News

1. GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens (github.blog)
2. Pylance + Pyrefly: bring your preferred type checker to Visual Studio Code (devblogs.microsoft.com)
3. The bridge to agent-scale Git infrastructure (github.blog)
4. Product Security in the Post-AI Era (www.digitalocean.com)
5. Introducing full transaction detection for Cloudflare WAF (blog.cloudflare.com)
6. Cloudflare deploys protections against php2shell vulnerability (blog.cloudflare.com)
7. How Commerce.com and Cloudflare are getting storefronts ready for AI agents (blog.cloudflare.com)
8. Critical security issue affecting PHP (www.ncsc.gov.uk)
9. PowerToys 0.102 is here: new mouse utilities, Command Palette improvements and much more (devblogs.microsoft.com)
10. Preparing young people for frontier technologies: Our new partnership with the UK government (www.raspberrypi.org)
11. We just gave a million dollars to Open Source maintainers (blog.sentry.io)
12. AI Model Risk Depends on What the Model Can Reach (snyk.io)
13. How Shopify turns open models into task experts (shopify.engineering)
14. AI Is Calling In Every Risk You've Accepted: Seven Insights From The AI Security Panel: Unfiltered (snyk.io)
15. 8 eMudhra certificates are compromised. Here's what you need to know (blog.cloudflare.com)
16. 5 Event Driven Architecture Problems (And How to Avoid Them) (codeopinion.com)
17. Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds (scotthelme.co.uk)
18. Bulk migrate branch protections to rulesets for a repository (github.blog)
19. Updates to GitHub secret scanning (github.blog)
20. Dependabot alerts REST API now includes dependency versions (github.blog)
21. GitHub package firewall in public preview (github.blog)
22. How 3 Java Champions are using GitHub Copilot for increased productivity (github.blog)
23. Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4 (github.blog)
24. Cross-store product clustering across millions of stores (shopify.engineering)
25. The Future of CSS ✨ (www.joshwcomeau.com)
26. Introducing tsrs: A port of TypeScript to Rust (blog.cloudflare.com)
27. The next Chair of the Board of Trustees, Blythe Masters (www.raspberrypi.org)
28. Introducing a new AI chapter in the NCSC research problem book (www.ncsc.gov.uk)
29. Assurance Retraite - 70,372 breached accounts (haveibeenpwned.com)
30. The Sentry Android SDK is now 20-30% faster! (blog.sentry.io)
31. Building Overexposed: understanding application exposure (shopify.engineering)
32. Copilot model policy API for enterprise, orgs, and teams (github.blog)
33. GitHub Copilot models deprecated on October 19, 2026 (github.blog)
34. Cutting our inference bill by 68% by being obsessive about optimization (blog.cloudflare.com)
35. How to continue a GitHub Copilot app session in VS Code (github.blog)
36. Introducing Clairic, a new System One class of extraction models (blog.cloudflare.com)
37. Get Your .NET MAUI App Ready for Xcode 27 (devblogs.microsoft.com)
38. GenRecs Tokenization: Transforming Ads Recommendation at Meta with Stable Model Vocabulary (engineering.fb.com)
39. Bring Your Own Model to the GitHub Copilot SDK with C# (devblogs.microsoft.com)
40. The Thin Orchestrator: How We Made Our AI Agents More Reliable by Giving the Router Less to Do (engineering.fb.com)
41. Inside Prometheus: Meta’s Journey to a Gigawatt-Scale Supercluster (engineering.fb.com)
42. Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities (blog.cloudflare.com)
43. Some Git over HTTPS may temporarily require authentication (github.blog)
44. CodeQL changes for macOS 27, Xcode 27, and Swift 6.4 (github.blog)
45. Weekly Update 526: Building HIBP AI/SI First (troyhunt.com)
46. Gîtes de France - 117,574 breached accounts (haveibeenpwned.com)
47. Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix Scale (netflixtechblog.com)
48. Rebuilding 13 Years of Blog Posts as a Static Site with GitHub Copilot CLI (montemagno.com)
49. Continuous accountability for Verified bots (blog.cloudflare.com)
