PHP2Shell: GitLab helps find and remediate critical PHP flaws

METR

For three weeks, from July 21st to August 11th, a METR employee and a Redwood Research employee conducted a pilot high-access exercise...

The Pragmatic Engineer

A month’s worth of security breaches in a single day – will things get worse before they improve? Also: Anthropic accused of version...

Snorkel AI

Rubric-based evaluation is now a common way to score the outputs of language models and agents (Hashemi et al., 2024; Wei et al., 2025),...

SentinelOne

U.S. courts sentence tax fraudster, Chinese-linked actors use agentic AI in cloud supply chain attack, and PHP issues warning of two...

Latent Space

AI models are solving more mathematical problems. A pattern is emerging in their successes that could help us predict which problems...

Latent Space

the Cyber onslaught continues.

The Pragmatic Engineer

Git had too many performance problems at 30,000 PRs per day, so Anthropic built its own. I talked with the team, including asking why...

Stratechery by Ben Thompson

The best Stratechery content from the week of October 19, 2026, including the best iPad but worst phone, SS Sarandos in a storm, and You...

Stratechery by Ben Thompson

Sharp Tech is, for the first time, available on video. You have two ways to consume it: YouTube, and here on Stratechery

WorkOS Blog

A map of NIST’s seven Zero Trust tenets onto the MCP request path: what the spec gives you, what you build, and the five checks every AI...

Auth0 Blog

Auth0 expands Client ID Metadata Document (CIMD) support with manual pre-registration and dynamic registration. Pair it with Application...

WorkOS Blog

Yelp sells agent access, JPMorgan refuses it, Shopify ships it as a toggle. Admission is a commercial call, and bot rules are the wrong...

Open Source Security Foundation

Discover how the OpenSSF Gemara project clarifies the complex world of security attestations, streamlines software supply chain...

openssf.org

Maintaining private forks of open source software (OSS) comes with a hidden tax, costing organizations an average of 5,160 labor hours...

SecurityWeek

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised...

The Hacker News

AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API...

SecurityWeek

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen,...

Cloud Blog

Every decade or so, a shift in software forces us to rethink computer architecture from first principles. After the first boom of...

Cloud Blog

Blog authors: Nirav Mehta, VP Product Management; Michael Bachman, VP/GM; Kevin Hutchins, VP Product Management Scaling Gemini to planet...

Cloud Blog

Today, we’re launching self-learning context enrichment (preview) and a reimagined Knowledge Studio experience (preview) in Knowledge...

TechCrunch

MIT researchers marooned 13 AIs on a virtual island, and they responded by inventing games, mourning a lost ring and, eventually,...

IEEE Spectrum

This article is crossposted from IEEE Spectrum’s careers newsletter. Sign up now to get insider tips, expert advice, and practical...

IEEE Spectrum

When San Antonio–based software engineer Nikhil Jathar first went to Washington, D.C., to advocate for federal support for technology...