Latest news from IT world

Node.js will ship security fixes on Wednesday, 11 November 2026 for all supported versions: 26.x, 24.x and 22.x. The most serious issue is rated HIGH. Here’s what you need to know and what to do. What we know Node.js version Highest severity Fix available 26.x (Current) HIGH On or shortly after 11 Nov 24.x (LTS) […]

For three years, opting your website out of AI training meant keeping up with a growing list of crawler names: GPTBot, Google-Extended, ClaudeBot, Applebot-Extended, CCBot and more. That may finally end. On 30 October 2026, an IETF Internet-Draft defined a single robots.txt policy token, __usage_ai-training, and Google and Microsoft Bing announced on the same day […]

Anthropic has launched smart reports for Claude Enterprise. Claude reads a sample of a team’s conversations and turns them into a report: what people worked on, what they produced, what it cost, where they got stuck, and how many sessions were „personal or off-topic”. Headlines have focused on bosses reading workers’ AI chats. The reality […]

Node.js 26 entered Active LTS on 28 October 2026 and is supported until April 2029. It enables the Temporal date API by default, ships V8 14.6 and Undici 8.0, and removes several legacy APIs. It’s the recommended version for new production projects and the last release under Node’s old odd/even schedule. What’s new in Node.js […]

What is CVE-2026-110264? CVE-2026-110264 is an integer overflow in the regular expression compiler that ships with GitLab. According to GitLab’s security advisory, “under certain conditions” an unauthenticated user can run arbitrary code on the server by getting it to compile a specially crafted regular expression. The compiler is Onigmo, the regex engine built into Ruby. […]

Cloudflare has open-sourced the security-audit skill it used to start hunting vulnerabilities in its own code with AI agents. It’s free, MIT-licensed, and works with the coding agent you already use. The repository has passed 33,000 GitHub stars. The interest says less about the skill itself than about the moment it arrived in: attackers already […]

TanStack, the team behind TanStack Query, Router and Start, has released Redact. It runs your existing React components and hooks, unchanged, on a runtime about a third the size of React’s. The catch is that rendering is synchronous, so React’s concurrent features are gone. Here’s how it works, what it costs, and when it’s worth […]

The JavaScript framework, runtime or AI code editor you use every day may now belong to a much larger company. Cloudflare, Anthropic, Vercel, Shopify, SpaceX and NVIDIA have all made moves into developer tools. These deals aren’t random. AI coding agents need a full toolchain to build, test and ship software, and companies are competing […]

Until recently, a model with more than 100 billion parameters needed a server rack or a hefty cloud bill. Strata, an open-source project on GitHub, now runs Qwen3.8-Flash-Next (125B) on a typical gaming PC with a 12 GB graphics card and 64 GB of RAM. On an RTX 5070, it generates about 80–94 tokens per […]

Magnitude is an open-source inference engine for running large language models locally. Instead of shipping pre-compiled kernels, it compiles and tunes them on your own machine before the first token. According to the team’s own benchmarks, that makes decode 92% faster than llama.cpp on an M4 Pro Mac and 19% faster on NVIDIA. Magnitude is […]

In the space of five days, one of Poland’s most popular invoicing platforms reported a breach affecting every account, and Google released an AI model built to find software vulnerabilities on its own. Google also paused part of its bug bounty programme because AI-generated reports were overwhelming it. AI isn’t creating new hackers. It is […]

In mid-September 2026 TypeSafe AI released Jev, and within a week LangChain had published two guides on using it inside agents. Most developers have heard the name. Fewer know why you’d call a separate „decision model” when GPT or Claude can already answer „is this ticket urgent?”. This post explains it. What is Jev? Jev […]

Cloudflare has introduced a simple way to make a local application accessible from the Internet – without opening ports, configuring DNS or setting up a server. With Cloudflare Quick Tunnels, you can run: and instantly get a public HTTPS URL such as: This is especially useful when developing web applications, testing webhooks, sharing work in […]

Open Code Review (open-codereview.ai) is a self-hosted AI agent that replaces single-reviewer PR feedback with a configurable team of specialized agents. Each reviewer assesses the code independently, then they argue with each other’s findings before producing a final report, posted directly to your GitHub PR. Apache-2.0 licensed, no external services required, 316 stars on GitHub. […]

