Must know

China approves high-end Nvidia AI chip imports: China has given the green light for imports of Nvidia’s H200 AI chips for major tech companies like ByteDance, Alibaba, and Tencent. This approval, reported by Ars Technica, allows over 400,000 chips into the country, marking a significant shift after a temporary halt in shipments. The H200 offers substantially higher performance than previously available chips, which Chinese firms are eager to leverage for accelerating AI model training and reducing inference costs. Read more
Kubernetes telemetry exploit allows full cluster compromise: A security researcher uncovered an exploit in Kubernetes’ nodes/proxy GET call that enables privileged command execution and full cluster compromise without leaving audit trails. Despite the severe implications, the Kubernetes team classified this as ‘intended behavior,’ not a bug. A fix, KEP-2862, is planned for Kubernetes 1.36, but until then, administrators should audit RBAC policies and restrict kubelet port access to mitigate risks. Read more
AI-powered polymorphic phishing attacks emerge: A new polymorphic phishing attack uses AI models like DeepSeek and Gemini to dynamically generate malicious JavaScript code directly in victims’ browsers. This ‘last mile reassembly’ technique, reported across multiple sources, bypasses traditional security measures by splitting malware into fragments delivered via separate AI prompts. The attack highlights the increasing sophistication of AI in offensive security operations, making user awareness more critical than ever. Read more

Good to know

Google BigQuery integrates SQL-native AI inference: Google BigQuery now supports SQL-native managed inference, allowing data teams to deploy and run over 180,000 Hugging Face and Vertex AI models directly via SQL statements, eliminating the need for separate ML infrastructure. Read more
Microsoft updates Quantum Development Kit: Microsoft announced major updates to its Quantum Development Kit (QDK), including integration with VS Code and GitHub Copilot for AI-assisted quantum programming, and new specialized toolkits for quantum chemistry and error correction. Read more
Google launches Agentic Vision for Gemini 3 Flash: Google introduced Agentic Vision for Gemini 3 Flash, transforming static image processing into interactive investigation by combining visual reasoning with Python code execution for tasks like image annotation and high-density table parsing. Read more
Dynatrace launches AI observability app and agentic operations platform: Dynatrace released its AI Observability app, supporting agentic AI frameworks and providing end-to-end visibility for agent interactions, alongside a new agentic operations platform with Dynatrace Intelligence for autonomous operations. Read more
Open-source coding agent SERA announced: SERA, an open-source coding agent, achieves state-of-the-art performance on SWE-Bench Verified at 54.2% and is affordable to train, costing approximately $400 for reproduction. Read more
Rust Foundation releases 2025 annual report and strategic plan: The Rust Foundation released its 2025 Annual Report and a 2026-2028 strategic plan focusing on stable infrastructure, maintainer support, adoption growth, organizational engagement, and building global communities. Read more
AMD Ryzen 7 9850X3D processor launched: AMD launched the Ryzen 7 9850X3D processor for $499, featuring an 8-core/16-thread configuration, 104MB cache, and a 5.6GHz boost clock, excelling in gaming and general desktop tasks. Read more
WinRAR vulnerability actively exploited post-patch: A critical WinRAR vulnerability, CVE-2025-8088, remains actively exploited by various threat actors, including state-sponsored groups and cybercriminals, despite a patch released in July 2025. Read more
France adopts homegrown Visio for digital sovereignty: France is replacing U.S. video conferencing platforms with its homegrown Visio across all public services by 2027 to ensure government data remains under French jurisdiction and avoid foreign laws. Read more
UK tribunal approves antitrust lawsuit against Valve: A UK tribunal approved a collective action lawsuit against Valve, representing 14 million UK Steam users, alleging Valve maintains a monopoly and charges excessive 30% commission fees. Read more
SpaceX plans June 2026 IPO targeting $1.5 trillion valuation: SpaceX is reportedly planning an Initial Public Offering (IPO) for June 2026, aiming to raise at least $50 billion with a target valuation of $1.5 trillion to support Starship development and Mars mission goals. Read more
ASML reports record AI chip equipment orders: ASML, the sole supplier of EUV equipment, reported record quarterly bookings of 13 billion euros, more than double the previous quarter, driven by chipmakers anticipating sustained demand for AI infrastructure. Read more
