2. Updated PHP version released to GitHub (github.com)

Tag for php-8.2.35

PHP version 8.2.35 has been released on GitHub, bringing updates and improvements to the language. Developers can check the latest changes and enhancements in this new tag.

3. Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds (scotthelme.co.uk)

One of eMudhra's certificate authority private keys is the number 4.

Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their

A security researcher has uncovered that some of eMudhra’s certificate authority private keys are alarmingly simple numbers, including just β€œ4” and β€œ56.” This vulnerability raises serious concerns about the integrity of digital certificates and the potential for widespread exploitation.

4. PHP Foundation's Overview of CVE-2026-109618 and CVE-2026-109619 (thephp.foundation)

Describing the story behind how critical security vulnerabilities were found and fixed.

Learn about the critical security vulnerabilities CVE-2026-109618 and CVE-2026-109619, including how they were discovered and the measures taken to address them. This overview provides insight into the ongoing efforts to enhance PHP security.

5. The 1.5Β°C goal of the Paris Agreement is no longer viable (unric.org)

UNEP's Emissions Gap Report 2026 warns that exceeding 1.5Β°C is inevitable and calls for urgent emissions cuts to limit warming and reverse the trend.

The UNEP’s Emissions Gap Report 2026 indicates that surpassing the 1.5Β°C threshold is now unavoidable, emphasizing the critical need for immediate emissions reductions to mitigate further climate change. The report highlights the urgency of action to reverse current warming trends.

6. The Future of CSS (www.joshwcomeau.com)

Every year, browser vendors collaborate via the Interop project to synchronize their efforts on new HTML/CSS/JS features. This year, there’s a ton of super exciting features being considered! In this blog post, we’ll explore the CSS of the future, to get a glimpse of what we’ll soon be able to do.

Get a sneak peek at the upcoming CSS features being discussed by browser vendors through the Interop project. This overview highlights the innovations that could soon enhance web design capabilities.

7. EA is shutting down BioWare (www.theverge.com)

The company is also laying off around 400 staffers.

EA’s decision to close BioWare comes with significant layoffs, impacting around 400 employees. This move raises questions about the future of the beloved game studio and its franchises.

9. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.

A malicious version of LiteLLM 1.107.0 has been distributed on PyPI, which includes a credential stealer and a backdoor that activates with every Python startup. The article details how this compromised package was introduced, what sensitive information it targets, and how to identify if your system has been affected.

10. PHP2Shell: AI uncovers critical RCE in PHP (www.wiz.io)

Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

A recent vulnerability in the core PHP engine has been identified, allowing for remote code execution and potential memory disclosure similar to the Heartbleed bug. This flaw poses significant risks for web applications relying on PHP, making it essential for developers to address the issue promptly.

12. Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case (www.cnbc.com)

Meta to pay $25 billion in penalties related to Cambridge Analytica scandal in New Mexico.

Meta faces a hefty $25 billion penalty in connection with the Cambridge Analytica scandal, marking a significant legal outcome in New Mexico. This development highlights ongoing accountability issues surrounding data privacy and corporate misconduct.

13. DuckDB 2.0.0 LTS "Cinnamon Teal" (duckdb.org)

The DuckDB team is happy to announce that today we're releasing DuckDB version 2.0.0 LTS, codenamed β€œCinnamon Teal” (Spatula cyanoptera). This is our biggest feature release so far, and it ships a polished version of the Quack protocol, asynchronous I/O, a first-class VARIANT type, agent mode, triggers, an extensible SQL parser and much more, built from close to 20,000 commits since DuckDB 1.5.

DuckDB version 2.0.0 LTS introduces significant enhancements including the polished Quack protocol, asynchronous I/O, and a new VARIANT type, along with features like agent mode and triggers. With nearly 20,000 commits since the last version, this release marks a major milestone for the database project.

14. Claude Duet (claude.com)

Claude Duet is a personal AI agent you message. It handles your inbox, calendar and follow-ups and messages you when something needs you. Join the waitlist.

Claude Duet is an AI assistant that manages your email, calendar, and reminders, alerting you when your attention is needed. You can sign up for the waitlist to be among the first to try it out.

15. Mistral Large 4 (docs.mistral.ai)

Mistral Large 4 is a state-of-the-art, open-weight, general-purpose multimodal model with a granular Mixture-of-Experts architecture. It features 52B active parameters and 1.05T total parameters, and a 1.6B vision encoder.

Mistral Large 4 introduces a cutting-edge multimodal model that combines advanced AI capabilities with an impressive architecture, boasting 52 billion active parameters. Its unique Mixture-of-Experts design enhances its performance across various tasks, making it a significant development in the field of artificial intelligence.

16. Railway Security(Compromise) Disclosure (blog.railway.com)

Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention

Railway has identified unusual activity in its systems that manage customer environment variables, indicating a potential security compromise. Immediate action is advised to address the situation and protect sensitive information.

26. Google's Rust Style Guide (google.github.io)

Style guides for Google-originated open-source projects

Google has released a style guide for Rust, aimed at standardizing coding practices for its open-source projects. This guide is essential for developers looking to maintain consistency and quality in their Rust code contributions.

27. Way to Play Super Mario 64: On Apple Vision Pro (www.pagetable.com)

Super Mario 64 becomes a living diorama on Apple Vision Pro. Each level sits on your real table, and you walk around it while you play with a game controller. You are the camera: lean in for a closer look, or step around the table to see Mario from any side.

Experience Super Mario 64 like never before as it transforms into an interactive diorama on the Apple Vision Pro. Move around your real-world table to explore each level from unique angles while using a game controller to guide Mario.

Article Details

Browse by Date

Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open