F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. The vulnerabilities are listed below - CVE-2026-42530 (CVSS v4 score: 9.2) - A use-after-free vulnerability in the ngx_http_v3_module that could be triggered by a remote unauthenticated attacker when NGINX Open Source is
I launched Firefox this morning to find some new blocks on my home page. The widgets that are currently rolling out add sports scores, time zones, a focus timer, and a checklist, which are already some of my favorite new Firefox features in years. I usually have Focus Friend open on my phone when I […]
Hi everyone! We've just released Chrome Dev 151 (151.0.7896.3) for Android. It's now available on Google Play . You can see a partial list of the changes in the Git log . For details on new features, check out the Chromium blog , and for details on web platform updates, check here . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome
“People just really want to take back control of their time, their lives, their attention... They’re down for whatever helps them do that.”
These servers are regularly targeted by China-linked UNC6508 for initial access and backdoor deployment. The post Majority of Internet-Accessible REDCap Servers Outdated appeared first on SecurityWeek .
Biggest AI firms will likely recoil at Bernie Sanders' AI wealth fund.
The Onion's InfoWars officially has a launch date: On July 2nd, the conspiracy network previously run by Alex Jones will return as a comedy and media platform. The reboot comes more than a year and a half after news broke that the satirical news site was working to acquire the property owned by Jones, a […]
OpenAI introduces new spend controls and usage analytics for ChatGPT Enterprise, helping organizations manage costs and scale AI with confidence.
Article URL: https://www.independent.co.uk/us/money/craigslist-multimillionaire-craig-newmark-b2980681.html Comments URL: https://news.ycombinator.com/item?id=48588216 Points: 374 # Comments: 280
After spending a year and a half focusing on his own journey — from fitness and nutrition to meditation, sobriety, relationships, and personal growth — Brown wants to help others do the same.
Misc Changes Scope the Cold cache indicator in dev to shell cache misses: #94911 Fix Instant Navs DevTools capture bugs and re-enable its test suite: #94866 docs: fix capitalization of Server and Client Components: #94891 docs: Fix broken link to Node.js Debugging Guide: #93958 docs: fix broken Node.js inspector URL in debugging guide: #94934 examples/with-ably: update to App Router + Ably v2: #94600 docs: clarify sequential data fetching example: #94930 docs: GtK, caching with fetch is opt-in - extended to any method or header included: #94899 [test] Enable metadata-streaming-config for Cache Components: #94936 fix(dev-overlay): correct open-in-editor path when using a src directory: #94775 Fix repoRoot for adapters: #94478 Credits Huge thanks to @unstubbable , @niketchandivade , @gilest , @jahanzaib-iqbal-dev , @owenpearson , @davidgg , @icyJoseph , @eps1lon , @fhfournier , and @mischnic for helping!
Searching for pull requests using author: now shows pull requests opened by Copilot cloud agent on the user’s behalf. For example, searching with author:@me on github.com/pulls will return your own… The post Copilot-authored pull requests now included in author searches appeared first on The GitHub Blog .
You can now quickly jump between repositories without leaving your current page. The new repository switcher in the global navigation is generally available. Select the chevron next to the repository… The post Repository switcher generally available in global navigation appeared first on The GitHub Blog .
Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities and using the Tor network to conceal communication. [...]
When three Amazon software engineers testified earlier this month at Seattle City Council hearings about data centers, they started their testimony by citing a city law barring employment discrimination over political speech. Now, they're accusing their employer of breaking that law by retaliating against them. On June 10th - one week after the hearing, and […]
Apple is throwing in the towel, facing down soaring memory and storage chip costs.
The Investing Club holds its "Morning Meeting" every weekday at 10:20 a.m. ET.
Custom images for GitHub-hosted runners are getting new capabilities that give you more flexibility over how you compose and manage your image-generation pipelines. You can now build custom images on… The post Actions: Build custom images from custom images appeared first on The GitHub Blog .
This is Lowpass by Janko Roettgers, a newsletter on the ever-evolving intersection of tech and entertainment, syndicated just for The Verge subscribers once a week. When Fox announced its acquisition of Roku earlier this week, executives of both companies were quick to promise that not much would change in the near future. Sure, getting its […]
The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned into malware delivery paths. macOS attacks ran in memory and left almost nothing behind. Cloud agents looked like helpers until attackers treated them like open shells. Add exposed edge gear, poisoned packages, cash courier scams,
The startup trains embodied AI and world models using Medal’s dataset of 2 billion videos per year from 10 million monthly active users.
