News

1. .NET 11 Release Candidate 2 (github.com)
2. Announcing .NET 11 Release Candidate 2 (devblogs.microsoft.com)
3. Gemini 4 Argon in GitHub Copilot (github.blog)
4. Audit GitHub Code Quality finding dismissals and reopenings (github.blog)
5. GitHub’s model for secret detection: Finding more secrets with less noise (github.blog)
6. Inside Action Gateway in Managed Agents (www.digitalocean.com)
7. Under the hood, off the hot path: How D1 scales to millions of databases (blog.cloudflare.com)
8. Secret scanning blocks Anthropic keys by default, adds Salesforce (github.blog)
9. Meta’s Generative Ads Model (GEM): Scaling the Central Model and Compute Engine for Frontier Ads AI (engineering.fb.com)
10. Rewinding the exponential: How we keep hardware usage down (blog.cloudflare.com)
11. Enterprise managed settings enforcement updates (github.blog)
12. Improved detection for withdrawn Dependabot alerts (github.blog)
13. DigitalOcean Inference Router Enhancements: Performance Tuned Routing, No Rules to Write (www.digitalocean.com)
14. Search and filter for budgets now available (github.blog)
15. Code scanning AI Scan metrics in security overview (github.blog)
16. Weekly Update 525: AI Data Breach Hyperbole (troyhunt.com)
17. Organising my cross-stitch patterns (alexwlchan.net)
18. Sharecare - 318,185 breached accounts (haveibeenpwned.com)
19. Client telemetry user attribution and configurable capture (github.blog)
20. OCP Summit 2026: Powering AI with Open Innovations in Scale-Up, Scale-Out, and Scale-Across Networks (engineering.fb.com)
21. .NET and .NET Framework October 2026 servicing releases updates (devblogs.microsoft.com)
22. GitHub Copilot app for Beginners: How to teach Copilot about your codebase (github.blog)
23. Push attribution for commits in limited public preview (github.blog)
24. Durable Task in the Real World: What Problems Does It Actually Solve? (devblogs.microsoft.com)
25. Shipping Media Over QUIC at Meta Scale for Instagram Live Ingest (engineering.fb.com)
26. Turning Opportunistic AI Inference Capacity Into Better Ads Recommendations (engineering.fb.com)
27. Filter, reshape, and redact logs before export with Transformers (blog.cloudflare.com)
28. Anonymous organization-level registries for Dependabot (github.blog)
29. Introducing DigitalOcean Agent Data Services: The Data Foundation for Agents (www.digitalocean.com)
30. Introducing DigitalOcean Signals and Simulations: see how your agents and models really behave in production, then test the fix before it ships (www.digitalocean.com)
31. Introducing DigitalOcean Insights: Built-in Observability for Your Agents, Applications, and Infrastructure (www.digitalocean.com)
32. Help the NCSC understand how organisations approach external attack surface risk (www.ncsc.gov.uk)
33. Engineering quality into digital services  (technology.blog.gov.uk)
34. DigitalOcean MicroVMs: Fast, isolated compute for your AI agent infrastructure (www.digitalocean.com)
35. Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash (blog.cloudflare.com)
36. Hack the World: Why hackathons are still the best place to learn to build (github.blog)
37. Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects (blog.cloudflare.com)
38. Deno is joining Cloudflare (blog.cloudflare.com)
39. The First Reduction in Their History: 64-Day Let's Encrypt Certificates (scotthelme.co.uk)
40. Neogen - 435,963 breached accounts (haveibeenpwned.com)
41. Sentry JavaScript SDK v11 adds tracing for all JS platforms (blog.sentry.io)
42. How one bug bounty researcher chooses the features they investigate (github.blog)
43. Bridging technical depth and usability: The story behind Radar’s redesign (blog.cloudflare.com)