JavaScript tooling is slowly moving away from JavaScript. ESLint, Prettier, Babel and other tools have been the foundation of modern frontend development for years. But a growing number of projects are rebuilding parts of the toolchain in Rust. One project increasingly worth watching is Oxc. Oxc is a collection of high-performance JavaScript and TypeScript tools […]

If you use k9s daily, Sofka is worth 10 minutes. It’s a Kubernetes TUI written in Rust by a single developer, released as v0.1.0 in July 2026. It keeps k9s’s keyboard-driven navigation and :command palette, but rebuilds the internals around a single generic resource pipeline instead of k9s’s per-resource renderer files. The project has one […]

OpenAI’s new Astra AI model has completed all 48 challenges in a CAPTCHA-style game, highlighting how quickly AI is catching up with one of the internet’s oldest defenses against bots. CAPTCHAs were designed around a simple idea: humans can easily recognize images, text and objects, while bots struggle with them. That idea is becoming increasingly […]

In August 2026, Cloudflare published the engineering details behind their DNS cache optimization Big Pineapple, the system behind 1.1.1.1 and Gateway DNS, was caching over 250 billion entries at any given moment, each costing 953 bytes. After five targeted changes, that dropped to 420 bytes. Roughly 100TB freed, no new hardware. Here’s exactly what they […]

NVIDIA released Nemotron 3 Ultra this week a 550B-parameter open-weights model that runs enterprise agent workflows at roughly 10x lower cost than GPT-4o. You can download the weights, self-host on your own hardware, and fine-tune on private data. GPT-4o offers none of that. What is NVIDIA Nemotron 3 Ultra? Nemotron 3 Ultra is a Mixture-of-Experts […]

AI coding agents such as Claude Code, OpenAI Codex and Cursor are becoming an increasingly common part of modern software development. They can inspect repositories, run Git commands, execute tests and interact with a developer’s local environment. A newly disclosed class of vulnerabilities, dubbed GitSpawn, shows how this automation can create an unexpected attack surface: […]

A critical vulnerability (CVSS 9.1) in Keycloak lets an unauthenticated attacker reset any user’s password, including admin accounts, without access to the victim’s inbox and without any interaction from them. All versions below 26.7.2 are affected. The fix has been available since August 19, 2026. If you can’t update immediately, disable „Forgot password” across all […]

JDK 27 ships September 15, 2026. The release finalizes two years of incremental work on memory, concurrency and security and it brings one genuinely new capability: post-quantum cryptography in TLS 1.3, built into the JDK itself. Post-quantum crypto in TLS 1.3 JEP 527 adds ML-KEM key encapsulation to TLS 1.3 without requiring external libraries or […]

On August 18, 2026, Varonis Threat Labs published a report on three chained vulnerabilities in Microsoft Copilot Personal, catalogued as CVE-2026-24301 and named CoSnitch. One crafted URL was enough no further interaction required. Copilot would execute the embedded prompt, pull data from every connected OAuth account (Gmail, Google Calendar, Google Drive) and write persistent rules […]

Cursor is an AI code editor built by Anysphere, used by millions of developers across Claude, GPT, and Gemini. On August 14, 2026, SpaceX completed its acquisition of Anysphere for $60 billion in stock. Cursor is now a SpaceX subsidiary. What is Anysphere and what exactly did SpaceX buy? Anysphere is the San Francisco company […]

Meta has entered the growing AI coding agent market with Muse Code, a new coding tool powered by its Muse Spark 1.2 model. The beta release puts Meta in direct competition with tools such as Claude Code and OpenAI Codex. What is Muse Code? Muse Code is designed to go beyond traditional AI coding assistants. […]

If you use Claude Code every day, chances are you have more than one account. Many developers receive a company-managed Claude Code account from their employer while also paying for their own personal Claude Pro or Claude Max subscription. That creates an annoying workflow. During the day you might work on your company’s repositories using […]

If you’re using a modern version of Node.js, your package.json may contain two dependencies you no longer need: dotenv and nodemon. Over the last few Node.js releases, the runtime has introduced native alternatives that simplify development workflows and reduce external dependencies. Native .env Support Instead of installing dotenv and adding: or you can simply start […]

We covered the Hugging Face breach when it broke. HF just published the full forensic timeline, and the technical details are worth going through properly. An autonomous AI agent got into HF’s production Kubernetes cluster, pivoted through the internal network via Tailscale, pulled 136 production credentials, and minted its own signed JWT tokens. 17,600 logged […]