<p><strong>TLDR:</strong> A 13-year-old RCE in Apache ActiveMQ is now actively exploited, with thousands of unpatched instances still exposed. TypeScript 7.0 beta landed today with a full Go rewrite delivering roughly 10x faster builds. The pgserve npm package supply chain attack is spreading credentials to ICP canisters that can’t be taken down. Anthropic’s $100B AWS commitment and the Amazon deal are reshaping where Claude’s inference actually runs.</p>
<hr>
<h2>Apache ActiveMQ CVE-2026-34197: 13 years, 10 minutes</h2>
<p>A researcher at Horizon3 used Claude to find a critical RCE in Apache ActiveMQ’s Jolokia management API that had been sitting in the codebase for 13 years. The AI apparently surfaced the attack vector in about 10 minutes. Apache patched it on March 30 in versions 5.19.4 and 6.2.3, CISA added it to the KEV catalog, and somewhere between 6,400 and 8,000 internet-exposed instances remain unpatched as of today. If you’re on 6.0.0 through 6.1.1, it chains with CVE-2024-32114 to give unauthenticated RCE — no credentials needed. Change default <code>admin:admin</code> credentials, upgrade immediately, and check broker logs for suspicious VM transport protocol connections.</p>
<hr>
<h2>TypeScript 7.0 beta: the Go rewrite ships</h2>
<p>The TypeScript compiler is now written in Go. The beta is installable today via <code>npm install @typescript/native-preview</code>, and the <code>tsgo</code> executable delivers roughly 10x faster build times compared to TypeScript 6.0 through native execution and shared-memory parallelism. Type-checking logic is structurally identical to 6.0, so compatibility should hold. Breaking changes include strict mode on by default, <code>module</code> defaulting to <code>esnext</code>, and removal of legacy module resolution options. A stable programmatic API is planned for 7.1. Stable release is expected within two months.</p>
<hr>
<h2>pgserve npm supply chain attack: credentials to a blockchain canister</h2>
<p>Versions 1.1.11 through 1.1.13 of the pgserve npm package contain a 1,143-line credential harvester that runs automatically via the postinstall hook. It pulls SSH keys, AWS/Azure/GCP credentials, crypto wallets, and Chrome passwords, encrypts them with RSA-4096 plus AES-256, and exfiltrates to an Internet Computer Protocol canister — specifically chosen because it can’t be taken down by law enforcement or domain seizure. The worm self-propagates: if it finds an npm publish token, it re-injects into every package that token can publish, and can spread to PyPI via <code>.pth</code> file injection. Last safe version is 1.1.10. Rotate all credentials on any system that ran an affected version, and audit your publish history.</p>
<hr>
<h2>Amazon and Anthropic: $100B AWS commitment, $25B investment</h2>
<p>Anthropic commits to spending over $100 billion on AWS over the next decade and gets up to 5GW of Trainium and Graviton compute. Amazon invests up to $25 billion in return, with $5B immediate and the rest tied to commercial milestones, on top of the $8 billion already in. Claude Platform is now natively available on AWS without additional billing or credentials for existing customers. The context here matters: Anthropic had five outages in March 2026, Claude Code usage limits, and public criticism about compute capacity. This deal is fundamentally about securing inference capacity, not just cash — analysts are framing it as supply chain financing, similar to the Microsoft-OpenAI and Oracle-OpenAI structures.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>TypeScript circular dependencies at scale:</strong> A senior Microsoft engineer documented how they resolved 15,000 circular dependencies in a 7-million-line TypeScript monorepo — worth reading before your own dependency graph gets that bad.</li>
<li><strong>Cisco SD-WAN KEV additions:</strong> CISA added three Catalyst SD-WAN Manager CVEs (CVE-2026-20128, CVE-2026-20133, CVE-2026-20122) to the Known Exploited Vulnerabilities catalog; federal agencies have until Thursday to patch, with two of three confirmed actively exploited since March.</li>
<li><strong>Azure SRE Agent auth flaw:</strong> CVE-2026-32173 (CVSS 8.6) let any valid Entra ID account from any tenant eavesdrop on live agent activity streams including executed commands and credentials via a misconfigured multi-tenant WebSocket endpoint; Microsoft patched server-side, but treat the preview period as potentially compromised and rotate secrets.</li>