44. China-linked malicious actors called out by UK and international partners for targeting sensitive data globally (www.ncsc.gov.uk)
45. Reducing Android scope-sync overhead in Sentry Flutter (blog.sentry.io)
46. CyrusOne - 373,460 breached accounts (haveibeenpwned.com)
47. Secret protection must scale with software (github.blog)
48. CRUD vs Task Driven: Are You Losing User Intent? (codeopinion.com)
49. Building an evidence-grounded agentic security operations harness on Cloudflare (blog.cloudflare.com)
50. Account Control, Every Layer: From Your Organization to Every Session (www.digitalocean.com)
51. What's New in WebGPU (Chrome 155-156) (developer.chrome.com)
52. Double Counter - 274,922 breached accounts (haveibeenpwned.com)
53. Frontier models found the vulnerabilities. Only the attacker found the chains. (snyk.io)
54. Angel One - 6,765,054 breached accounts (haveibeenpwned.com)
55. Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed. (snyk.io)
56. 64-Day Certificate Lifetimes Coming Feb 2027 (letsencrypt.org)
57. Building Git infrastructure for agent-scale development (github.blog)
58. The keys to the Internet change on October 11. Are you ready? (blog.cloudflare.com)
59. A faster, lighter C# Dev Kit (devblogs.microsoft.com)
60. NTS: Authenticated Time at Meta (engineering.fb.com)
61. Incident affecting ASOS customers (www.ncsc.gov.uk)
62. Unreal MCP now speaks Sentry (blog.sentry.io)
63. How classroom challenges can change how students see computing (www.raspberrypi.org)
64. How to fix a bug in a fix (googleprojectzero.blogspot.com)
65. Shipping JPEG XL in Chrome (developer.chrome.com)
66. UWP and WinUI 3 apps: UI testing with MSTest (devblogs.microsoft.com)
67. ReviewBench: An open benchmark for AI code review (github.blog)
68. Everything we launched during Birthday Week 2026 (blog.cloudflare.com)
69. One year later: the power of 1.1.1.1 interns (blog.cloudflare.com)
70. Email verification updates, October 2026 (developer.chrome.com)
71. Weekly Update 524: Live From Copenhagen (troyhunt.com)
72. 8 major updates to Cloudflare Observability (blog.cloudflare.com)
73. Streamline: custom video pipelines with Cloudflare Stream and Workers (blog.cloudflare.com)
74. AI is changing developer work. Here are three skills to strengthen. (github.blog)
75. Introducing Web Search API via AI Gateway (blog.cloudflare.com)
76. Introducing Cloudflare Traces: follow requests through our entire platform (blog.cloudflare.com)
77. Updates on our pledge to make Cloudflare features accessible to everyone (blog.cloudflare.com)
78. Announcing Cloudflare OHTTP Gateway – expanding access to Cloudflare’s privacy-preserving infrastructure (blog.cloudflare.com)
79. Follow the thread: a new dashboard to investigate account abuse (blog.cloudflare.com)
80. Protected Quick Tunnels: simple accountless authentication for your next dev project (blog.cloudflare.com)
81. Building for good: How civil society organizations are automating on Cloudflare (blog.cloudflare.com)
82. New to the web platform in September (web.dev)
83. Seer, the Sentry MCP and CLI, or your own coding agent: where each one fits (blog.sentry.io)
84. Mypy 2.4 Released (mypy-lang.org)
85. ShopGym: Realistic, reproducible sandboxes for shopping agents (shopify.engineering)
86. 10 technical talks I’m excited about at GitHub Universe 2026 (github.blog)
87. Assembling architects to improve local public services  (technology.blog.gov.uk)
88. Not all explanations are equal: Social Explainable AI and Critical Computational Literacy (www.raspberrypi.org)
89. Introducing Agent Droplets: everything an agent needs, one price, one bill (www.digitalocean.com)
90. Get Tech Certified 2026: build your technology and digital skills for free  (technology.blog.gov.uk)