50. The next developer interface is ambient intelligence (github.blog)
51. How Meta Built Forum With AI-Native Engineering (engineering.fb.com)
52. 2026 World Cup: Breaking Records, Spiky Charts and Reliability at Scale (engineering.fb.com)
53. Staying Evergreen: How we automated secure access and repo hygiene in a shared org (github.blog)
54. A fully programmable secure web gateway (blog.cloudflare.com)
55. Introducing dotnetup: A toolchain manager for .NET (devblogs.microsoft.com)
56. Building a computer that can pause and resume in milliseconds: Inside the MicroVM architecture behind Managed Agents (www.digitalocean.com)
57. Sapienz Receives ISSTA 2026 Impact Paper Award (engineering.fb.com)
58. From musical fruit to walking robots: Coolest Projects India returns to Hyderabad (www.raspberrypi.org)
59. Deploy with Void (blog.cloudflare.com)
60. Cloudflare and OpenAI: Making AI discovery better for everyone (blog.cloudflare.com)
61. Post-quantum updates to our TLS guidance (www.ncsc.gov.uk)
62. Using TLS to protect data (www.ncsc.gov.uk)
63. VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build? (snyk.io)
64. Introducing Evo Agentic AppSec: Security That Keeps Up With AI Development (snyk.io)
65. Yandex outage: Data shows that instead of going dark, malicious bots went on the move (blog.cloudflare.com)
66. Integrating Netflix’s Foundation Model into Personalization applications (netflixtechblog.com)
67. GitHub availability report: September 2026 (github.blog)
68. DataJunction as Netflix’s answer to the missing piece of the modern data stack (netflixtechblog.com)
69. Measuring the Impact of Personalized Recommendations (netflixtechblog.com)
70. TimeSeries Tiered Storage Journey: Kafka/Flink Streams to Native Cassandra Cold Reads (netflixtechblog.com)
71. Behind the Scenes: Evolving Netflix’s Ads Event Pipeline for Live — Part II (netflixtechblog.com)
72. Netflix Conductor: The Next Chapter (netflixtechblog.com)
73. Running Apache Spark experiments in my sleep (and on a plane) (netflixtechblog.com)
74. The Lifecycle of LLM-as-a-Judge: Building, Aligning, and Monitoring at scale (netflixtechblog.com)
75. Netflix Stratum Media Processing: Automated Container Right-Sizing (netflixtechblog.com)
76. From 2,500 requests to 24: Rebuilding star history without the stargazers (github.blog)
77. Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug (blog.cloudflare.com)
78. Passkeys Are Not a Trap (scotthelme.co.uk)
79. Sentry's Flutter SDK 10.0: Streaming Traces and More Accurate Crash-Free Rates (blog.sentry.io)
80. Using AI to analyse legacy systems faster: what our pilots revealed  (technology.blog.gov.uk)
81. Crunchbase - 559,908 breached accounts (haveibeenpwned.com)
82. The Operating System Preference Is Dead (den.dev)
83. .NET 11 Release Candidate 2 (github.com)
84. Announcing .NET 11 Release Candidate 2 (devblogs.microsoft.com)
85. GitHub’s model for secret detection: Finding more secrets with less noise (github.blog)
86. Inside Action Gateway in Managed Agents (www.digitalocean.com)
87. Under the hood, off the hot path: How D1 scales to millions of databases (blog.cloudflare.com)
88. Meta’s Generative Ads Model (GEM): Scaling the Central Model and Compute Engine for Frontier Ads AI (engineering.fb.com)
89. Rewinding the exponential: How we keep hardware usage down (blog.cloudflare.com)
90. DigitalOcean Inference Router Enhancements: Performance Tuned Routing, No Rules to Write (www.digitalocean.com)
91. Weekly Update 525: AI Data Breach Hyperbole (troyhunt.com)
92. Organising my cross-stitch patterns (alexwlchan.net)
93. Sharecare - 318,185 breached accounts (haveibeenpwned.com)
94. OCP Summit 2026: Powering AI with Open Innovations in Scale-Up, Scale-Out, and Scale-Across Networks (engineering.fb.com)
95. .NET and .NET Framework October 2026 servicing releases updates (devblogs.microsoft.com)
96. GitHub Copilot app for Beginners: How to teach Copilot about your codebase (github.blog)
97. Durable Task in the Real World: What Problems Does It Actually Solve? (devblogs.microsoft.com)
