2026-08-13

26 stories suggest →

Top stories

  1. Rapid7 publishes a proof-of-concept for critical SharePoint auth bypass CVE-2026-55040, and a threat intelligence firm reports it used against honeypots Rapid7 released exploit code for CVSS 9.1 SharePoint auth bypass, with Defused observing the code used against its honeypots. confirmed Security
  2. Zoom patches a use-after-free in the annotator that lets a meeting participant run code on another participant's machine Zoom released bulletins for CVE-2026-53415, a use-after-free in the annotator rated CVSS 8.3, and three other vulnerabilities. confirmed Security
  3. DeepSeek schedules peak and off-peak billing for 2026-08-16, raising cache-hit rates six to twelve times, and repoints the deepseek-v4-pro alias DeepSeek moves to peak and off-peak pricing on 2026-08-16, raising cache-hit costs about six times off-peak and twelve times at peak. confirmed AI
  4. Flutter 3.47 makes the standalone Material and Cupertino 1.0 packages opt-in, with in-SDK deprecation scheduled for November Flutter 3.47 publishes standalone Material and Cupertino packages and schedules in-SDK library deprecation for the November stable release. confirmed Dev tools
  5. Poland's digitisation minister says 19 million medical records were stolen from electronic records provider MyDr Poland's digitisation minister reported that 19 million medical records were stolen from MyDr, affecting over 12,000 healthcare facilities. confirmed Security

AI

  1. DeepSeek publishes the 1.7T-parameter DeepSeek-V4-Pro-0813 weights under the MIT licence DeepSeek released 1.7T-parameter model weights under MIT licence with no revenue thresholds, making self-hosting a hardware decision. confirmed
  2. Redwood Research and Anthropic publish the Conceptual Reasoning Index for reasoning that has no verifiable answer Redwood Research and Anthropic published three benchmarks for reasoning tasks without verifiable answers, with Opus 5 scoring 73.6 on the index. confirmed

Agentic coding

  1. DeepSeek opens the source of DeepSeek Harness, a plugin-composed agent harness, as a developer preview DeepSeek released its agent harness as MIT-licensed source, logging every system prompt, tool call, and context injection for replay and fork. confirmed
  2. Zed introduces Delta, a separate application built on a database that replicates the agent conversation and the worktree together Zed announced Delta, a new application syncing agent sessions and worktrees with Claude Code support, currently in private beta. confirmed
  3. A study of 1,867 repositories reports agent instruction files more than triple over their lifetime and older instructions are less likely to be deleted A study of 1,867 repositories measured 226 percent growth in agent instruction files, reporting older instructions less likely to be deleted. developing

Security

  1. A presidential memorandum creates a programme for vetted US companies to run cyber effects operations against foreign criminal groups A presidential memorandum authorized US companies to conduct cyber operations against foreign criminal organizations under DOJ and DHS approval. confirmed

Outages

  1. Namecheap runs emergency maintenance after a power outage at its Phoenix datacenter Namecheap responded to an emergency caused by a power outage at its Phoenix datacenter affecting domains, hosting, and customer support. developing

Developer tools

  1. OpenAI puts the ChatGPT and Codex desktop app for Linux into preview OpenAI released the ChatGPT and Codex desktop app for Linux in preview on Ubuntu, Debian, and Fedora as deb and rpm packages. confirmed
  2. Databricks open-sources Metals v2, a Java and Scala language server built to index a 26M-line Bazel monorepo before build sync Databricks open-sourced Metals v2, a language server for Java and Scala that indexes source before build sync in large monorepos. confirmed

Languages and runtimes

  1. Apache Fory JSON 1.6.0 publishes JMH figures putting it at 3.5x to 10.9x Jackson throughput on Java Apache Fory JSON 1.6.0 published JMH benchmarks showing 3.5x to 10.9x Jackson throughput and a closed-world subtype model. confirmed
  2. Delphi 13 Community Edition brings the free edition forward from 12.1 with a ternary operator and a 64-bit IDE Delphi 13 Community Edition moved the free edition from 12.1 with a 64-bit IDE, conditional expressions, and updated mobile target requirements. confirmed

Apple platforms

  1. SLAC, a CPU-to-GPU side-channel attack on the Apple Silicon system-level cache, is accepted to ACM CCS 2026 A paper on SLAC, a CPU-to-GPU side-channel through Apple Silicon's shared cache, was accepted to ACM CCS 2026 achieving 94.8 percent accuracy. developing

Linux and kernel

  1. LWN reports the FUSE maintainer prototyping a replacement protocol and adding sub-maintainers The FUSE maintainer is prototyping fusex, a replacement protocol at 2,000 lines against 20,000, and added two new MAINTAINERS subsystems. confirmed

Infrastructure

  1. Deno Land open-sources celld, which runs Cloudflare Workers and Durable Objects on your own nodes with a bucket as the only coordinator Deno Land open-sourced celld, which runs Wrangler bundles and Durable Objects on your own nodes with S3 as the sole coordinator. confirmed
  2. Cloudflare makes Certificate Transparency Monitoring generally available by filtering out its own issuances Cloudflare made Certificate Transparency Monitoring generally available by filtering out its own-issued certificates on 650,000 customer domains. confirmed

Engineering posts

  1. Antithesis reports reproducing the SQLite WAL-Reset bug in 15 minutes and says 3.51.3 closes it Antithesis reproduced the SQLite WAL-Reset bug against 3.51.2 using a generic concurrent workload and confirmed 3.51.3 closes it. confirmed
  2. Chrome's partial IDCT scaling explains why small JPEGs render differently than in Firefox Chrome decodes JPEGs at eighth-denominator fractions using partial IDCT, explaining why small JPEGs render differently than in Firefox. confirmed
  3. A tour of yy, the unnamed double-to-string algorithm living inside yyjson A post documents yy, the double-to-string algorithm in yyjson, which needs one multiplication where Schubfach needs two or three. confirmed
  4. Oxide describes what Kubernetes integration exposed in its own stack, including a CSI plugin blocked on disk hot-plug Oxide identified gaps in Kubernetes integration including disk hot-plug as the blocker for persistent volumes on its hardware platform. confirmed

Hacker News

  1. A post arguing AI is hollowing out mid-level software engineering draws more than 700 comments A post arguing AI removes mid-level engineering work generated over 700 Hacker News comments with disagreement on agent impact. discussion
  2. Show HN: Woxi, a Wolfram Language interpreter written in Rust Woxi is a Wolfram Language interpreter written in Rust offering a browser playground, command-line tool, and notebook editor. discussion