Latest news from IT world

If you use k9s daily, Sofka is worth 10 minutes. It’s a Kubernetes TUI written in Rust by a single developer, released as v0.1.0 in July 2026. It keeps k9s’s keyboard-driven navigation and :command palette, but rebuilds the internals around a single generic resource pipeline instead of k9s’s per-resource renderer files. The project has one […]

OpenAI’s new Astra AI model has completed all 48 challenges in a CAPTCHA-style game, highlighting how quickly AI is catching up with one of the internet’s oldest defenses against bots. CAPTCHAs were designed around a simple idea: humans can easily recognize images, text and objects, while bots struggle with them. That idea is becoming increasingly […]

In August 2026, Cloudflare published the engineering details behind their DNS cache optimization Big Pineapple, the system behind 1.1.1.1 and Gateway DNS, was caching over 250 billion entries at any given moment, each costing 953 bytes. After five targeted changes, that dropped to 420 bytes. Roughly 100TB freed, no new hardware. Here’s exactly what they […]

NVIDIA released Nemotron 3 Ultra this week a 550B-parameter open-weights model that runs enterprise agent workflows at roughly 10x lower cost than GPT-4o. You can download the weights, self-host on your own hardware, and fine-tune on private data. GPT-4o offers none of that. What is NVIDIA Nemotron 3 Ultra? Nemotron 3 Ultra is a Mixture-of-Experts […]

AI coding agents such as Claude Code, OpenAI Codex and Cursor are becoming an increasingly common part of modern software development. They can inspect repositories, run Git commands, execute tests and interact with a developer’s local environment. A newly disclosed class of vulnerabilities, dubbed GitSpawn, shows how this automation can create an unexpected attack surface: […]

A critical vulnerability (CVSS 9.1) in Keycloak lets an unauthenticated attacker reset any user’s password, including admin accounts, without access to the victim’s inbox and without any interaction from them. All versions below 26.7.2 are affected. The fix has been available since August 19, 2026. If you can’t update immediately, disable „Forgot password” across all […]

JDK 27 ships September 15, 2026. The release finalizes two years of incremental work on memory, concurrency and security and it brings one genuinely new capability: post-quantum cryptography in TLS 1.3, built into the JDK itself. Post-quantum crypto in TLS 1.3 JEP 527 adds ML-KEM key encapsulation to TLS 1.3 without requiring external libraries or […]

On August 18, 2026, Varonis Threat Labs published a report on three chained vulnerabilities in Microsoft Copilot Personal, catalogued as CVE-2026-24301 and named CoSnitch. One crafted URL was enough no further interaction required. Copilot would execute the embedded prompt, pull data from every connected OAuth account (Gmail, Google Calendar, Google Drive) and write persistent rules […]

Cursor is an AI code editor built by Anysphere, used by millions of developers across Claude, GPT, and Gemini. On August 14, 2026, SpaceX completed its acquisition of Anysphere for $60 billion in stock. Cursor is now a SpaceX subsidiary. What is Anysphere and what exactly did SpaceX buy? Anysphere is the San Francisco company […]

Meta has entered the growing AI coding agent market with Muse Code, a new coding tool powered by its Muse Spark 1.2 model. The beta release puts Meta in direct competition with tools such as Claude Code and OpenAI Codex. What is Muse Code? Muse Code is designed to go beyond traditional AI coding assistants. […]

If you use Claude Code every day, chances are you have more than one account. Many developers receive a company-managed Claude Code account from their employer while also paying for their own personal Claude Pro or Claude Max subscription. That creates an annoying workflow. During the day you might work on your company’s repositories using […]

If you’re using a modern version of Node.js, your package.json may contain two dependencies you no longer need: dotenv and nodemon. Over the last few Node.js releases, the runtime has introduced native alternatives that simplify development workflows and reduce external dependencies. Native .env Support Instead of installing dotenv and adding: or you can simply start […]

We covered the Hugging Face breach when it broke. HF just published the full forensic timeline, and the technical details are worth going through properly. An autonomous AI agent got into HF’s production Kubernetes cluster, pivoted through the internal network via Tailscale, pulled 136 production credentials, and minted its own signed JWT tokens. 17,600 logged […]

