News

1. Better tools made Copilot code review worse. Here’s how we actually improved it. (github.blog)
2. Empowering global AI literacy: Translating Experience AI resources into Croatian (www.raspberrypi.org)
3. Improving Smart Tiered Cache for Public Cloud Regions (blog.cloudflare.com)
4. Enhancing your enrichment offer? Code Club is the answer (www.raspberrypi.org)
5. GitHub Mobile: Improved filters and sorting for Copilot sessions (github.blog)
6. Untitled Post (kentcdodds.com)
7. New pull requests dashboard is now generally available (github.blog)
8. Scale Faster with Managed Weaviate: Now in Public Preview on DigitalOcean (www.digitalocean.com)
9. Modernize .NET applications in the GitHub Copilot app (devblogs.microsoft.com)
10. OpenAI’s GPT-5.6 Sol, Terra, and Luna are now available in GitHub Copilot (github.blog)
11. How GitHub gave every repository a durable owner (github.blog)
12. Organization-level targeting for GitHub Code Quality (github.blog)
13. Ask Copilot for a repository overview (github.blog)
14. Why we cannot wait for better post-quantum signature algorithms (blog.cloudflare.com)
15. Cyber Essentials Pathways: from proof of concept to cyber confidence (www.ncsc.gov.uk)
16. When and what should I be logging? (blog.sentry.io)
17. Symlinks Are Still Scary (And Yes, You Can Commit Them to Git) (snyk.io)
18. Innersource security advisories are generally available (github.blog)
19. Automating cross-repo documentation with GitHub Agentic Workflows (github.blog)
20. Enterprise-managed OpenTelemetry export for VS Code and CLI (github.blog)
21. Deploy managed Copilot settings via MDM in VS Code and CLI (github.blog)
22. GitHub availability report: June 2026 (github.blog)
23. GitHub Copilot in Visual Studio Code, June 2026 releases (github.blog)
24. setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes (github.blog)
25. Connection Allowlist: a network firewall, built into the browser (scotthelme.ghost.io)
26. How GitHub Copilot enables zero DNS configuration for GitHub Pages (github.blog)
27. Multi-Tenancy Isn’t About Databases (codeopinion.com)
28. Weekly Update 511: Live from my Riad in Marrakech (troyhunt.com)
29. Introducing Meerkat: an experiment in global consensus (blog.cloudflare.com)
30. Mypy 2.2 Released (mypy-lang.org)
31. How to publish to PyPI using GitHub Actions securely (snarky.ca)
32. Q1 2026 Innovation Graph update: Open source collaboration is accelerating worldwide (github.blog)
33. Get Ready For the Powerful CSS border-shape Property! (css-tricks.com)
34. Joy in learning computer science with Experience CS (www.raspberrypi.org)
35. Cloudflare proudly joins the UK government's Cyber Resilience Pledge (blog.cloudflare.com)
36. Cyber Shield: The path to an agentic AI future for cyber defence (www.ncsc.gov.uk)
37. Introducing the Cloud Challenge Book 2026 (technology.blog.gov.uk)
38. Getting Started with Anchor Positioning (www.joshwcomeau.com)
39. Your Worker can now have its own cache in front of it (blog.cloudflare.com)
40. Describing all my photos (alexwlchan.net)
41. AI has torched the market for junior programmers (seldo.com)
42. Moody Bible Institute - 2,303,416 breached accounts (haveibeenpwned.com)
43. I don’t want to repeat repeat myself (alexwlchan.net)
44. Swimming Pools, Pee, and Trying to Delete Your Data From the Internet (troyhunt.com)
45. Agentic test processes, LLM benchmarks, and other notes on agentic coding from Galapagos Island (danluu.com)
46. Process names: The forgotten Observability channel (theorangeone.net)
47. How GitHub used secret scanning to reach inbox zero (github.blog)
48. Connecting government and academia: Responsible AI Through Cloud Technology event (technology.blog.gov.uk)
49. Built for Mass Scale: Hard-Won Lessons from Teams Running High Volume Inference Workloads in Production (www.digitalocean.com)
50. Any Apple update can break our app. Here's how we find out first. (blog.sentry.io)
51. Meta’s AI Storage Blueprint at Scale (engineering.fb.com)
52. 6 security settings every GitHub maintainer should enable this week (github.blog)
53. DigitalOcean Evaluations: Production Model and Router Testing for the Inference Stack (www.digitalocean.com)
54. Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402 (blog.cloudflare.com)
55. Content Independence Day, one year on: building the business model for the agentic Internet (blog.cloudflare.com)
56. Making AI search smarter (blog.cloudflare.com)
57. Your site, your rules: new AI traffic options for all customers (blog.cloudflare.com)
58. Building more resilient CNI: what industry pen testers told us (www.ncsc.gov.uk)
59. Top 1 Million Analysis – June 2026: The State of Crypto (scotthelme.ghost.io)
60. Reading the agent traces is how you make the call your eval can't (blog.sentry.io)
61. Unmasking the crawls with Attribution Business Insights (blog.cloudflare.com)
62. Tails 7.9.1 (tails.net)
63. How GitHub maintains compliance for open source dependencies (github.blog)
64. MCP Beyond the Chat Window: Build Diagnostics in CI (devblogs.microsoft.com)
65. 10 Years of Meta’s Commitment to Python (engineering.fb.com)
66. Weekly Update 510: Live From Mallorca with Scott Helme (troyhunt.com)
67. What’s !important #14: Gap Decorations, random(), field sizing, and More (css-tricks.com)
    .NET 8 and .NET 9 will reach End of Support on November 10, 2026 (devblogs.microsoft.com)
    SkiaSharp 4.0 is here: announcing the first stable release (devblogs.microsoft.com)
    Highlights from Git 2.55 (github.blog)
    Packaging and Package Identity for .NET apps with WinApp CLI on Windows (devblogs.microsoft.com)
    WSL container is now available for public preview (devblogs.microsoft.com)
    Top 1 Million Analysis – June 2026: Ten Years of Web Security (scotthelme.ghost.io)
    The Shifting Line Between CSS States and JavaScript Events (css-tricks.com)
    GenPage: Towards End-to-End Generative Homepage Construction at Netflix (netflixtechblog.com)
    Next.js already traces your requests. Here's how to export them with OpenTelemetry. (blog.sentry.io)
    Rebuilding the computer room (alexwlchan.net)
    Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice? (snyk.io)
    Sysco - 2,691,852 breached accounts (haveibeenpwned.com)
    American Tower - 216,601 breached accounts (haveibeenpwned.com)
    Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study (engineering.fb.com)
    Run Codex in the cloud – DigitalOcean for Codex is now available (www.digitalocean.com)
    translateZ() (css-tricks.com)
    translateY() (css-tricks.com)
    translateX() (css-tricks.com)
    translate() (css-tricks.com)
    How we built saga rollbacks for Cloudflare Workflows (blog.cloudflare.com)
    Celebrating over 15,000 young creators at the Coolest Projects 2026 online showcase (www.raspberrypi.org)
    NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence (snyk.io)
    Why I wrote PEP 832 -- virtual environment discovery (snarky.ca)
    Resilience Patterns Can Make Your System Less Resilient (codeopinion.com)
    A dead CDN, a wildcard, and an attack waiting to happen: the netdna-ssl.com takeover (scotthelme.ghost.io)
    Madison Square Garden Sports - 9,796,738 breached accounts (haveibeenpwned.com)
    A Note to Our Customers and Partners (snyk.io)
    Unlocking the Cloudflare app ecosystem with OAuth for all (blog.cloudflare.com)
    Weekly Update 509 (troyhunt.com)
    The White House's post-quantum executive order is an important milestone. It’s time to get to work (blog.cloudflare.com)
    How Meta Engineered Ultra-Narrow Batteries for AI Glasses (engineering.fb.com)
    How to design and present clear computing lessons (www.raspberrypi.org)
    Announcing Agentic Development Security (ADS) (snyk.io)
    The New Security Control Point: Governing AI Agents Inside the Execution Loop (snyk.io)
    What nearly 10,000 developer environments reveal about agentic development risk (snyk.io)
    When a vendor's breach becomes yours: lessons from the Klue incident (snyk.io)
    Toward More Controllable AI Video Editing: An Early Research Exploration at Netflix (netflixtechblog.com)
    Every Choice Changes Everything: The Show (blog.codinghorror.com)
    How Netflix Simplified Batch Compute with Kueue (netflixtechblog.com)
    How we found a bug in the hyper HTTP library (blog.cloudflare.com)
