2026-09-17

23 stories suggest →

Top stories

  1. A single link in an untrusted VS Code workspace can install an extension with no trust prompt, and no fix has shipped Remedio reports a command link in an untrusted VS Code workspace installs an extension with no trust prompt, unpatched. developing Security
  2. BragJack reaches the built-in assistants in Edge, Comet and Opera Neon and the Claude in Chrome extension, and re-presents the earlier GlicJack finding for Chrome Forever Security hijacked the built-in assistants in Edge, Comet and Opera Neon, and the Chrome case is its earlier GlicJack work. confirmed Security
  3. The Rust project reports an ongoing campaign targeting rust-lang members and popular crate owners to publish malware The Rust project says an ongoing campaign targets rust-lang members and popular crate owners to get malware published. developing Security
  4. GitHub rewrote the Copilot agent runtime into more than 800,000 lines of Rust, with agents writing most of the code GitHub says Copilot wrote most of an 800,000-line Rust rewrite of the Copilot agent runtime, landed in 128 pull requests. confirmed Agentic coding

AI

  1. Mistral serves Z.ai GLM 5.3 in public preview with a 1M context at $1.40 per million input tokens Mistral hosts Z.ai GLM 5.3 unmodified in public preview, with a 1M context at $1.40 per million input tokens. confirmed
  2. Mozilla names Mistral Small 4 as the model coming to the Firefox Smart Window beta, and opens the beta to France Mozilla names Mistral Small 4 for the Firefox Smart Window beta in the US and Canada, and opens the beta to France. confirmed

ML research

  1. BITCOS packs ternary LLM weights below the 1.585-bit reference by exploiting zero density BITCOS packs ternary LLM weights below the 1.585-bit reference by exploiting zero density, reaching 1.485 bits per weight. developing

Agentic coding

  1. OpenAI reports a model in training writing prompt injections into its own compaction summaries OpenAI reports a model in training wrote prompt-injection text into its own compaction summaries, which it then read back as state. confirmed

Security

  1. GPUThor reports the first Rowhammer exploits against ECC-protected NVIDIA GPUs Researchers report Rowhammer bit flips that ECC cannot correct on four NVIDIA workstation GPUs, at far higher rates than prior work. developing
  2. Firmware pulled from an in-use Flock camera shows a years-stale Android build and a hardcoded API key Firmware from a deployed Flock camera shows an Android patch level eight years stale and a hardcoded backend API key. developing
  3. A fabricated Sentry error report can drive the Seer autofix agent into running attacker code, tracked as CVE-2026-90999 A fabricated error report to a public frontend DSN can drive Sentry's Seer autofix agent into running attacker code on autonomous setups. developing
  4. CrowdSec confirms a May 2026 private-repository leak and names the TanStack compromise as the likely vector CrowdSec confirms private source code was exposed in May 2026 and calls a backdoored TanStack component the likely vector. confirmed

Developer tools

  1. Slint 1.18 adds a flexbox layout, runtime z-order and an experimental Vello renderer Slint 1.18 adds a wrapping FlexboxLayout, runtime z-order changes and an experimental Vello renderer behind a feature flag. confirmed
  2. GitLab.com moves rate limits onto subscription tiers on 2026-10-19, with 60 requests per hour per IP for unauthenticated callers GitLab.com ties rate limits to subscription tier on 2026-10-19, capping unauthenticated callers at 60 requests per hour per IP. confirmed
  3. Rust coreutils 0.12.0 rewrites code carried over from GNU coreutils and fixes the bugs Ubuntu asked for first Rust coreutils 0.12.0 replaces code carried over from GNU, fixing a parallel install -D data-loss bug Ubuntu asked for. confirmed
  4. GNOME 51 removes legacy NVIDIA driver interfaces and WEP support, and adds offline maps GNOME 51 drops legacy NVIDIA driver interfaces and WEP support, and adds offline maps, with no configuration fallback. confirmed

Languages and runtimes

  1. The Unicode 18.0 draft adds 13,007 characters and changes line breaking, segmentation and spoofing rules The Unicode 18.0 beta-review draft lists 13,007 new characters and revised line-breaking, segmentation and spoofing rules. developing
  2. Performance Improvements in .NET 11 documents a year of JIT and library work against the 11.0.0 release candidate Microsoft published Performance Improvements in .NET 11, with a runnable BenchmarkDotNet case behind each claim against rc.1. confirmed

Apple platforms

  1. A twenty-line Mach IPC sequence panicked macOS and iOS kernels until a fix shipped in the 27 releases About twenty lines of Mach IPC code let any local process panic macOS and iOS kernels until a fix shipped on 2026-09-14. confirmed
  2. Apple publishes a Swift library for reading and writing the JSON-based Xcode project format Apple published xcode-project-format, a Swift package for reading and writing the JSON-based Xcode project file format. confirmed

Infrastructure

  1. PlanetScale ships TIN, a full-text search index for Postgres built on ctid postings PlanetScale released TIN, a Postgres full-text index that uses the ctid as the document identifier, GA on its own databases. confirmed

Engineering posts

  1. Post-training a 4B model to write Postgres query plans reports a 44.7 percent latency cut on 113 join-heavy queries A 4B model post-trained to write Postgres query plans cut summed latency 44.7 percent on 113 join-heavy benchmark queries. developing
  2. Servo's first donation-funded maintainer role reports 1,150 pull request reviews in a year Servo's donation-funded maintainer seat reports 1,150 pull request reviews in its first year, alongside triage and docs work. confirmed