Patch the Planet: global response coordination as agents uncover vulnerabilities

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

Your MCU Likely Escaped the eMudhra Intermediate CA Compromise

If you are a software engineer, or generally work in the tech industry, there is a good chance that you heard about the eMudhra Intermediate CA Compromise that was disclosed yesterday (October 20, 2026). If you don’t, you may have noticed an uptick in software updates for various products that you use. I won’t go through the entire background of the situation as there are plenty of other posts, including the now public bug report from Mozilla, that describe the details of the compromise.

Drupal is now light-years ahead of its reputation

DrupalCon Rotterdam 2026 DriesNote presentation.

Today's PHP Security Release, and How We're Strengthening PHP Security

Describing the story behind how critical security vulnerabilities were found and fixed.

9 Mothers (YC P26) Is Hiring in Austin, TX

Build counter-drone defense systems in Austin. 9 Mothers is hiring across audio ML, DSP, systems, and software — hardware on software tempo, real deployment, short iteration loops.

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds

What I learned from six months of being stupid on purpose

Putting myself in situations where I knew the least allowed me to develop and learn at the fastest rate I’ve ever experienced

C++ futures part 1: The mental model

Managing a value that is produced later.

Launch HN: Alter (YC S25) – Access control for multi-user agents

PAM for AI agents, enforced at runtime: vaulted credentials, per-action policy, approval before risky calls complete, and an audit trail for every call through Alter.

PHP 8.2.35

The PHP Interpreter. Contribute to php/php-src development by creating an account on GitHub.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.

PHP2Shell: AI uncovers critical RCE in PHP

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

The Future of CSS

Every year, browser vendors collaborate via the Interop project to synchronize their efforts on new HTML/CSS/JS features. This year, there’s a ton of super exciting features being considered! In this blog post, we’ll explore the CSS of the future, to get a glimpse of what we’ll soon be able to do.

The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck

This past weekend was the latest in an ongoing series of (massive) "No Kings" protests held around the country (and in some cases around the globe). The latest one was part of a "get out the (early) vote" campaign to make sure people are voting in the upcoming midterm elections. And, in the middle of…

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

The discovery of two lost species is 'exceptional' and rare, scientists say

Cloudflare deploys protections against php2shell vulnerability

Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.

OpenAI models are coming to Google Cloud

OpenAI and Google Cloud are bringing frontier models and Codex workflows to Gemini’s Model Garden, available through Google Cloud Marketplace.

Using thousands of AI agents to uncover new leads in biological data

See how OpenAI, PerturbAI, and Scripps Research used distributed AI agents to uncover promising research leads in data from millions of brain cells.

DuckDB 2.0.0 LTS “Cinnamon Teal”

The DuckDB team is happy to announce that today we're releasing DuckDB version 2.0.0 LTS, codenamed “Cinnamon Teal” (Spatula cyanoptera). This is our biggest feature release so far, and it ships a polished version of the Quack protocol, asynchronous I/O, a first-class VARIANT type, agent mode, triggers, an extensible SQL parser and much more, built from close to 20,000 commits since DuckDB 1.5.