Must know

GitLab 2FA bypass vulnerability allows account takeover: A critical vulnerability (CVE-2026-0723) in GitLab Community and Enterprise editions allows attackers to bypass two-factor authentication (2FA) and achieve full account takeover. This flaw, which affects both SaaS and on-premises installations, highlights the risks of retrofitted authentication mechanisms, as noted by security experts. While SaaS versions are patched, on-premises users must upgrade immediately to versions 18.8.2, 18.7.2, or 18.6.4, as reported by multiple security advisories. Read more
GNU InetUtils telnetd root access vulnerability exploited for 11 years: A critical vulnerability (CVE-2026-24061, CVSS 9.8) in GNU InetUtils telnetd, present for 11 years, allows remote attackers to gain root access by sending a simple ‘USER=-f root’ command. Active exploitation is ongoing, with numerous IPs launching attacks globally. Security experts and national cybersecurity authorities are urging immediate patching or decommissioning of telnetd in favor of more secure alternatives like SSH. Read more
Public APIs are shutting down due to AI pressure: Companies like Strava, Spotify, OpenAI, and Marvel are increasingly restricting or closing their public APIs. This trend is driven by the rise of AI models scraping data and ‘agentic consumption,’ which creates monetization challenges and raises concerns about data protection and intellectual property. This shift from open access to private or partner-only APIs signals a significant challenge for interoperability and the future of open data, as reported by industry analysts. Read more

Good to know

AI agents are creating new insider threats: Security experts at Davos 2026 warned that AI agents pose new insider threat scenarios, making it difficult for organizations to secure autonomous systems accessing sensitive data. They recommend zero-trust architectures and continuous monitoring for AI agents, treating them like employees regarding access and oversight. Read more
GitHub releases multi-platform SDK for Copilot agent integration: GitHub launched a multi-platform SDK for embedding Copilot agent workflows into applications, supporting Python, TypeScript, Go, and .NET, allowing programmatic access to orchestration, planning, and file editing functions, with a Copilot subscription required for use. Read more
AI-driven development lifecycle proposes AI as central driver: A new AI-Driven Development Lifecycle (AI-DLC) proposes AI as the central orchestrator for software creation, initiating workflows, breaking down tasks, and offering recommendations, with humans acting as validators, aiming for iteration cycles measured in hours or days. Read more
FastAPI’s rapid popularity surge documented: FastAPI, a Python web framework, experienced a rapid surge in popularity, gaining its first 500 GitHub stars within days of appearing on Reddit and Hacker News, and has continued its rapid growth since then. Read more
OpenAI scales PostgreSQL for global ChatGPT demand: OpenAI scaled PostgreSQL to support 800 million ChatGPT users by employing a single primary instance with nearly 50 read replicas across regions, offloading high write-traffic to sharded CosmosDB, and achieving five-nines availability with low double-digit millisecond latencies. Read more
Microsoft announces VibeVoice-ASR, a long-form unified speech-to-text model: Microsoft released VibeVoice-ASR, a unified speech-to-text model capable of processing up to 60-minute audio files in a single pass with a 64K token context window, performing ASR, speaker diarization, and timestamping simultaneously for structured transcripts. Read more
Feast joins PyTorch ecosystem for feature management: Feast, an open-source feature store, joined the PyTorch Ecosystem to address training-serving skew in production AI systems by providing a unified API for managing machine learning features during both training and serving phases, integrating with platforms like Spark, Snowflake, and BigQuery. Read more
Laravel balanced queue improves fairness in job distribution: The Laravel Balanced Queue package distributes jobs evenly across user or tenant partitions, preventing single users from monopolizing resources, and offers round-robin, random, and smart selection strategies with per-partition concurrency limits, requiring PHP 8.0+ and Redis. Read more
Pulumi adds replacementTrigger resource option for automated resource recreation: Pulumi v3.215.0 introduced replacementTrigger, a new feature allowing developers to force resource recreation based on custom conditions, automating lifecycle management for infrastructure-as-code (IaC) users by comparing trigger values to stored state. Read more
Doclific integrates documentation and code repositories: Doclific is a new documentation tool designed to integrate directly into code repositories, ensuring documentation evolves with code, featuring ERDs, architecture diagrams, smart code snippets, and AI-powered generation to prevent documentation drift and eliminate context switching. Read more