Minor Changes #14340 f6e49dd Thanks @emily-shen ! - Add cf-wrangler build delegate support The experimental cf-wrangler delegate binary now accepts build and emits the Build Output API directory through Wrangler's new-config build path. This lets parent tools invoke Wrangler's build-output implementation with cf-wrangler build instead of shelling out through the public Wrangler CLI. #14324 36777db Thanks @jamesopstad ! - Add experimental --experimental-cf-build-output flag to wrangler build When used alongside --experimental-new-config , wrangler build now emits a self-contained Build Output API directory under .cloudflare/output/v0/ instead of delegating to wrangler deploy --dry-run . Patch Changes #14347 673b09e Thanks @jamesopstad ! - Update undici from 7.24.8 to 7.28.0 #14346 e930bd4 Thanks @haidargit ! - Bump ws from 8.20.1 to 8.21.0 to address GHSA-96hv-2xvq-fx4p GHSA-96hv-2xvq-fx4p / CVE-2026-48779 (high severity) reports a remote memory-exhaustion DoS in ws@ : a peer sending a high volume of tiny fragments and data chunks over modest network traffic can crash a ws server or client via OOM. The fix shipped in ws@8.21.0 (commit 2b2abd45 , released 2026-05-22), which also introduces the maxBufferedChunks and maxFragments options. This change bumps the workspace catalog entry so that miniflare , wrangler , and @cloudflare/vite-plugin all pick up the patched release. #14314 5c3bb11 Thanks @harryzcy ! - Bump esbuild to 0.28.1 This update includes several bug fixes from esbuild versions 0.27.3 through 0.28.1. See the esbuild changelog for details. #14331 296ad65 Thanks @dependabot ! - Update dependencies of "miniflare", "wrangler" The following dependency versions have been updated: Dependency From To workerd 1.20260616.1 1.20260617.1 #14275 594544d Thanks @alsuren ! - Resolve auto-provisioned D1 bindings via the API in remote subcommands Remote D1 subcommands ( d1 execute --remote , d1 export --remote , d1 info , d1 insights , d1 delete , d1 migrations apply --remote , d1 migrations list --remote , d1 time-travel ) previously failed with: Found a database with name or binding DB but it is missing a database_id, which is needed for operations on remote resources. when the [[d1_databases]] config entry only had binding and database_name (the shape wrangler deploy writes for automatically-provisioned bindings). They now resolve the real database UUID via GET /accounts/:accountId/d1/database/:name?fields=uuid and proceed as if database_id had been set in config. If the config entry only has a binding (no database_name , no database_id ), the lookup uses the same name wrangler deploy would create via auto provisioning ( - ). Non-404 API failures (auth, rate-limit, server errors) now propagate verbatim instead of being masked as "database not found". #14315 a79b899 Thanks @matingathani ! - Respect find_additional_modules = false when no_bundle is set When using no_bundle = true , wrangler was always scanning for and attaching additional modules even if find_additional_modules was explicitly set to false in the config. Additional modules are now only collected when find_additional_modules is not false , consistent with the bundled code path. #14269 5dfb788 Thanks @mattjohnsonpint ! - Support dev.plugin on typed services bindings Wrangler only honored dev.plugin on unsafe.bindings entries, so users authoring a service binding via services[] could not wire it to a local Miniflare plugin during wrangler dev — they had to fall back to unsafe.bindings and accept a "directly supported by wrangler" warning. Typed services bindings now accept the same dev: { plugin, options? } shape, route the binding through Miniflare's external-plugin pathway in wrangler dev , and strip the field at deploy time. Validation rejects malformed dev shapes. #14328 ca61558 Thanks @edevil ! - Mention temporary preview accounts in wrangler whoami output when unauthenticated When you run wrangler whoami without being logged in, Wrangler now also tells you that you can deploy without logging in by running a command like wrangler deploy --temporary to use a temporary preview account. Updated dependencies [ 673b09e , e930bd4 , 5c3bb11 , 296ad65 ]: miniflare@4.20260617.0
Guardrails positions itself as a populist political movement that runs on small donations from people in the trenches of the AI boom.
Article URL: https://www.submission.directory/ Comments URL: https://news.ycombinator.com/item?id=48586631 Points: 416 # Comments: 92