Google releases TranslateGemma open-source translation models: Google released TranslateGemma, an open-source translation model suite built on the Gemma 3 architecture, offering 4B, 12B, and 27B parameter variants supporting 55 languages for diverse deployment. Read more
Moonshot AI releases Kimi K2.5 visual agentic model: Moonshot AI released Kimi K2.5, an open-source visual agentic model for coding, multimodal reasoning, and research automation, featuring a Mixture of Experts architecture and an Agent Swarm capability. Read more
Netflix invests in Blender open-source 3D software: Netflix Animation Studios donated €240,000 to the Blender Foundation, becoming a Corporate Patron to support core development of the open-source 3D software, especially for media and entertainment workflows. Read more
Epic Games releases internal MetaSounds tools: Epic Games released TechAudioTools, a free content plug-in containing internal audio tools previously used for MetaSounds workflows in Fortnite, to provide editor utilities and reusable widgets for Unreal Engine 5. Read more
OpenSilver 3.3 integrates Blazor into XAML applications: OpenSilver 3.3 now allows Blazor components to run directly within XAML applications, supporting .NET 10 and C# 14, and offering a modernization path for legacy Silverlight and WPF applications. Read more
Quarkus 3.31 released with Java 25 support: Quarkus 3.31 introduces full support for Java 25, a new Maven packaging type for faster builds, Panache Next for improved developer experience, and upgrades to Hibernate ORM and Reactive. Read more
Hugo v0.155.0 released with image metadata support: Hugo, a static site generator, released version 0.155.0 with bug fixes, enhanced image metadata support for XMP and IPTC formats, and native WebP image decoding capabilities. Read more
Firefox and Windows 11 release updates: Firefox 147 shipped with major web platform features like Navigation API and CSS Anchor Positioning, while Windows 11 Insider Preview Build 26300.7674 includes fixes for File Explorer and Start menu issues. Read more
Fortinet discloses critical SSO authentication bypass vulnerability: Fortinet disclosed a new critical authentication bypass vulnerability, CVE-2026-24858, affecting FortiCloud SSO, which attackers exploited even after previous patches, prompting Fortinet to disable SSO connections from vulnerable versions. Read more
Klint Rust-based linting tool proposed for Linux kernel: RFC patches were posted for integrating Klint, a Rust-based linting tool, into the Linux kernel to detect issues like incorrect prelude imports and excessive stack frame sizes, functioning as a custom Rust compiler driver. Read more
SonicDE forks KDE for X11 preservation: SonicDE, formerly KDE-Lite, is forking the KDE desktop environment to preserve and maintain X11-specific code, directly responding to Plasma 6.8’s plan to become Wayland-exclusive and discontinue X11 session support. Read more
MANUS Metagloves Pro offer high-precision data capture: MANUS offers Metagloves Pro, high-precision data gloves utilizing Electro Magnetic Field tracking for hand and finger movement capture, achieving millimeter-level accuracy with 25 degrees of freedom for motion capture, robotics, and VR. Read more
Mousefood enables TUIs on embedded devices: Mousefood is a no-std embedded-graphics backend for Ratatui, enabling the creation of terminal user interfaces (TUIs) on embedded devices like ESP32 and STM32, with support for e-ink displays and custom fonts. Read more
WebGPU water demo extended with Apple Vision Pro XR support: James C. Kane extended Yong Su’s WebGPU water simulation demo with Apple Vision Pro XR support, adding new input methods like Gaze and Pinch for eye-tracked 3D object selection and movement. Read more
FreeType LCD filter rendering performance improved: The FreeType library implemented a 40% performance improvement for LCD filter rendering, particularly effective at 32 pixels per em, by applying the filter to spans instead of the entire image. Read more
HMRC plans £2B tech spend amid modernization challenges: HMRC plans over £2 billion in technology procurement over the next two years, including a £410 million data warehouse transformation and £350 million for AWS cloud compute, as it struggles to modernize legacy systems. Read more
Jagex shifts RuneScape strategy: Jagex is making an eight-figure investment in RuneScape, shifting its strategy to focus on the game’s ‘British identity’ and community-driven development, including removing the Treasure Hunter microtransaction system. Read more