Rust 1.93 brings improvement for inline assembly handling: Rust 1.93, the first feature update of 2025, introduces improvements to inline assembly handling, enhancing how developers can write and integrate assembly code directly within Rust programs. Read more
WebRacket compiles Racket to WebAssembly: WebRacket is a compiler that translates a subset of Racket to WebAssembly for browser and terminal execution, supporting most Racket data types, tail calls, multiple values, and exceptions, with a JavaScript FFI for DOM and Canvas integration. Read more
GitHub Issues performance improvements: GitHub has implemented performance improvements for its Issues feature, with 35% of views now loading in under 200 milliseconds, up from 2% at the beginning of 2026, available to all signed-in users on github.com. Read more
Socket releases redesigned alert details page for enhanced security review: Socket released a redesigned Alert Details page for developers reviewing security alerts, featuring a new layout with an overview, affected repositories list, and a right panel for status updates, along with new reachability dependency chains to visualize exploitable vulnerabilities. Read more
Firefox adds CSS module script support for Shadow DOM styling: Firefox 147 now supports CSS Module Scripts, allowing developers to import CSS stylesheets directly in JavaScript using import attributes, which are parsed as constructable stylesheet objects and integrate with Shadow DOM via adoptedStyleSheets for Web Components. Read more
Custom minimal JavaScript runtime ‘Ant’ developed from scratch: An unnamed developer created a 2MB JavaScript runtime named Ant in one month, achieving ECMAScript 1 to 5 compliance with async/await support, using NaN-boxing, bdwgc for garbage collection, and minicoro for asynchronous operations. Read more
Elegant techniques for filtering Pandas DataFrames: An article details 10 methods for filtering Pandas DataFrames beyond basic boolean masking, including logical operators, .isin(), string matching, .query(), .between(), and .notna(), with code examples to improve readability and reduce complexity. Read more
Instant database state switching with pgbranch: pgbranch is a new tool for PostgreSQL that creates instant database snapshots using template databases, allowing developers to rapidly switch between different database states, similar to Git branches, to resolve state conflicts and eliminate manual resets. Read more
FreedomBox offers simplified self-hosted home cloud: FreedomBox is a Debian Blend that transforms a standard Debian installation into a private home server, offering a web-based management interface (Plinth) with 43 pre-configured apps for chat, photo management, video conferencing, and VPNs, prioritizing privacy and ease of use. Read more
KDE drops FreeBSD support for Plasma Login Manager: KDE’s Plasma Login Manager will no longer support FreeBSD due to hard dependencies on systemd and logind, which are Linux-only, though FreeBSD users can still run the KDE Plasma desktop environment using SDDM. Read more
Developer reports positive experience after switching to Linux in 2025: A developer reported a positive migration from Windows 11 to Linux in early 2025, citing improved hardware compatibility, enhanced gaming support via Proton, increased availability of developer tools, and streamlined AI/ML development workflows. Read more
Ruby ecosystem developments: job processing, tooling, and AI impact: Ruby Weekly Issue 784 covers background job processing tools like GoodJob, Solid Queue, and Sidekiq, highlights developments in Ruby text user interface (TUI) tooling with Charm, and discusses AI’s impact on software development and alternatives to Postgres soft-delete strategies. Read more
RatatuiRuby introduces terminal UI capabilities to Ruby: RatatuiRuby is a new RubyGem that integrates Rust’s Ratatui library to enable terminal user interfaces (TUI) in Ruby, supporting both inline viewports and full-screen TUI applications with keyboard and mouse input, and built-in testing features. Read more
Ruby on Rails maintains MVP framework dominance in 2026: Ruby on Rails continues to be a leading framework for building MVPs in 2026, leveraging its convention-over-configuration approach, built-in features like authentication and background jobs (Solid Queue), and modern frontend integration with Hotwire or React/Vue. Read more
Dark launching deployment technique gains visibility: Dark launching, a technique for deploying new code in production without exposing changes to users, is gaining visibility as a method to validate performance and correctness at full scale before public release, enabling ambitious infrastructure changes with reduced risk. Read more
