Huntress
Threat Actors Weaponize Tiflux RMMs in Malspam Attacks
We dug into a recent malspam campaign that involved an installer for a commercially sold remote monitoring and management (RMM) tool called Tiflux.
Thursday, 7 May 2026
Everything this site carried that day, newest first. Stories are kept for a month, and the widely covered ones for a year.
Kubernetes / CNCF / Linux Foundation / Apache / OpenSSF / OSI / Eclipse
Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRA
Dynamic Resource Allocation (DRA) has fundamentally changed how platform administrators handle hardware accelerators and specialized resources in Kubernetes. In the v1.36 release, DRA continues to mature, bringing a wave of feature graduations, critical usability improvements, and new capabilities…
The Defiant / DL News / Protos / CryptoSlate
Lord Kulveer Ranger on digital assets, digital pound, and stablecoins
Lord Ranger is a Member of the UK House of Lords and serves as Co-Chair of the All-Party Parliamentary Group (APPG) on Digital Markets and Digital Money.
Mozilla — Blog / Hacks
Behind the Scenes Hardening Firefox with Claude Mythos Preview
Two weeks ago we announced that we had identified and fixed an unprecedented number of latent security bugs in Firefox with the help of Claude Mythos Preview and other AI models. In this post, we’ll go into more detail about how we approached this work, what we found, and advice for other projects…
Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale
Introducing Postgres Query Insights in ClickHouse Cloud
Query Insights is now in preview for ClickHouse Cloud Managed Postgres: every query pattern your database runs, ranked by impact, with the diagnostic picture of why each one is slow.
Google Safety & Security (incl. TAG posts)
5 helpful tools from Google to keep your accounts safe
Sign in securely and keep your account accessible with passkeys, Recovery Contacts, Sign in with Google, Password Manager and 2-Step Verification.
Huntress
Meet Andrea Colon, Restoring Peace of Mind in a Paranoid Digital World
An interview with Huntress Account Executive Andrea Colon about the emotional toll of a cyber breach on small businesses and the company's mission to restore peace of mind.
Docker / HashiCorp / Grafana / Datadog / Honeycomb / Fly.io
Span or Attribute in OpenTelemetry Custom Instrumentation
When you want to add some information to your tracing telemetry, you could emit a log, create a span, or add a piece of data to your current span. Adding a piece of data to your current span is the best! Usually.
Vercel (blog + changelog)
Next.js May 2026 security release
Summary CVE-2026-23870 We have shipped a coordinated security release for Next.js addressing 13 advisories across denial of service, middleware and proxy bypass, server-side request forgery, cache poisoning, and cross-site scripting. One advisory addresses an upstream React Server Components…
OpenAI News
Scaling Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber
OpenAI expands Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber, helping verified defenders accelerate vulnerability research and protect critical infrastructure.
Wiz Research
Build Fast, Build Secure: Wiz findings are now in Lovable
With Wiz in Lovable, every builder can catch and fix risks in real time, keeping apps secure as they’re created
Wiz Research
It's Time to Go After Achieving Zero Code Criticals
Ready to hit Zero Code Criticals? Here's how Wiz helps you get there and stay there, with the badge to prove you did.
OpenAI News
Parloa builds service agents customers want to talk to
Parloa leverages OpenAI models to power scalable, voice-driven AI customer service agents, enabling enterprises to design, simulate, and deploy reliable, real-time interactions.
OpenAI News
Advancing voice intelligence with new models in the API
Explore new realtime voice models in the OpenAI API that can reason, translate, and transcribe speech, enabling more natural and intelligent voice experiences.
Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale
Everyone gets faster writes: We turned off FPW's in Neon
We've managed to give customers up to 5x performance increase on write-heavy workloads by disabling full-page writes, a Postgres durability safety feature that is made redundant by Neon's own storage engine.
Vercel (blog + changelog)
Vercel Flags now supports JSON values
Vercel Flags You can now store JSON values in, extending the existing support for boolean, string, and number values. This allows you to collapse what used to take several related flags into a single feature flag. model ai_model ai_temperature ai_max_tokens For example, to A/B test how a different…
OpenAI News
Simplex rethinks software development with Codex
Simplex boosts software development with ChatGPT Enterprise and Codex, reducing design, build, and testing time while scaling AI-driven workflows.
OpenAI News
Introducing Trusted Contact in ChatGPT
Introducing Trusted Contact in ChatGPT, an optional safety feature that notifies someone you trust if serious self-harm concerns are detected.