91. Why AI Coding Agents Keep Writing Broken Access Control (snyk.io)
92. DigitalOcean MicroVMs: the Compute foundation for building your AI agent infrastructure (private preview) (www.digitalocean.com)
93. Medela - 423,947 breached accounts (haveibeenpwned.com)
94. How Etsy gets its mobile apps ready for peak traffic (blog.sentry.io)
95. Chrome 156 beta (developer.chrome.com)
96. What Is Agentic AppSec? (snyk.io)
97. Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control (snyk.io)
98. WSLC Architecture deep dive (devblogs.microsoft.com)
99. Developer policy update: Transparency, state policy, and what’s ahead (github.blog)
100. Big improvements to Seer Agent (blog.sentry.io)
101. HTML-in-Canvas updates: Iterating toward a better Web API (developer.chrome.com)
102. Torchbox Autumn Event 2026 A/V (theorangeone.net)
103. Build Agentic UI with the new Blazor AI components (devblogs.microsoft.com)
104. Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway (www.ncsc.gov.uk)
105. Encouraging learners to think first, prompt second: Using large language models to learn (www.raspberrypi.org)
106. How DigitalOcean Manages Credentials for Autonomous Agents (www.digitalocean.com)
107. Weekly Update 523: Live From a Norwegian Fjord (troyhunt.com)
108. August 2026 Baseline monthly digest (web.dev)
109. Parametrised tests in Rust with named parameters (alexwlchan.net)
110. If we do not stop to help each other, what do we become? (blog.codinghorror.com)
111. The agent-first cloud: why we built Managed Agents (www.digitalocean.com)
112. AG-UI Protocol now has a first-class .NET SDK (devblogs.microsoft.com)
113. Trading a Cloud Identity for Your Own: Workload Attestation on Managed Compute (netflixtechblog.com)
114. GDS Local: helping local government buy and use tech better (technology.blog.gov.uk)
115. Multi-Tenant Best Practices Can Backfire (codeopinion.com)
116. Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface (snyk.io)
117. Bringing Private Processing to Meta AI Glasses (engineering.fb.com)
118. Measuring the back/forward cache with Application Metrics (blog.sentry.io)
119. You Own the Outcome: Product Engineering in the Age of AI (kentcdodds.com)
120. Microsoft is updating its author-signing certificate starting September 23, 2026 (devblogs.microsoft.com)
121. “We can figure it out”: How one Minnesota teacher uses Experience CS to set the tone for her whole year (www.raspberrypi.org)
122. Connection allowlists: Secure your web application's network access (developer.chrome.com)
123. Weekly Update 522: Live From Oslo with Scott Helme (troyhunt.com)
124. Creating a memory dump in C# (devblogs.microsoft.com)
125. Introducing DigitalOcean Managed Agents: One AI-native stack to power your intelligence (www.digitalocean.com)
126. Join our new UK study on teaching AI ethics and sustainability in lower secondary school (www.raspberrypi.org)
127. LimeLeads - 17,838,396 breached accounts (haveibeenpwned.com)
128. New in Chrome 154 (developer.chrome.com)
129. New in DevTools - October 2026 (developer.chrome.com)
130. So I asked my agent instead… (snyk.io)
131. Helix: The internal tool powering our Shopify app's native migration (shopify.engineering)
132. Open-Sourcing Rebalancer: A Generic, High-Performance Library for Solving Assignment Problems (engineering.fb.com)
133. Burger King Russia - 3,155,792 breached accounts (haveibeenpwned.com)
134. Inside Petal: Building the World’s First Petabit-Class Transoceanic Subsea Cable (engineering.fb.com)
135. One does not simply defend agentically (www.ncsc.gov.uk)
136. Building Sentry's Laravel AI Integration (blog.sentry.io)
137. Windows Exploitation Techniques: Dangling COM Object Registrations (googleprojectzero.blogspot.com)
