Top stories

  1. GitHub degraded worldwide with about 20 percent error rates across web, API, Actions, and authentication GitHub reported about 20 percent error rates affecting git operations, pull requests, Actions, and SSO with no vendor fallback available.
  2. rsync 3.5.0 fixes 33 security issues including a critical daemon access-control bypass rsync 3.5.0 fixes 33 security issues including a daemon access-control bypass and wire-reachable memory corruption in code inside CI pipelines.
  3. Linux 7.2 released with cache-aware scheduler balancing and Btrfs large folios Linux 7.2 released with cache-aware scheduler, large folios in Btrfs, swap and sandboxing changes that distributions will carry into production.
  4. Qwen 3.8 27B ships under Apache 2 with over-thinking and throughput caveats Qwen 3.8 27B ships Apache 2 with tool calling and vision working locally from a 17GB quantized build, but throughput falls short of hosted APIs.

ML research

  1. Vero reports the strongest coding agent fully solves 27 of 43 repository-level verification tasks Vero is a repository-level verification benchmark where the strongest coding agent fully solves 27 of 43 tasks and closes nothing on the hardest.

Security

  1. CISA-ADP score and press coverage disagree on severity for the exploited macOS Screen Sharing bypass CISA-ADP scores the exploited macOS Screen Sharing bypass 9.8 critical with fully remote no-interaction vector, while press coverage reports 7.1.
  2. A Copilot Autofix commit introduced the GitHub Actions injection that an autonomous agent used to reach Snowflake's Jira Wiz reports Copilot Autofix removed an input-handling pattern to prevent injection, and nothing in review caught the replacement was exploitable.

Outages

  1. Anthropic authentication issue took Claude services down for about 36 minutes Anthropic reported an authentication issue taking claude.ai, platform.claude.com, the API, Code, and Cowork down for about 36 minutes.

Languages and runtimes

  1. Rhombus 1.1 adds annotation definition forms and an as binding form Rhombus 1.1 adds annotation definition forms and an as binding form, letting users define annotations without writing macro-time code.

Apple platforms

  1. Apple accepts binding commitments to align App Tracking Transparency prompts for third-party apps Apple accepts binding commitments to ensure App Tracking Transparency prompts for third-party apps are neutral in content, wording, and layout.

Infrastructure

  1. DuckDB previews v2.0 with a client/server mode, a new SQL parser, and a new storage format DuckDB previews v2.0 with client-server mode, replaced SQL parser, new default storage format, and reworked C API alongside the in-process model.
  2. Cloudflare announced Web Analytics on by default for free domains from 2025-10-15 Cloudflare announced Web Analytics on by default for free domains from 2025-10-15, requiring operators to check if the beacon is being served.

Engineering posts

  1. Embedded engineer argues RISC-V wins on availability rather than ISA design An embedded engineer argues RISC-V wins on availability, with one toolchain and instruction set spanning ten cent parts to MMU-capable SoCs.

Markets and companies

  1. Anthropic reported to have passed $11.5B in preliminary second-quarter revenue Bloomberg reports Anthropic preliminary Q2 revenue above 11.5 billion against 787 million a year earlier and positive adjusted income.
  2. Dash0 acquires Polar Signals, the company behind the open-source Parca profiler Dash0 acquires Polar Signals, maintainer of the open-source profiler Parca, and will replace ClickHouse with the acquired storage engine.

Hacker News

  1. HN thread reports some Claude Fable 5 requests answered by Opus 5 An HN thread reports some Claude Fable 5 requests answered by Opus 5 instead, described as a safeguards measure but uncorroborated elsewhere.