Critical Flaw in JFrog Artifactory Allows Authentication Bypass and Admin Takeover
JFrog Artifactory auth bypass CVE-2026-82329 exploited to generate admin tokens without authentication, raising supply chain concerns.
Software development and technology news, covering programming languages, dev tools, open source, cloud services, DevOps, cybersecurity, and startup ecosystem.
JFrog Artifactory auth bypass CVE-2026-82329 exploited to generate admin tokens without authentication, raising supply chain concerns.
Softaculous disclosed a 33-hour BGP hijack. Routes via Hetzner were hijacked to spoof update servers and fraudulently obtain Let's Encrypt certificates.
Coding agent OpenClaude, which integrates multiple cloud and local models into a single CLI, has been released.
A Go-based tool that provides project name-based, stable HTTPS URLs for local development environments. Features include public tunneling and selective path exposure.
A series of patches for the Linux ath11k driver for Qualcomm WiFi 6 chipsets has been proposed, reducing network latency by up to seven times.
The Trump administration proposes a rule to permanently raise the H-1B visa fee for high-skilled foreign workers to $103,265. Concerns arise over its impact on tech, education, and research sectors.
Open-source Free Claude Code integrates 50 providers and 9 coding agents in a single UI. It automates failure handling and token consumption optimization with over 1.3 billion free tokens monthly.
Former Yahoo engineer Iwamoto points out that beyond using AI, business acumen and human qualities are essential.
Register columnist Rupert Goodwins analyzes the "Software Should Work 2026" conference from a binge-watching perspective, praising its 13 talks on software reliability for sparking high interest among developers.
A CLI tool "rolodex" that generates CSS for browser extensions to highlight Reddit friends has been released. It enables implementation on sites like Tildes and Lobsters.
Server-side JavaScript runtime "Bun 1.4" officially released. Rewrite from Zig to Rust reduces idle CPU usage to 1/5 and cuts memory consumption by up to 32%. Node.js compatibility also improved.
Linux 7.3 kernel introduces a 120-second timeout for EFI runtime services to tackle problematic firmware causing system-wide freezes.
OpenAI releases Codex CLI. A coding agent that runs on a local PC, offering integration with ChatGPT plans and multiple installation methods.
A UK-based company runs 29 servers on NetBSD, supporting 4800 users. This case reports achieving high stability in a mission-critical environment handling MySQL and Apache.
Rust-based OS Redox OS switches to EEVDF scheduler, achieving dramatic performance improvements including a 2.6x increase in throughput.
Google releases the open-source compiler HEIR, enabling AI inference on encrypted data without decryption using fully homomorphic encryption, aiming for a new foundation for privacy-preserving AI services.
Server Actions are not a standalone feature; they add an update pathway to a server-led UI built with RSC. We clarify their relationship with SSR and Hydration.
A next-generation trait solver, which comprehensively overhauls the Rust compiler's internals, has been enabled in the nightly build. Over 200 known bugs fixed on GitHub, with impacts on compile times also confirmed.
The open-source application platform Cobalt enables app execution on Kobo e-book readers.
Activist indicted by federal grand jury for entering "duress passcode" to wipe device during border check. New chapter in digital privacy vs. law enforcement debate.