Microservices pitfalls and modular monolith recommendation: Microservices primarily address organizational problems, not technical ones, and premature splitting is discouraged; a well-structured modular monolith is recommended as a starting point, with event storming to identify proper service boundaries. Read more
P2P & BitTorrent simulator overview: An interactive simulator demonstrates BitTorrent and P2P file sharing mechanics, explaining core concepts like seeders, leechers, trackers, and the rarest-first strategy, and highlighting real-world applications in blockchain and WebRTC. Read more
Werf: A decade of Kubernetes software delivery tool evolution: Werf, an opinionated CLI tool for building container images and deploying to Kubernetes, evolved from an in-house solution into a comprehensive CNCF Sandbox project, now used in approximately 18,000 projects worldwide. Read more
Enterprise database and invalidation pipeline scaling strategies: Asana scaled its invalidation pipeline to support near-realtime reactivity for millions of users using MySQL binlog change-data-capture, while Agoda scaled its ScyllaDB-backed feature store to handle 50x traffic growth with 10ms P99 latencies. Read more
Cloud providers announce 2025/2026 service enhancements: Google Cloud Spanner evolved into an intelligent context hub for AI applications, AWS CloudFormation introduced major enhancements for accelerating development and scaling infrastructure, and .NET 10 is now available on AWS Lambda. Read more
Front-end development updates: Security, modernization tools, and browser APIs: React and Next.js frameworks have critical DoS CVEs in React Server Components, Expo SDK 55 beta is released, ReliCSS identifies outdated CSS, and the HTML Invoker Commands API now has baseline support across major browsers. Read more
Smoothie bikes converted to game controllers for college: A maker converted exercise smoothie bikes into game controllers for a college, using an ESP32 microcontroller and a light sensor to track RPM and simulated road speed, with bikes connecting via WiFi and a Raspberry Pi running the game. Read more
Crashsune releases free Blender character tutorials: 3D artist Crashsune released free Blender tutorials and downloadable materials focusing on creating stylized animated characters like BIRDBRAIN Teto and low-poly Carmelita Fox, including 3D models and animation rigs. Read more
TexturingXYZ SKAP beta release for skin texture maps: TexturingXYZ is launching Phase 2 of its SKAP tool, an online platform for generating production-ready skin texture maps, with private beta access rolling out next week to waitlisted freelancers and studios. Read more
AWS Deadline Cloud now supports editing job name and description: AWS Deadline Cloud now allows users to edit job names and descriptions after submission, helping teams organize and track jobs more effectively by fixing naming issues and adding tracking details. Read more
AppSignal upgrades log query language: AppSignal upgraded its log query language with advanced filtering capabilities, including AND/OR logic, nested grouping, and JSON dot notation, enabling precise queries and a redesigned logging UI. Read more
Microservices orchestration simulator: An interactive simulator demonstrates Kubernetes orchestration concepts, including the reconciliation loop, self-healing mechanisms, horizontal pod autoscaling, and rolling updates, visualizing how declarative infrastructure management works. Read more
ng-forge: Type-safe, signal-based dynamic forms for Angular: ng-forge is a new Angular library that builds on Angular 21’s Signal Forms to provide configuration-driven dynamic form generation with full TypeScript type inference, declarative validation, and conditional logic. Read more
It is incorrect to ‘normalize’ // in HTTP URL paths: RFC 3986 explicitly allows empty path segments in URLs, making double slashes (//) syntactically valid and semantically meaningful, and collapsing them to / is not legitimate normalization according to RFCs. Read more
Try text scaling support in Chrome Canary: Chrome Canary now supports a new HTML meta tag for text scaling, allowing websites to respect users’ system-level text size preferences, requiring opt-in via <meta name="text-scale" content="scale" />. Read more
Machine learning in production: What this really means: Putting machine learning models into production involves creating systems where model outputs directly impact users with accountability, encompassing prediction functions, API exposure, environment packaging, deployment, and monitoring. Read more
What Stranger Things can teach us about API architecture: Netflix’s outages during the Stranger Things finale revealed critical lessons about distributed API architectures under synchronized global demand, highlighting control-plane API bottlenecks and the