    Adopting AV1 for Real-Time Communication (RTC) at Scale (engineering.fb.com)
    Why No Passkeys? Naming the Top Sites That Still Don't Support Them (scotthelme.ghost.io)
    Using Scroll-Driven Animations for Opposing Scroll Directions (css-tricks.com)
    The AI shift in cyber risk: why leaders must act now (www.ncsc.gov.uk)
    A developer toolkit to make your website agent-ready (developer.chrome.com)
    Modern CSS theming with light-dark(), contrast-color(), and style queries (una.im)
    What can wonky APIs tell us about the web? (alexwlchan.net)
    JCPenney - 368,418 breached accounts (haveibeenpwned.com)
    The Data Canary: How Netflix Validates Catalog Metadata (netflixtechblog.com)
    Data Projects: Managing Data Assets at Netflix Scale (netflixtechblog.com)
    Predicting Risk in Content Launches: How Data-Driven Insights can Transform Launch Planning (netflixtechblog.com)
    The Evolution of Cassandra Data Movement at Netflix (netflixtechblog.com)
    Thinking Fast & Slow for a Personalized Notification System (netflixtechblog.com)
    A Human-Augmenting Agentic Workflow for Causal Inference (netflixtechblog.com)
    From Silos to Service Topology: Why Netflix Built a Real-Time Service Map (netflixtechblog.com)
    An update on FortiBleed — what’s happening with victim orgs (doublepulsar.com)
    A First Look at Scroll-Triggered Animations (css-tricks.com)
    Temporary Cloudflare Accounts for AI agents (blog.cloudflare.com)
    There Are No Instances in atproto (overreacted.io)
    Ralph Lauren - 139,903 breached accounts (haveibeenpwned.com)
    Operation Endgame 4.0 - 4,160,519 breached accounts (haveibeenpwned.com)
    Build your own vulnerability harness (blog.cloudflare.com)
    Celebrating 12 years of Project Galileo (blog.cloudflare.com)
    Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways (www.ncsc.gov.uk)
    The 'vibe coding spectrum' approach to AI-assisted software development (www.ncsc.gov.uk)
    Unlock runtime insights: Introducing third-party developer tools for Chrome DevTools for agents (developer.chrome.com)
    The full Snyk AI Security Platform, free for open source maintainers (snyk.io)
    CFGI - 248,235 breached accounts (haveibeenpwned.com)
    Tails 7.9 (tails.net)
    Intelligent Terminal 0.1.1 is here: bash support, new slash commands, and more customization (devblogs.microsoft.com)
    Bringing more agent harnesses and frameworks to Cloudflare, starting with Flue (blog.cloudflare.com)
    AI-Powered MSBuild Investigation with the Microsoft Binlog MCP Server (devblogs.microsoft.com)
    Server-Side Tools Are Now Available for DigitalOcean Inference Engine (www.digitalocean.com)
    The Siren Song of ariaNotify() (css-tricks.com)
    Stop Blaming Event-Driven Architecture (codeopinion.com)
    FortiBleed — 75k Fortinet firewalls have admin passwords cracked (doublepulsar.com)
    Introducing the Cloudflare One stack: agent-powered deployment (blog.cloudflare.com)
    NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems (www.ncsc.gov.uk)
    What's New in WebGPU (Chrome 149-150) (developer.chrome.com)
    A Day in the Life of an AI Engineer in Snyk's Lisbon Office (snyk.io)
    A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope (snyk.io)
    Prop For That (css-tricks.com)
    Cloudflare DMARC Management is now generally available (blog.cloudflare.com)
    What students and teachers in England want from a computing curriculum (www.raspberrypi.org)
    June 2026 Stealer Logs - 56,278,397 breached accounts (haveibeenpwned.com)
    What’s !important #13: @function, alpha(), CSS Wordle, and More (css-tricks.com)
    The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students (scotthelme.ghost.io)
    Weekly Update 508 (troyhunt.com)
    Berkadia - 305,216 breached accounts (haveibeenpwned.com)
    Infinite Campus - 137,123 breached accounts (haveibeenpwned.com)
    The Government Just Banned an AI Model. An Engineer's Perspective. (snyk.io)
    When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams (snyk.io)
    Why Isn’t My 3D View Transition Working? (css-tricks.com)
    There’s no need to include ‘navigation’ in your navigation labels (css-tricks.com)
