2026-08-17
Top stories
- GitHub degraded worldwide with about 20 percent error rates across web, API, Actions, and authentication GitHub reported about 20 percent error rates affecting git operations, pull requests, Actions, and SSO with no vendor fallback available.
- rsync 3.5.0 fixes 33 security issues including a critical daemon access-control bypass rsync 3.5.0 fixes 33 security issues including a daemon access-control bypass and wire-reachable memory corruption in code inside CI pipelines.
- Linux 7.2 released with cache-aware scheduler balancing and Btrfs large folios Linux 7.2 released with cache-aware scheduler, large folios in Btrfs, swap and sandboxing changes that distributions will carry into production.
- Qwen 3.8 27B ships under Apache 2 with over-thinking and throughput caveats Qwen 3.8 27B ships Apache 2 with tool calling and vision working locally from a 17GB quantized build, but throughput falls short of hosted APIs.
ML research
Security
- CISA-ADP score and press coverage disagree on severity for the exploited macOS Screen Sharing bypass CISA-ADP scores the exploited macOS Screen Sharing bypass 9.8 critical with fully remote no-interaction vector, while press coverage reports 7.1.
- A Copilot Autofix commit introduced the GitHub Actions injection that an autonomous agent used to reach Snowflake's Jira Wiz reports Copilot Autofix removed an input-handling pattern to prevent injection, and nothing in review caught the replacement was exploitable.
Outages
Languages and runtimes
Apple platforms
Infrastructure
- DuckDB previews v2.0 with a client/server mode, a new SQL parser, and a new storage format DuckDB previews v2.0 with client-server mode, replaced SQL parser, new default storage format, and reworked C API alongside the in-process model.
- Cloudflare announced Web Analytics on by default for free domains from 2025-10-15 Cloudflare announced Web Analytics on by default for free domains from 2025-10-15, requiring operators to check if the beacon is being served.
Engineering posts
Markets and companies
- Anthropic reported to have passed $11.5B in preliminary second-quarter revenue Bloomberg reports Anthropic preliminary Q2 revenue above 11.5 billion against 787 million a year earlier and positive adjusted income.
- Dash0 acquires Polar Signals, the company behind the open-source Parca profiler Dash0 acquires Polar Signals, maintainer of the open-source profiler Parca, and will replace ClickHouse with the acquired storage engine.