-On Agentic Era (www.digitalocean.com)
    Announcing Intelligent Terminal 0.1 (devblogs.microsoft.com)
    Device Bound Session Credentials: Making Stolen Cookies Useless (scotthelme.ghost.io)
    Building confidence to teach AI in the classroom (www.raspberrypi.org)
    What's new in DevTools (Chrome 149) (developer.chrome.com)
    New in Chrome 149 (developer.chrome.com)
    Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection (snyk.io)
    The Inference Tax: How Prefix-Aware Routing Eliminates the Hidden Cost of LLMs at Scale (www.digitalocean.com)
    DigitalOcean Serverless Inference: A Deep Dive (www.digitalocean.com)
    1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever (troyhunt.com)
    Edmunds - 177,860 breached accounts (haveibeenpwned.com)
    Weekly Update 506 (troyhunt.com)
    Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages (snyk.io)
    Atlas Menu - 63,926 breached accounts (haveibeenpwned.com)
    AI Disruptors: How the Next Generation of Business is Being Built (www.digitalocean.com)
    Rendering a chat thread in CSS and JavaScript (alexwlchan.net)
    New to the web platform in May (web.dev)
    Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI (snyk.io)
    How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development (snyk.io)
    OpenCode Now Supports DigitalOcean Inference Router for Intelligent Model Routing (www.digitalocean.com)
    Charter - 4,851,517 breached accounts (haveibeenpwned.com)
    Microsoft’s stance on zero day exploits is a dumpster fire of their own making (doublepulsar.com)
    Can AI support creativity? What educators can learn from creative machine learning (www.raspberrypi.org)
    How we cut build times by two-thirds by deleting our CMS (blog.sentry.io)
    Kemper - 269,299 breached accounts (haveibeenpwned.com)
    Scalable, Cost-Efficient AI: Introducing Unified Batch Inference on DigitalOcean (www.digitalocean.com)
    Stop Joining Tables In Your “Modular” Monolith (codeopinion.com)
    Adopting open-source in local government  (technology.blog.gov.uk)
    Designing secure access with ZTNA (www.ncsc.gov.uk)
    Celebrating young tech creators at Coolest Projects Ireland 2026 (www.raspberrypi.org)
    April 2026 Baseline monthly digest (web.dev)
    Mytheresa - 84,108 breached accounts (haveibeenpwned.com)
    Continuous Offensive Security: The Line We've Been Walking (snyk.io)
    You don’t need to pick one: how Sentry and OpenTelemetry work together (blog.sentry.io)
    Ameriprise - 502,597 breached accounts (haveibeenpwned.com)
    Doing More with GitHub Copilot as a .NET Developer (devblogs.microsoft.com)
    SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems (engineering.fb.com)
    Your agent can't fix what it can't see (blog.sentry.io)
    CSS vs. JavaScript (www.joshwcomeau.com)
    Build new features using built-in AI in Chrome (developer.chrome.com)
    Welcoming the Bhutanese Government to Have I Been Pwned (troyhunt.com)
    Weekly Update 505 (troyhunt.com)
    Laravel Lang Supply Chain Advisory (snyk.io)
    Request-Based Autoscaling Is Now Generally Available on App Platform (www.digitalocean.com)
    What's new in web extensions: I/O 2026 recap (developer.chrome.com)
    Snyk announces Anthropic updates: Evo integrates with Claude Enterprise, and Snyk Desk comes to Claude Desktop (snyk.io)
    Passkeys, Permissions Policy and Bug Hunting in 1Password's WebAuthn Wrapper (scotthelme.ghost.io)
    The product analytics you already have (blog.sentry.io)
    Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future (snyk.io)
    Tails 7.8 (tails.net)
    Scaling Software Architecture Without Overengineering (codeopinion.com)
    How We Built DigitalOcean Inference Router (www.digitalocean.com)
    Open-Sourcing passkeys-php: A Security-Focused WebAuthn Library for PHP (scotthelme.ghost.io)
    A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office (snyk.io)
    The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised (snyk.io)
    XSS Is Deadly for Passkeys: The Hidden Risk of Attestation None (scotthelme.ghost.io)
    Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account (snyk.io)
    Passkeys 101: An Introduction to Passkeys and How They Work (scotthelme.ghost.io)
    Weekly Update 504 (troyhunt.com)
    Engineering Rigor in the AI Age: Building a Benchmark You Can Trust (eileencodes.com)
    Anatomy of a WooCommerce Skimmer: A Technical Deep-Dive (scotthelme.ghost.io)
    Thinking carefully before adopting agentic AI (www.ncsc.gov.uk)
    Malicious node-ipc versions published to npm in suspected maintainer account compromise (snyk.io)
    Beyond content: Helping teachers feel ready to teach AI (www.raspberrypi.org)
    Start small, dream big with Code Club: Become an Incubator Partner (www.raspberrypi.org)
    New ways to agentically build and edit dashboards (blog.sentry.io)
    Waiting for website changes in the browser (alexwlchan.net)
    Welcoming the Bahamian Government to Have I Been Pwned (troyhunt.com)
    PyCon US 2026 (devblogs.microsoft.com)
    Your Model Doesn't Matter. Your Infrastructure Does. (www.digitalocean.com)
    Reel Friends: Building Social Discovery that Scales to Billions (engineering.fb.com)
    .NET 11 Preview 4 (github.com)
    A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens (googleprojectzero.blogspot.com)
    Migrating Data Ingestion Systems at Meta Scale (engineering.fb.com)
    Why Sagas Feel Broken (codeopinion.com)
    Tails 7.7.3 (tails.net)
    Welcoming the Bangladesh Government to Have I Been Pwned (troyhunt.com)
    Mypy 2.1 Released (mypy-lang.org)
    Under Attack: Responding to the Rise of Info-Stealer Threats (scotthelme.ghost.io)
    10 questions to ask when using AI models to find vulnerabilities (www.ncsc.gov.uk)
    From vibe code to production-ready: observability for Next.js and Supabase apps (blog.sentry.io)
    Watching for file changes on macOS (alexwlchan.net)
    TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack (snyk.io)
    Welcoming the Costa Rican Government to Have I Been Pwned (troyhunt.com)
    Weekly Update 503 (troyhunt.com)
    My not-so-static new static website (theorangeone.net)
    Monitor Unreal Engine Game Performance with Application Metrics (blog.sentry.io)
    Debugging Event-Driven Systems: 5 Problems Teams Create (codeopinion.com)
    Torchbox's new status page (theorangeone.net)
    Fixing JavaScript observability, one library at a time (blog.sentry.io)
    Mypy 2.0 Relased (mypy-lang.org)
    Improved debugging for Expo apps with the React Native SDK (blog.sentry.io)
    Weekly Update 502 (troyhunt.com)
    Introducing Application Metrics: Track the signal, see the spike, jump to the trace (blog.sentry.io)
    Powering the Inference Era: Inside the DigitalOcean AI-Native Cloud (www.digitalocean.com)
    Introducing Apache Arrow Support in mssql-python (devblogs.microsoft.com)
    Tails 7.7.2 (tails.net)