    Better, faster, less wrong: Enhancing issue grouping (blog.sentry.io)
    Young people’s computer programs get data from space (www.raspberrypi.org)
    Catch visual regressions with Snapshots, now in beta (blog.sentry.io)
    University of Nottingham - 454,635 breached accounts (haveibeenpwned.com)
    Join us for .NET Day on Agentic Modernization Livestream (devblogs.microsoft.com)
    The Inference Alpha: Maximizing Frontier Models on AMD (www.digitalocean.com)
    Solving the ‘God Object’ Problem with Shared Identity (codeopinion.com)
    Creating Memorable Web Experiences: A Modern CSS Toolkit (css-tricks.com)
    PowerToys 0.100 is here: new Shortcut Guide, Command Palette improvements and much more! (devblogs.microsoft.com)
    Weekly Update 507 (troyhunt.com)
    What We Learned Hiring 33 Engineers in Two Weeks (www.digitalocean.com)
    .NET 11 Preview 5 (github.com)
    .NET 11 Preview 5 is now available! (devblogs.microsoft.com)
    .NET and .NET Framework June 2026 servicing releases updates (devblogs.microsoft.com)
    Join the WebMCP origin trial (developer.chrome.com)
    .NET at Microsoft Build 2026: Must watch sessions (devblogs.microsoft.com)
    Open-Sourcing dbsc-php: a Server Library for Device Bound Session Credentials in PHP (scotthelme.ghost.io)
    Works on my machine: how we use AI to reproduce reported bugs (blog.sentry.io)
    Using the Screen Capture API to record a browser window (alexwlchan.net)
    Baker Distributing - 102,935 breached accounts (haveibeenpwned.com)
    DBSC Beta at Report URI (scotthelme.ghost.io)
    Errors, traces, logs, metrics: when to reach for what (blog.sentry.io)
    Using Pytester to test my Playwright fixtures (alexwlchan.net)
    BCD Travel - 396,313 breached accounts (haveibeenpwned.com)
    Firewalling Docker with nftables (theorangeone.net)
    Model Evaluations: Prove Your Routing Policy Actually Works (www.digitalocean.com)
    Software supply chain attacks: check your dependencies (www.ncsc.gov.uk)
    Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp (snyk.io)
    Type Level Security: The future of secure AI code generation? (snyk.io)
    So You Have an AI Security Budget. Now what? (snyk.io)
    Tails 7.8.1 (tails.net)
    DentaQuest - 2,553,599 breached accounts (haveibeenpwned.com)
    The Team Behind Deploy: Shipping AI, the DigitalOcean Way (www.digitalocean.com)
    Powering the Inference Era: Inside the DigitalOcean Data & Learning Layer (www.digitalocean.com)
    Lights Out, Systems On: Validating Instant Power Loss Readiness (engineering.fb.com)
    Support your young people with our AI literacy resources (www.raspberrypi.org)
    Seamless PWA origin migration: Change domains without losing users (developer.chrome.com)
    Chrome 150 beta (developer.chrome.com)
    Welcoming the Philippine Government to Have I Been Pwned (troyhunt.com)
    The New Security Risks of the Agentic Development Lifecycle (snyk.io)
    Modular Monolith Boundaries Done Wrong (codeopinion.com)
    Open by Design: How NVIDIA and DigitalOcean Are Building the Stack for the Always-On Agentic Era (www.digitalocean.com)
    Announcing Intelligent Terminal 0.1 (devblogs.microsoft.com)
    Device Bound Session Credentials: Making Stolen Cookies Useless (scotthelme.ghost.io)
    Building confidence to teach AI in the classroom (www.raspberrypi.org)
    What's new in DevTools (Chrome 149) (developer.chrome.com)
    New in Chrome 149 (developer.chrome.com)
    Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection (snyk.io)
    The Inference Tax: How Prefix-Aware Routing Eliminates the Hidden Cost of LLMs at Scale (www.digitalocean.com)
    DigitalOcean Serverless Inference: A Deep Dive (www.digitalocean.com)
    1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever (troyhunt.com)
    Edmunds - 177,860 breached accounts (haveibeenpwned.com)
    Weekly Update 506 (troyhunt.com)
    Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages (snyk.io)
    Atlas Menu - 63,926 breached accounts (haveibeenpwned.com)
    AI Disruptors: How the Next Generation of Business is Being Built (www.digitalocean.com)