98. Shipping Media Over QUIC at Meta Scale for Instagram Live Ingest (engineering.fb.com)
99. Filter, reshape, and redact logs before export with Transformers (blog.cloudflare.com)
100. Introducing DigitalOcean Agent Data Services: The Data Foundation for Agents (www.digitalocean.com)
101. Introducing DigitalOcean Insights: Built-in Observability for Your Agents, Applications, and Infrastructure (www.digitalocean.com)
102. Introducing DigitalOcean Signals and Simulations: see how your agents and models really behave in production, then test the fix before it ships (www.digitalocean.com)
103. Help the NCSC understand how organisations approach external attack surface risk (www.ncsc.gov.uk)
104. Engineering quality into digital services  (technology.blog.gov.uk)
105. DigitalOcean MicroVMs: Fast, isolated compute for your AI agent infrastructure (www.digitalocean.com)
106. Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash (blog.cloudflare.com)
107. Hack the World: Why hackathons are still the best place to learn to build (github.blog)
108. Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects (blog.cloudflare.com)
109. Deno is joining Cloudflare (blog.cloudflare.com)
110. The First Reduction in Their History: 64-Day Let's Encrypt Certificates (scotthelme.co.uk)
111. Neogen - 435,963 breached accounts (haveibeenpwned.com)
112. Sentry JavaScript SDK v11 adds tracing for all JS platforms (blog.sentry.io)
113. China-linked malicious actors called out by UK and international partners for targeting sensitive data globally (www.ncsc.gov.uk)
114. Reducing Android scope-sync overhead in Sentry Flutter (blog.sentry.io)
115. CyrusOne - 373,460 breached accounts (haveibeenpwned.com)
116. CRUD vs Task Driven: Are You Losing User Intent? (codeopinion.com)
117. Account Control, Every Layer: From Your Organization to Every Session (www.digitalocean.com)
118. What's New in WebGPU (Chrome 155-156) (developer.chrome.com)
119. Double Counter - 274,922 breached accounts (haveibeenpwned.com)
120. Frontier models found the vulnerabilities. Only the attacker found the chains. (snyk.io)
121. Angel One - 6,765,054 breached accounts (haveibeenpwned.com)
122. Autonomous Attacks Are Already Here. The Defense Has to Match Their Speed. (snyk.io)
123. A faster, lighter C# Dev Kit (devblogs.microsoft.com)
124. Incident affecting ASOS customers (www.ncsc.gov.uk)
125. Unreal MCP now speaks Sentry (blog.sentry.io)
126. How classroom challenges can change how students see computing (www.raspberrypi.org)
127. How to fix a bug in a fix (googleprojectzero.blogspot.com)
128. Shipping JPEG XL in Chrome (developer.chrome.com)
129. UWP and WinUI 3 apps: UI testing with MSTest (devblogs.microsoft.com)
130. Email verification updates, October 2026 (developer.chrome.com)
131. Weekly Update 524: Live From Copenhagen (troyhunt.com)
132. New to the web platform in September (web.dev)
133. Seer, the Sentry MCP and CLI, or your own coding agent: where each one fits (blog.sentry.io)
134. Mypy 2.4 Released (mypy-lang.org)
135. ShopGym: Realistic, reproducible sandboxes for shopping agents (shopify.engineering)
136. Assembling architects to improve local public services  (technology.blog.gov.uk)
137. Not all explanations are equal: Social Explainable AI and Critical Computational Literacy (www.raspberrypi.org)
138. Introducing Agent Droplets: everything an agent needs, one price, one bill (www.digitalocean.com)
139. Get Tech Certified 2026: build your technology and digital skills for free  (technology.blog.gov.uk)
140. Why AI Coding Agents Keep Writing Broken Access Control (snyk.io)
141. DigitalOcean MicroVMs: the Compute foundation for building your AI agent infrastructure (private preview) (www.digitalocean.com)
142. Medela - 423,947 breached accounts (haveibeenpwned.com)
143. How Etsy gets its mobile apps ready for peak traffic (blog.sentry.io)
144. Chrome 156 beta (developer.chrome.com)
145. What Is Agentic AppSec? (snyk.io)
146. Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control (snyk.io)