For years, JavaScript developers have been choosing between npm, Yarn, pnpm, and more recently Bun. Each promised faster installs, better dependency management, or a smoother developer experience. Now there’s a new contender: Nub. Unlike Bun, Nub doesn’t try to replace Node.js. Instead, it augments the existing Node ecosystem with a collection of high-performance developer tools, […]

Hugging Face confirmed last week that an autonomous AI agent breached its production infrastructure through a malicious dataset. The attack is notable on its own. But the detail that will matter longer-term: when the Hugging Face team tried to use hosted LLMs to analyze the attack artifacts, the models refused. Safety guardrails couldn’t tell the […]

Since July 13, 2026, xAI has server-side disabled the upload. But if your team used Grok Build before that date, your full repository history, including secrets in commit history, may have already left the machine. What actually happened Grok Build, xAI’s coding CLI, was sending entire tracked Git repositories to a Google Cloud Storage bucket […]

Since June 1, 2026, GitHub Copilot no longer runs on a flat subscription. Every model interaction now draws from a monthly credit balance and if your team uses agent mode, the first full billing cycle may have been a shock. What changed GitHub replaced its „Premium Request Units” model with GitHub AI Credits. One credit […]

Since June 23, 2026, AWS offers a new recertification path called Maintain (open beta): complete curated training and hands-on labs on AWS Skill Builder and add one year of validity to your certification. No exam appointment, no testing center. What is the AWS Maintain program? The Maintain path lets holders of active AWS certifications extend […]

For years, website optimization has focused on search engines. We optimized for Google, improved Core Web Vitals, added structured data, and built XML sitemaps. The goal was simple: help search engines understand and rank our content. But a new type of visitor is becoming increasingly important: AI agents. Whether it’s ChatGPT, Gemini, Claude, Perplexity, or […]

pnpm is a fast, disk-efficient package manager for Node.js. It installs dependencies up to 3× faster than npm, uses up to 80% less disk space across multiple projects, and enforces strict dependency resolution by default. pnpm is fully compatible with the npm registry and is used in production by teams behind Vercel, Microsoft, Vite, Vue, […]

DBngin is a free, native macOS application that lets developers run local instances of PostgreSQL, MySQL, MariaDB, Redis, MongoDB, and more without Docker, virtual machines, or Homebrew configuration. Built by the team behind TablePlus, DBngin gives you a simple GUI to spin up, stop, and switch between database engines and versions on your Mac in […]

Ky is a tiny, modern HTTP client for JavaScript, built on top of the native Fetch API. It works in browsers, Node.js, Bun, Deno, and Web Workers, weighs around 7 KB minified + gzipped, and provides shortcuts for JSON, automatic retries, timeouts, and hooks all with a clean, promise-based API. If you’ve been writing fetch […]

SST Ion is the open-source deployment engine for SST (Serverless Stack Toolkit). It replaces the legacy CDK + CloudFormation pipeline with Pulumi and Terraform, delivering faster deployments, multi-cloud support, and a simpler component model. As of SST v3, Ion is the default and recommended engine for all new projects. What Is SST Ion? SST Ion […]

Google’s new AI design tool doesn’t just generate interfaces – it introduces a new way to define them Google has unveiled Stitch, an experimental AI design tool from Google Labs that turns ideas into UI layouts and frontend code. But the real breakthrough isn’t the UI generation itself. It’s something much more interesting: DESIGN.md – […]

You don’t need to rebuild your app to fix Core Web Vitals. Most issues come from images, scripts, server response time, and layout shifts. Fixing just a few of these can move your site from “poor” to “good” in real user data. Think You Need a Rewrite? You Probably Don’t A lot of teams assume: […]

Anthropic has officially unveiled Claude Design, a new experimental product from its Labs division that pushes AI beyond text and code into full visual creation. The launch signals a major shift: AI is no longer just assisting developers – it’s starting to replace entire early-stage design workflows. What is Claude Design? Claude Design is a […]

Google continues to position website performance as a key ranking factor, yet a significant number of websites still fail to meet the recommended Core Web Vitals thresholds. What matters today? The Core Web Vitals framework remains centered around three primary metrics: Among these, INP has emerged as the most critical metric, replacing previous interaction measurements […]

The JavaScript ecosystem moves fast, but some developer tools… not so much. One of them is the official npm website – npmjs.com, still widely used but often criticized for its performance and UX. A new project, npmx.dev, is starting to gain attention as a lightweight alternative focused on speed and developer experience. What is npmjs.com? […]