Everything this site carried that day, newest first. Stories are kept for a month, and the widely covered ones for a year.
GitHub Security Lab
GitHub Security Lab Taskflow Agent is very effective at finding Auth Bypasses, IDORs, Token Leaks, and other high-impact vulnerabilities. The post How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework appeared first on The GitHub Blog.
Huntress
A deep dive into a threat actor who exploited SolarWinds Web Help Desk, abused an Elastic Cloud SIEM free trial for exfiltration and triage, revealing key infrastructure.
Google — The Keyword / AI / Research / DeepMind / Developers
Natural Language Processing
Language blogs: Rust / Go / TypeScript / Swift / Kotlin / Java / .NET / Ruby / PHP / Elixir / ISO C++
Today we are excited to announce the Release Candidate (RC) of TypeScript 6.0! To get started using the RC, you can get it through npm with the following command: npm install -D typescript@rc TypeScript 6.0 is a unique release in that we intend for it to be the last release based on the current…
Google — The Keyword / AI / Research / DeepMind / Developers
Climate & Sustainability
Podcasts: Practical AI / TWIML / No Priors / Dwarkesh
Renaissance history is so much wilder and weirder than you would have expected. Very fun chatting with Ada Palmer (historian, novelist, and composer based at the University of Chicago). Some especially fascinating things I learned from the conversation and her excellent book, Inventing the…
Huntress
Huntress has identified and detailed a full timeline of an intrusion in a customer environment that aligns with what others have identified as MuddyWater (Iranian-linked APT).
Wiz Research
Experience full Wiz security with zero friction, managing multiple tenants in a single console
Vercel (blog + changelog)
creator/model OpenAI's Responses API is now available through AI Gateway. The Responses API is a modern alternative to the Chat Completions API. Point your OpenAI SDK to AI Gateway's base URL and use thenames to route requests. TypeScript and Python are both supported. All of the functionality in…
Vercel (blog + changelog)
Builds on Vercel now deploy 1.2 seconds faster on average, with more complex projects seeing the biggest gains (up to 3.7 seconds). The improvement comes from optimizing how credentials are provisioned during the build process, eliminating a blocking step that previously added latency at the end of…
Vercel (blog + changelog)
Skipping unaffected builds in monorepos now detects Bun lockfiles, extending the same compatibility already available for other package managers. When Vercel evaluates which projects to build, it reads lockfile changes to determine whether dependencies have changed. Teams using Bun can now rely on…
Vercel (blog + changelog)
Chat SDK now renders tables natively across all platform adapters and converts markdown to each platform's native format during streaming. Table() Chat SDK Thecomponent is a new card element inthat gives you a clean, composable API for rendering tables across every platform adapter. Pass in headers…
Vercel (blog + changelog)
connecting to any custom MCP server The v0 API now supports. Teams can configure new servers programmatically by providing the necessary endpoint and authentication details. Once configured, you can make these custom servers available directly during a v0 chat session by referencing the server ID…
The Markup
Southern California residents are noticing new license plate readers that appear to be operated by the Border Patrol. Some have had confusing encounters with agents.
Wiz Research
In the final part of our series, we explore Reactive Risk Management. Discover how Wiz for U.S. Government transforms cloud detection and response to help satisfy FedRAMP Rev 5 IR controls and FedRAMP 20x detection benchmarks.
Language blogs: Rust / Go / TypeScript / Swift / Kotlin / Java / .NET / Ruby / PHP / Elixir / ISO C++
TelemetryDeck is an app analytics service specifically for developers, designed to manage usage analytics that are anonymized, privacy-focused, and really easy to use. TelemetryDeck is managing the data of over 16 million people every month, helping thousands of app publishers improve their…
OpenAI News
Codex Security is an AI application security agent that analyzes project context to detect, validate, and patch complex vulnerabilities with higher confidence and less noise.
OpenAI News
By combining rigorous model evaluation, full-platform use of OpenAI, and agent workflows, Balyasny is reinventing investment research.
OpenAI News
Using OpenAI reasoning models, Descript unlocked automatic localization of large content libraries without losing timing or meaning.