138. Leave the Class Path in the Rearview Mirror (netflixtechblog.com)
139. Find features to support for Interop 2027 with your coding agent (web.dev)
140. There's no point at which turning your brain off will work (danluu.com)
141. How I Vibed a Proof of Conway’s Conjecture (overreacted.io)
142. The Next Step for Mission-Critical Workloads: Managed Databases Advanced Edition (www.digitalocean.com)
143. Adversary simulation: what you need to know (www.ncsc.gov.uk)
144. Cyber Adversary Simulation (CyAS): scheme documents now available (www.ncsc.gov.uk)
145. Building a Dashboard for my Fridge (theorangeone.net)
146. How We Built a Data Warehouse Using ClickHouse (letsencrypt.org)
147. Build Your Own AI Agent Harness in C#, the MafClaw Live Series (devblogs.microsoft.com)
148. Enhance multitasking extensions with the new Tabs Split View API (developer.chrome.com)
149. Chrome 155 beta (developer.chrome.com)
150. Avoid API Breaking Changes (codeopinion.com)
151. Bring AI literacy into every classroom with our new themed resources (www.raspberrypi.org)
152. UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists (www.ncsc.gov.uk)
153. Iranian cyber targeting of dissidents, activists and journalists (www.ncsc.gov.uk)
154. Abusing ID3 chapters to turn videos into glanceable podcasts (alexwlchan.net)
155. The AI Hurricane Is Here (snyk.io)
156. Intelligence is yours. Let's keep it that way. (www.digitalocean.com)
157. Intelligent Terminal 0.2.2572: Faster, Smoother, and More Reliable (devblogs.microsoft.com)
158. Launching Astro Pi 2026/27: Code your way to the International Space Station (www.raspberrypi.org)
159. We are all Product Engineers now (seldo.com)
160. Chess.com (2026) - 4,653,212 breached accounts (haveibeenpwned.com)
161. Nobody pays for open source. We can force them to. (seldo.com)
162. Weekly Update 521: Breach Perception v. Reality (troyhunt.com)
163. Debugging our AI search assistant with agent tracing (blog.sentry.io)
164. Migrating Shop app from React Native to native (shopify.engineering)
165. Native is now the future of mobile at Shopify (shopify.engineering)
166. McKesson - 6,404,340 breached accounts (haveibeenpwned.com)
167. Is prevention essentially a solved problem? (snyk.io)
168. Home Hardware, Part 2: Width Matters (blog.jessfraz.com)
169. Built for agents: Omarchy's pipeline moves to DigitalOcean (www.digitalocean.com)
170. .NET 11 Release Candidate 1 (github.com)
171. Join the UK Bebras Challenge 2026 (www.raspberrypi.org)
172. Testing race conditions with memory access tracing and stack-based delay injection (googleprojectzero.blogspot.com)
173. Home Hardware, Part 1: My Control4 Revenge Arc (blog.jessfraz.com)
174. Introducing Kody: Your Personal Software Factory (kentcdodds.com)
175. Experience AI evolves with flexible resources for every classroom (www.raspberrypi.org)
176. The hidden risks of shadow AI (www.ncsc.gov.uk)
177. No Hacking Required: The Manchester Airports Group Data Breach (scotthelme.co.uk)
178. How well do agents use test and verification techniques? (danluu.com)
179. Weekly Update 520: The Unscripted Edition (troyhunt.com)
180. Domain Events Are NOT Your Public API (codeopinion.com)
181. ZGateway: Learnings from Putting a Proxy in Front of ZippyDB (engineering.fb.com)
182. The book is done! (ericlippert.com)
183. Submit your proposals for Interop 2027 (web.dev)
184. How River takes security work from a fix to merge (shopify.engineering)
185. Manchester Airports Group - 8,849,657 breached accounts (haveibeenpwned.com)
186. Weekly Update 519: Breaches & Data Integrity (troyhunt.com)
187. Application Metrics caught my broken size estimator (blog.sentry.io)
188. Questel - 1,226,209 breached accounts (haveibeenpwned.com)
189. Ed Zitron's AI prediction track record (danluu.com)
