2. Updated PHP version released to GitHub (github.com)
PHP version 8.2.35 has been released on GitHub, bringing updates and improvements to the language. Developers can check the latest changes and enhancements in this new tag.
3. Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds (scotthelme.co.uk)
Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
A security researcher has uncovered that some of eMudhraβs certificate authority private keys are alarmingly simple numbers, including just β4β and β56.β This vulnerability raises serious concerns about the integrity of digital certificates and the potential for widespread exploitation.
4. PHP Foundation's Overview of CVE-2026-109618 and CVE-2026-109619 (thephp.foundation)
Learn about the critical security vulnerabilities CVE-2026-109618 and CVE-2026-109619, including how they were discovered and the measures taken to address them. This overview provides insight into the ongoing efforts to enhance PHP security.
5. The 1.5Β°C goal of the Paris Agreement is no longer viable (unric.org)
The UNEPβs Emissions Gap Report 2026 indicates that surpassing the 1.5Β°C threshold is now unavoidable, emphasizing the critical need for immediate emissions reductions to mitigate further climate change. The report highlights the urgency of action to reverse current warming trends.
6. The Future of CSS (www.joshwcomeau.com)
Get a sneak peek at the upcoming CSS features being discussed by browser vendors through the Interop project. This overview highlights the innovations that could soon enhance web design capabilities.
7. EA is shutting down BioWare (www.theverge.com)
EAβs decision to close BioWare comes with significant layoffs, impacting around 400 employees. This move raises questions about the future of the beloved game studio and its franchises.
8. The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck (www.techdirt.com)
9. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
A malicious version of LiteLLM 1.107.0 has been distributed on PyPI, which includes a credential stealer and a backdoor that activates with every Python startup. The article details how this compromised package was introduced, what sensitive information it targets, and how to identify if your system has been affected.
10. PHP2Shell: AI uncovers critical RCE in PHP (www.wiz.io)
A recent vulnerability in the core PHP engine has been identified, allowing for remote code execution and potential memory disclosure similar to the Heartbleed bug. This flaw poses significant risks for web applications relying on PHP, making it essential for developers to address the issue promptly.
11. Muse exposes users' personal and business secrets when they share conversations (arstechnica.com)
Meta has paused the sharing feature of Muse as it looks into privacy concerns after usersβ personal and business information was unintentionally exposed. Find out more about the implications of this issue and what it means for users.
12. Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case (www.cnbc.com)
Meta faces a hefty $25 billion penalty in connection with the Cambridge Analytica scandal, marking a significant legal outcome in New Mexico. This development highlights ongoing accountability issues surrounding data privacy and corporate misconduct.
13. DuckDB 2.0.0 LTS "Cinnamon Teal" (duckdb.org)
DuckDB version 2.0.0 LTS introduces significant enhancements including the polished Quack protocol, asynchronous I/O, and a new VARIANT type, along with features like agent mode and triggers. With nearly 20,000 commits since the last version, this release marks a major milestone for the database project.
14. Claude Duet (claude.com)
Claude Duet is an AI assistant that manages your email, calendar, and reminders, alerting you when your attention is needed. You can sign up for the waitlist to be among the first to try it out.
15. Mistral Large 4 (docs.mistral.ai)
Mistral Large 4 introduces a cutting-edge multimodal model that combines advanced AI capabilities with an impressive architecture, boasting 52 billion active parameters. Its unique Mixture-of-Experts design enhances its performance across various tasks, making it a significant development in the field of artificial intelligence.
16. Railway Security(Compromise) Disclosure (blog.railway.com)
Railway has identified unusual activity in its systems that manage customer environment variables, indicating a potential security compromise. Immediate action is advised to address the situation and protect sensitive information.
17. The Other Epidemic: Trying to get off benzodiazepines (www.thebeliever.net)
18. PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out (www.php.net)
20. Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site (krebsonsecurity.com)
22. GitLab CVSS 10.0 Integer Overflow issue (docs.gitlab.com)
23. OpenAI models are coming to Google Cloud (openai.com)
25. Qwen3-Coder writes less secure code when told it's for a US persona (www.hirundo.io)
26. Google's Rust Style Guide (google.github.io)
Google has released a style guide for Rust, aimed at standardizing coding practices for its open-source projects. This guide is essential for developers looking to maintain consistency and quality in their Rust code contributions.
27. Way to Play Super Mario 64: On Apple Vision Pro (www.pagetable.com)
Experience Super Mario 64 like never before as it transforms into an interactive diorama on the Apple Vision Pro. Move around your real-world table to explore each level from unique angles while using a game controller to guide Mario.