147. WSLC Architecture deep dive (devblogs.microsoft.com)
148. Big improvements to Seer Agent (blog.sentry.io)
149. HTML-in-Canvas updates: Iterating toward a better Web API (developer.chrome.com)
150. Torchbox Autumn Event 2026 A/V (theorangeone.net)
151. Build Agentic UI with the new Blazor AI components (devblogs.microsoft.com)
152. Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway (www.ncsc.gov.uk)
153. Encouraging learners to think first, prompt second: Using large language models to learn (www.raspberrypi.org)
154. How DigitalOcean Manages Credentials for Autonomous Agents (www.digitalocean.com)
155. Weekly Update 523: Live From a Norwegian Fjord (troyhunt.com)
156. August 2026 Baseline monthly digest (web.dev)
157. Parametrised tests in Rust with named parameters (alexwlchan.net)
158. If we do not stop to help each other, what do we become? (blog.codinghorror.com)
159. The agent-first cloud: why we built Managed Agents (www.digitalocean.com)
160. AG-UI Protocol now has a first-class .NET SDK (devblogs.microsoft.com)
161. GDS Local: helping local government buy and use tech better (technology.blog.gov.uk)
162. Multi-Tenant Best Practices Can Backfire (codeopinion.com)
163. Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface (snyk.io)
164. Measuring the back/forward cache with Application Metrics (blog.sentry.io)
165. You Own the Outcome: Product Engineering in the Age of AI (kentcdodds.com)
166. “We can figure it out”: How one Minnesota teacher uses Experience CS to set the tone for her whole year (www.raspberrypi.org)
167. Connection allowlists: Secure your web application's network access (developer.chrome.com)
168. Weekly Update 522: Live From Oslo with Scott Helme (troyhunt.com)
169. Introducing DigitalOcean Managed Agents: One AI-native stack to power your intelligence (www.digitalocean.com)
170. Join our new UK study on teaching AI ethics and sustainability in lower secondary school (www.raspberrypi.org)
171. LimeLeads - 17,838,396 breached accounts (haveibeenpwned.com)
172. New in Chrome 154 (developer.chrome.com)
173. New in DevTools - October 2026 (developer.chrome.com)
174. So I asked my agent instead… (snyk.io)
175. Helix: The internal tool powering our Shopify app's native migration (shopify.engineering)
176. Burger King Russia - 3,155,792 breached accounts (haveibeenpwned.com)
177. One does not simply defend agentically (www.ncsc.gov.uk)
178. Building Sentry's Laravel AI Integration (blog.sentry.io)
179. Windows Exploitation Techniques: Dangling COM Object Registrations (googleprojectzero.blogspot.com)
180. Find features to support for Interop 2027 with your coding agent (web.dev)
181. There's no point at which turning your brain off will work (danluu.com)
182. How I Vibed a Proof of Conway’s Conjecture (overreacted.io)
183. The Next Step for Mission-Critical Workloads: Managed Databases Advanced Edition (www.digitalocean.com)
184. Adversary simulation: what you need to know (www.ncsc.gov.uk)
185. Cyber Adversary Simulation (CyAS): scheme documents now available (www.ncsc.gov.uk)
186. Building a Dashboard for my Fridge (theorangeone.net)
187. Enhance multitasking extensions with the new Tabs Split View API (developer.chrome.com)
188. Chrome 155 beta (developer.chrome.com)
189. Avoid API Breaking Changes (codeopinion.com)
190. Bring AI literacy into every classroom with our new themed resources (www.raspberrypi.org)
191. Iranian cyber targeting of dissidents, activists and journalists (www.ncsc.gov.uk)
192. UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists (www.ncsc.gov.uk)
193. Abusing ID3 chapters to turn videos into glanceable podcasts (alexwlchan.net)
194. The AI Hurricane Is Here (snyk.io)
195. Intelligence is yours. Let's keep it that way. (www.digitalocean.com)
196. Intelligent Terminal 0.2.2572: Faster, Smoother, and More Reliable (devblogs.microsoft.com)
197. Launching Astro Pi 2026/27: Code your way to the International Space Station (www.raspberrypi.org)
198. We are all Product Engineers now (seldo.com)
