the log · 163 entries
#software-development
Every entry filed under Software Development.
all 163
ai-machine-learning 16
ai-engineering 79
infrastructure 122
machine-learning 3
programming 66
software-development 44
technology 115
technology-leadership 29
tutorials 1
2026.10.206 min read
OpenCode's hosted Console leaked provider keys, and the bills landed before the email did
OpenCode says 1.4% of Console users had stored OpenAI, Anthropic and Google keys exposed from a legacy system on October 17. Users saw bills up to $1,700 before the notice arrived.
2026.10.177 min read
PostgreSQL 19 slips to November 19 after LLM code review found more bugs than committers could fix
PostgreSQL 19 GA moved from October to November 19 after eight to ten features were reverted. Peter Eisentraut says LLM code review raised the quality bar after the code was committed.
2026.10.157 min read
Three Ivanti zero-days got root on a fully patched VPN, and the integrity checker saw nothing
Attackers chained three Connect Secure bugs to root a current 22.8R2.4 appliance on October 3. Ivanti had fixed part of the chain in July and never finished backporting it.
2026.10.136 min read
Someone pushed malware to Zod's main branch with a stolen SSH key, and no release shipped it
A stolen git credential put a malware loader on Zod's main branch on September 21. A release workflow that a push key cannot trigger kept it out of 346 million weekly installs.
2026.10.127 min read
Bitwarden's store apps go commercial next release, and the GPL build will lose future features
Bitwarden's next App Store and Play builds switch to its commercial license. Every current feature ships in both builds. Bitwarden says some future ones will not.
2026.10.116 min read
AhsayCBS backup consoles are being exploited, and the version NVD called fixed is vulnerable
Huntress saw AhsayCBS exploited from October 7, three days after the CVEs went public. The version the advisories called fixed, 10.3.4, is vulnerable, and there is no patch.
2026.10.108 min read
Cloudflare bought Deno for celld, and the Deno runtime has one year of patches left
Cloudflare acquired Deno on October 9. Deno Deploy shuts down in six months, the runtime gets one year of security fixes, and the team will merge celld into workerd.
2026.10.096 min read
Atlassian's double colon bug reads your Crowd password, and scanners showed up in two hours
Atlassian disclosed CVE-2026-21589 on October 5. watchTowr published the traversal trick on October 6, and honeypots logged exploitation attempts within two hours.
2026.10.067 min read
Google stopped paying for bugs in Go and Angular on October 1, and curl's queue shows why
Google paused its open source bug bounty on October 1 over automated junk reports. curl's confirmed rate fell under 5 percent before it quit paying in January.
Nothing on this page matches. Press Enter to search every entry.