2026-06-13
Top stories
- Anthropic suspends Fable 5 and Mythos 5 after US export directive Anthropic disabled Fable 5 and Mythos 5 for all users after US export directive citing a narrow jailbreak vulnerability.
- Oracle PeopleSoft CVE-2026-35273 zero-day actively exploited; CISA KEV CVE-2026-35273, an unauthenticated RCE in Oracle PeopleSoft, was exploited for two weeks before patching and added to CISA KEV.
- AI agent finds 21 zero-days in FFmpeg for about $1,000 DepthFirst's autonomous agent discovered 21 FFmpeg vulnerabilities for about $1,000, including an RCE in the AV1 RTP depacketizer.
- Claude Sonnet 4 and Opus 4 retire 2026-06-15 Claude Sonnet 4 and Opus 4 API access ends 2026-06-15 at 09:00 PT with no grace period; migrate to newer versions.
- Linux 7.1 stable expected 2026-06-14 Linux 7.1 release candidate 7 was the expected final candidate; Linus Torvalds plans stable release on 2026-06-14.
AI
Agentic coding
Security
- Arch Linux AUR supply-chain attack hits more than 1,500 packages Attackers hijacked over 1,500 AUR packages and injected malicious npm dependencies delivering an infostealer with an optional eBPF rootkit.
- AMD denies $10,000 bounty for auto-updater RCE; CVE-2026-40677 A researcher reported an RCE in AMD's auto-updater exploitable via MITM due to CRC32 validation; AMD initially denied the bounty.
Outages
- Meta global outage on 2026-06-12 Facebook, Instagram, WhatsApp, and Messenger experienced a four-hour global outage affecting login and feed access on 2026-06-12.
- Cloudflare Dashboard and API control-plane incident resolved Cloudflare's Dashboard and API control plane were unavailable on 2026-06-12; CDN and security features continued serving unaffected.
Developer tools
- tmux 3.7-rc adds floating panes tmux 3.7 release candidate adds floating panes as a new structural layout feature, plus enhancements to copy mode and shell expansion.
- Homebrew 6.0.1 patches the 6.0.0 rollout Homebrew 6.0.1 addresses tap and bundle handling regressions introduced in the 6.0.0 major release from 2026-06-11.
Languages and runtimes
- Spring Boot 4.1.0 released Spring Boot 4.1.0 reaches GA with first-class gRPC support, expanded OpenTelemetry configuration, and SSRF mitigation via InetAddressFilter.
- WASI 0.3 ratified with first-class async WASI 0.3.0 ratified with async moved into the WebAssembly Component Model canonical ABI, replacing WASI 0.2 pollable patterns.
Apple platforms
Infrastructure
Engineering posts
Markets and companies
Hacker News
- If you are asking for human attention, demonstrate human effort A 1,554-point HN essay argues low-effort AI-generated requests should be deprioritized, echoing maintainer burden concerns from open source.
- Open source AI must win An opinion piece arguing for open-weight AI drew 661 points; commenters debated whether open weights protect against government access controls.