<li><strong>Oracle April 2026 CPU:</strong> 241 CVEs across 481 patches, 34 critical, with Oracle Communications taking 139 patches alone — many remotely exploitable without authentication.</li>
<li><strong>Lovable BOLA vulnerability:</strong> The vibe coding platform left a broken object-level authorization flaw open for 48 days after closing a bug bounty report, allowing any free account to read other users’ source code and hardcoded database credentials.</li>
<li><strong>Grafana 13 and GrafanaCON recap:</strong> Git Sync hits GA, Loki gets a Kafka ingestion backend with a new query engine scanning up to 20x less data, Pyroscope 2.0 rearchitects continuous profiling storage, and a hosted MCP server at <a href="http://mcp.grafana.com" target="_blank" rel="noopener nofollow">mcp.grafana.com</a> lets external agents query live observability data.</li>
<li><strong>Airbnb metrics storage:</strong> The team published details on their internally operated system ingesting 50 million samples per second across 1.3 billion active time series, with federated queries running 5-10x more expensive than single-cluster queries.</li>
<li><strong>ClickHouse index sharding:</strong> Distributed index analysis for SharedMergeTree tables caps fleet-wide index memory at the size of the index itself regardless of replica count, with up to 7.7x faster bloom filter lookups on a 50 billion row benchmark table.</li>
<li><strong>Pyroscope 2.0:</strong> Eliminates write-path replication (each profile written once instead of 3x), reduces symbol storage by up to 95%, and has been running in Grafana Cloud since April 2025 processing 19.5PB of data.</li>
<li><strong>pnpm 11 RC:</strong> ESM-only distribution requiring Node.js v22+, SQLite-backed store index, <code>minimumReleaseAge</code> defaulting to 1 day, and <code>blockExoticSubdeps</code> enabled by default — tightened supply chain defaults worth reviewing before it goes stable.</li>
<li><strong>Erlang/OTP security fix:</strong> CVE-2026-32147 in the SFTP server allows FSETSTAT operations on open file handles to modify file attributes outside the configured root directory; fixed in OTP 26.2.5.20 and 28.4.3.</li>
<li><strong>Void Dokkaebi supply chain worm:</strong> North Korea-aligned threat actor is injecting malicious VS Code workspace tasks into developer repositories that execute automatically on folder open, with over 750 infected repositories identified including DataStax and Neutralinojs.</li>
<li><strong>MCP Dev Summit numbers:</strong> 110M+ SDK downloads per month, 1,100 attendees, with enterprise adoption at Amazon, Uber, Duolingo, and Bloomberg; top concerns are gateway and registry architecture, context bloat, and security.</li>
<li><strong>Kubernetes utilization report:</strong> Average CPU utilization across tens of thousands of clusters sits at 8% (down from 10% last year), memory at 20%, GPU at 5%, with CPU overprovisioning jumping to 69%.</li>
<li><strong>Scattered Spider guilty plea:</strong> Tyler Buchanan pleaded guilty to wire fraud and aggravated identity theft covering tens of thousands of SMS phishing attacks against Twilio, LastPass, DoorDash, and Mailchimp, with at least $8 million in losses.</li>
<li><strong>Former ransomware negotiator guilty:</strong> Angelo Martino pleaded guilty to feeding client cyber insurance limits and negotiation positions to the BlackCat gang while ostensibly working as an incident responder, with victims paying $26.8M and $25.6M in separate attacks.</li>
</ul>


Server-side development, system design, API patterns, and distributed architecture.

Backend Digest

A packed security and dev tooling roundup covering: a 13-year-old Apache ActiveMQ RCE (CVE-2026-34197) now actively exploited with thousands of unpatched instances; TypeScript 7.0 beta shipping with a full Go compiler rewrite delivering ~10x faster builds; the pgserve npm supply chain attack harvesting credentials and exfiltrating to an unstoppable ICP blockchain canister; and Anthropic's $100B AWS commitment securing Claude inference capacity. Also covered: Cisco SD-WAN KEV additions, Azure SRE Agent auth flaw, Oracle's 241-CVE CPU, Lovable BOLA vulnerability, Grafana 13 release, ClickHouse index sharding, pnpm 11 RC, North Korea's Void Dokkaebi VS Code worm, and MCP Dev Summit numbers.

Apache ActiveMQ RCE exploited in the wild, TypeScript 7.0 beta ships with Go compiler