199. Chess.com (2026) - 4,653,212 breached accounts (haveibeenpwned.com)
200. Nobody pays for open source. We can force them to. (seldo.com)
201. Weekly Update 521: Breach Perception v. Reality (troyhunt.com)
202. Debugging our AI search assistant with agent tracing (blog.sentry.io)
203. Migrating Shop app from React Native to native (shopify.engineering)
204. Native is now the future of mobile at Shopify (shopify.engineering)
205. McKesson - 6,404,340 breached accounts (haveibeenpwned.com)
206. Is prevention essentially a solved problem? (snyk.io)
207. Home Hardware, Part 2: Width Matters (blog.jessfraz.com)
208. Built for agents: Omarchy's pipeline moves to DigitalOcean (www.digitalocean.com)
209. .NET 11 Release Candidate 1 (github.com)
210. Testing race conditions with memory access tracing and stack-based delay injection (googleprojectzero.blogspot.com)
211. Home Hardware, Part 1: My Control4 Revenge Arc (blog.jessfraz.com)
212. Introducing Kody: Your Personal Software Factory (kentcdodds.com)
213. The hidden risks of shadow AI (www.ncsc.gov.uk)
214. No Hacking Required: The Manchester Airports Group Data Breach (scotthelme.co.uk)
215. How well do agents use test and verification techniques? (danluu.com)
216. Weekly Update 520: The Unscripted Edition (troyhunt.com)
217. Domain Events Are NOT Your Public API (codeopinion.com)
218. The book is done! (ericlippert.com)
219. Submit your proposals for Interop 2027 (web.dev)
220. How River takes security work from a fix to merge (shopify.engineering)
221. Manchester Airports Group - 8,849,657 breached accounts (haveibeenpwned.com)
222. Weekly Update 519: Breaches & Data Integrity (troyhunt.com)
223. Application Metrics caught my broken size estimator (blog.sentry.io)
224. Questel - 1,226,209 breached accounts (haveibeenpwned.com)
225. Ed Zitron's AI prediction track record (danluu.com)
226. Let’s Use the Emergent CSS random() Function in all the Browsers (css-tricks.com)
227. What’s !important #18: , Syntax ::highlight()ing, named-feature(), and More (css-tricks.com)
228. You Can't "Vibe Code" Love (blog.codinghorror.com)
229. Bug blindness (danluu.com)
230. From one switch to a control panel: meet `dataCollection` (blog.sentry.io)
231. Lightweight architecture for learning at pace  (technology.blog.gov.uk)
232. New to the web platform in August (web.dev)
233. Debugging my new network, when 10 Gigabit Ethernet Runs at 300 Megabits (hanselman.com)
234. Creating Web Widgets Using the Document Picture-in-Picture API (css-tricks.com)
235. Disruptive cyber activity highlights risk from internet-exposed systems and edge devices (www.ncsc.gov.uk)
236. animation-trigger (css-tricks.com)
237. How to evaluate session replay software: a developer's guide (blog.sentry.io)
238. Why Your AI Application Is Exposed (Even When Your Scans Come Back Clean) (snyk.io)
239. Introducing v5 Droplets: next-generation performance, sized to your workload (www.digitalocean.com)
240. A Cautionary Tale About Data Breach Claims, Verification and Carhartt (troyhunt.com)
241. Carhartt - 12,933,413 breached accounts (haveibeenpwned.com)
242. Private Preview: DigitalOcean Managed Agents Runtime Services (www.digitalocean.com)
243. MicroLighter: Syntax Highlighter (css-tricks.com)
244. PowerToys 0.101 is here: Window Hopper, Insider updates, and Command Palette compact mode (devblogs.microsoft.com)
245. Patching at Fleet Scale, Twice: How DigitalOcean Closed Januscape and the AMD Safe RET Issue Without Customer Impact (www.digitalocean.com)
246. WordPress PHP-Only Block Registration (css-tricks.com)
247. The ultimate road trip combo: Starlink Mini + UniFi Travel Router (scotthelme.co.uk)
248. Weekly Update 518: IoT Doorlock Nirvana with UniFi (troyhunt.com)
249. NIUS - 6,090 breached accounts (haveibeenpwned.com)
250. Migrating a Synology NAS to a UniFi UNAS Pro 8 with Robocopy, SMB Multichannel, and Surprising Performance Traps (hanselman.com)
251. Welcoming the Sri Lankan Government to Have I Been Pwned (troyhunt.com)