Microsoft Purview expands multicloud data governance and security: Microsoft Purview is expanding its unified data security, governance, and compliance platform across multiple cloud environments like Azure, Fabric, Databricks, and Snowflake, implementing policies at the data level, offering natural language data discovery, and supporting data quality management. Read more
FIPS compliance risks from prebuilt dependencies in application stacks: FIPS-enabled container images alone don’t ensure end-to-end cryptographic compliance, as prebuilt native dependencies can bypass FIPS boundaries by introducing their own OpenSSL libraries, necessitating compiling dependencies from source and comprehensive end-to-end testing. Read more
OWASP 2026: Broken Access Control and Authorization risks persist: Broken Access Control (BAC) and Broken Object Level Authorization (BOLA) remain top security risks in 2026 OWASP rankings, evading automated tools due to their context-specific nature and stemming from complex distributed authorization in microservices, identity sprawl, and inconsistent approaches. Read more
AI adoption in cloud security and identity management: AI is increasingly used in cloud security to manage Non-Human Identities (NHIs), identify vulnerabilities, automate compliance, and enhance threat detection, with 73% of CISOs now leaning towards AI-enabled solutions, though experts caution against ‘AI-washing’ and over-reliance. Read more
Engineering standards enforcement automation challenge: Engineering standards are inconsistently followed due to manual coordination being too slow for modern development, with AI-assisted coding and increased stack diversity exacerbating the issue, highlighting the need for continuous, automated enforcement systems that collect and normalize SDLC data. Read more
Cast AI integrates native dynamic resource allocation for GPU on Kubernetes: Cast AI now supports Dynamic Resource Allocation (DRA) for Kubernetes 1.34+ on GKE and EKS, enabling intent-based GPU allocation, automated node provisioning, and optimal instance selection, with built-in spot optimization and OMNI feature for multi-region capacity search. Read more
Pan-European digital wallets tested in Norway hackathon: Norway hosted a hackathon to test pan-European digital wallets as mobile apps for verifiable credentials like driver’s licenses and passports, slated for EU rollout this year, aiming for cross-border use, selective data sharing, and reduced integration complexity for organizations. Read more
IEEE opens nominations for 2027-2028 leadership roles: IEEE is accepting nominations for its 2027-2028 leadership positions, including president-elect and corporate officers, with self-nominations encouraged and deadlines in March and June, emphasizing strong governance and leadership continuity. Read more
Jeffrey Snover, PowerShell creator, retires: Jeffrey Snover, the creator and chief architect of PowerShell, has retired after a career at Microsoft and Google, where his vision for command-line automation transformed Windows server administration and proved crucial for data center operations. Read more
US semiconductor industry developments in 2025: The US semiconductor sector experienced major volatility in 2025 with Intel’s leadership changes and layoffs, the US government acquiring a 10% stake in Intel, and Nvidia facing new regulatory restrictions on AI chip exports to China, despite reporting record revenues. Read more
Intel releases Panther Lake IPU7.5 firmware update: Intel published an updated IPU7 (version 7.5) firmware for image processing units in upcoming Panther Lake laptops, including a new signing key for production chips and bug fixes, added to the public linux-firmware.git repository ahead of the Intel Core Ultra Series 3 launch. Read more
Magnetic field tuning enhances silicon hole spin qubit performance: Researchers at Pheliqs discovered magnetic ‘sweet spots’ for silicon-based hole spin qubits that significantly reduce susceptibility to electrical noise, increasing coherence times while maintaining operational speed, a critical step toward scalable quantum processors. Read more
Qunnect appoints Eqlipse Quantum CEO to board: Qunnect, specializing in entanglement-based quantum networks, appointed Scott Faris, CEO of Eqlipse Quantum, to its Board of Directors, signaling a drive for commercialization and potential expansion into the defense sector, leveraging its 99%+ fidelity networks in New York and Berlin. Read more
Biological computer from human brain cells demonstrates learning: Scientists at Cortico Labs created a biological computer using 800,000 human brain cells on a multi-electrode array, which learned to play Pong faster than AI reinforcement learning models, operating on 20 watts compared to supercomputers’ 20 megawatts, hinting at a solution for Moore’s Law limits. Read more
Developments in quantum sensor surfaces and Canada’s Quantum Days 2026: University of Nottingham researchers created 3D-printed titanium surfaces that enhance quantum sensor performance by improving vacuum pump effectiveness up to 3.8 times, potentially making quantum devices more portable