190. Let’s Use the Emergent CSS random() Function in all the Browsers (css-tricks.com)
191. What’s !important #18: , Syntax ::highlight()ing, named-feature(), and More (css-tricks.com)
192. You Can't "Vibe Code" Love (blog.codinghorror.com)
193. Bug blindness (danluu.com)
194. MAPS: Netflix’s Multimodal Asset Personalization at Scale (netflixtechblog.com)
195. From one switch to a control panel: meet `dataCollection` (blog.sentry.io)
196. Lightweight architecture for learning at pace  (technology.blog.gov.uk)
197. New to the web platform in August (web.dev)
198. Debugging my new network, when 10 Gigabit Ethernet Runs at 300 Megabits (hanselman.com)
199. Creating Web Widgets Using the Document Picture-in-Picture API (css-tricks.com)
200. Disruptive cyber activity highlights risk from internet-exposed systems and edge devices (www.ncsc.gov.uk)
201. animation-trigger (css-tricks.com)
202. How to evaluate session replay software: a developer's guide (blog.sentry.io)
203. Why Your AI Application Is Exposed (Even When Your Scans Come Back Clean) (snyk.io)
204. Introducing v5 Droplets: next-generation performance, sized to your workload (www.digitalocean.com)
205. A Cautionary Tale About Data Breach Claims, Verification and Carhartt (troyhunt.com)
206. Carhartt - 12,933,413 breached accounts (haveibeenpwned.com)
207. Private Preview: DigitalOcean Managed Agents Runtime Services (www.digitalocean.com)
208. MicroLighter: Syntax Highlighter (css-tricks.com)
209. PowerToys 0.101 is here: Window Hopper, Insider updates, and Command Palette compact mode (devblogs.microsoft.com)
210. Supporting a technical AI-focused qualification for young people in England (www.raspberrypi.org)
211. Patching at Fleet Scale, Twice: How DigitalOcean Closed Januscape and the AMD Safe RET Issue Without Customer Impact (www.digitalocean.com)
212. WordPress PHP-Only Block Registration (css-tricks.com)
213. The ultimate road trip combo: Starlink Mini + UniFi Travel Router (scotthelme.co.uk)
214. Weekly Update 518: IoT Doorlock Nirvana with UniFi (troyhunt.com)
215. NIUS - 6,090 breached accounts (haveibeenpwned.com)
216. Migrating a Synology NAS to a UniFi UNAS Pro 8 with Robocopy, SMB Multichannel, and Surprising Performance Traps (hanselman.com)
217. Welcoming the Sri Lankan Government to Have I Been Pwned (troyhunt.com)
218. Golf Canada - 568,972 breached accounts (haveibeenpwned.com)
219. A Tale of Two Flink Autoscalers (netflixtechblog.com)
220. Resolved: CSS Class Prefix Selector (css-tricks.com)
221. Introducing dbsc.dev: Does Your Browser Support DBSC? (scotthelme.co.uk)
222. There's no reason for software to be slow anymore (danluu.com)
223. DigitalOcean Inference Router, Now Cache-Aware: Why the Cheapest Model Isn't Always the Best Deal (www.digitalocean.com)
224. Managing the cyber risk of agentic AI (www.ncsc.gov.uk)
225. Why can’t you combine .tar.gz files with cat? (alexwlchan.net)
226. Event Driven Architecture and Coupling: You’re Not as Decoupled as You Think (codeopinion.com)
227. CSS Navigation Matching, Early Days (css-tricks.com)
228. Gisting: Compressing LLM Agent context to ↑ throughput and ↓ cost (shopify.engineering)
229. WordPress.com Student Plan (css-tricks.com)
230. Oz Hair and Beauty - 1,988,331 breached accounts (haveibeenpwned.com)
231. Fanlore - 144,520 breached accounts (haveibeenpwned.com)
232. Remediation Agents, Demystified: Why Fixing Beats Finding (snyk.io)
233. Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14% (snyk.io)
234. Weekly Update 517: Cyber Ransoms (troyhunt.com)
235. Dark mode toggles: two states are enough (css-tricks.com)
236. The benchmarkpocalypse (danluu.com)
237. What's missing to have reproducible builds on PyPI (snarky.ca)