    Rendering a chat thread in CSS and JavaScript (alexwlchan.net)
    New to the web platform in May (web.dev)
    Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI (snyk.io)
    How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development (snyk.io)
    OpenCode Now Supports DigitalOcean Inference Router for Intelligent Model Routing (www.digitalocean.com)
    Charter - 4,851,517 breached accounts (haveibeenpwned.com)
    Microsoft’s stance on zero day exploits is a dumpster fire of their own making (doublepulsar.com)
    Can AI support creativity? What educators can learn from creative machine learning (www.raspberrypi.org)
    How we cut build times by two-thirds by deleting our CMS (blog.sentry.io)
    Kemper - 269,299 breached accounts (haveibeenpwned.com)
    Scalable, Cost-Efficient AI: Introducing Unified Batch Inference on DigitalOcean (www.digitalocean.com)
    Stop Joining Tables In Your “Modular” Monolith (codeopinion.com)
    Adopting open-source in local government  (technology.blog.gov.uk)
    Designing secure access with ZTNA (www.ncsc.gov.uk)
    April 2026 Baseline monthly digest (web.dev)
    Mytheresa - 84,108 breached accounts (haveibeenpwned.com)
    Continuous Offensive Security: The Line We've Been Walking (snyk.io)
    You don’t need to pick one: how Sentry and OpenTelemetry work together (blog.sentry.io)
    SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems (engineering.fb.com)
    Your agent can't fix what it can't see (blog.sentry.io)
    CSS vs. JavaScript (www.joshwcomeau.com)
    Build new features using built-in AI in Chrome (developer.chrome.com)
    Welcoming the Bhutanese Government to Have I Been Pwned (troyhunt.com)
    Weekly Update 505 (troyhunt.com)
    Laravel Lang Supply Chain Advisory (snyk.io)
    Request-Based Autoscaling Is Now Generally Available on App Platform (www.digitalocean.com)
    What's new in web extensions: I/O 2026 recap (developer.chrome.com)
    Snyk announces Anthropic updates: Evo integrates with Claude Enterprise, and Snyk Desk comes to Claude Desktop (snyk.io)
    Passkeys, Permissions Policy and Bug Hunting in 1Password's WebAuthn Wrapper (scotthelme.ghost.io)
    The product analytics you already have (blog.sentry.io)
    Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future (snyk.io)
    Tails 7.8 (tails.net)
    Scaling Software Architecture Without Overengineering (codeopinion.com)
    How We Built DigitalOcean Inference Router (www.digitalocean.com)
    Open-Sourcing passkeys-php: A Security-Focused WebAuthn Library for PHP (scotthelme.ghost.io)
    A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office (snyk.io)
    The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised (snyk.io)
    XSS Is Deadly for Passkeys: The Hidden Risk of Attestation None (scotthelme.ghost.io)
    Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account (snyk.io)
    Passkeys 101: An Introduction to Passkeys and How They Work (scotthelme.ghost.io)
    Weekly Update 504 (troyhunt.com)
    Engineering Rigor in the AI Age: Building a Benchmark You Can Trust (eileencodes.com)
    Anatomy of a WooCommerce Skimmer: A Technical Deep-Dive (scotthelme.ghost.io)
    Thinking carefully before adopting agentic AI (www.ncsc.gov.uk)
    Malicious node-ipc versions published to npm in suspected maintainer account compromise (snyk.io)
    New ways to agentically build and edit dashboards (blog.sentry.io)
    Waiting for website changes in the browser (alexwlchan.net)
    Welcoming the Bahamian Government to Have I Been Pwned (troyhunt.com)
    PyCon US 2026 (devblogs.microsoft.com)
    Your Model Doesn't Matter. Your Infrastructure Does. (www.digitalocean.com)
    Reel Friends: Building Social Discovery that Scales to Billions (engineering.fb.com)
    A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens (googleprojectzero.blogspot.com)
    .NET 11 Preview 4 (github.com)
    Migrating Data Ingestion Systems at Meta Scale (engineering.fb.com)
    Why Sagas Feel Broken (codeopinion.com)
    Tails 7.7.3 (tails.net)
    Welcoming the Bangladesh Government to Have I Been Pwned (troyhunt.com)
    Mypy 2.1 Released (mypy-lang.org)