Chinese coding models write less secure code for Beijing's adversaries. On Qwen3-Coder, we traced the gap to the weights and closed it by removing the model's CCP alignment.

LayerFS is an open-source (MIT) filesystem for AI coding agents: each tool call gets a complete, writable Workspace over shared history.

Commodity intelligence firm Kpler reports that oil flows out of the Arabian Gulf have rebounded so well that they now exceed levels seen before the st...

Steve Jobs gave a famous speech at Stanford, where he told graduates that the only way to do great work is to love what you do, and that if you haven't found your passion yet, you should keep looking.

The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthe...

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

Patch the Planet connects security researchers, maintainers, and incident responders to help address critical vulnerabilities across open source.

Working with frontier AI and security experts to help secure open source and make our digital infrastructure more secure

The DuckDB team is happy to announce that today we're releasing DuckDB version 2.0.0 LTS, codenamed “Cinnamon Teal” (Spatula cyanoptera). This is our biggest feature release so far, and it ships a polished version of the Quack protocol, asynchronous I/O,…

This past weekend was the latest in an ongoing series of (massive) “No Kings” protests held around the country (and in some cases around the globe). The latest one was part of a “…

LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.

GitHub's Status Page - Delays for Pull Requests and Webhook deliveries.

The state of Oregon may soon have some new public property: A spectacular waterfall, beloved by generations, that was recently put up for sale on Redfin.

PHP2Shell is a family of critical vulnerabilities in core PHP that can allow unauthenticated attackers to execute code or disclose sensitive process memory.

Describing the story behind how critical security vulnerabilities were found and fixed.

See how OpenAI, PerturbAI, and Scripps Research used distributed AI agents to uncover promising research leads in data from millions of brain cells.

Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.

Putting myself in situations where I knew the least allowed me to develop and learn at the fastest rate I’ve ever experienced

The opinionated web stack for the AI era. Rust off Rails is a set of Markdown files that tell coding agents how to build a full-stack Rust web app: one blessed stack, one layout, one way to do each thing.

OpenAI and Google Cloud are bringing frontier models and Codex workflows to Gemini’s Model Garden, available through Google Cloud Marketplace.