1 feed
2 min
TOPIC
Security
Vulnerabilities, supply chain risk, and defensive engineering. We cover disclosures with enough detail to judge your own exposure, and skip the vendor scare copy that usually surrounds them.
10TODAY
8FEEDS
4mMEDIAN
FEEDS
Vercel
10
Techmeme
9
Schneier on Security
6
Krebs on Security
6
Hacker News
4
Lobsters
3
IEEE Spectrum
3
Kotlin
3
SECURITY
Everything in Security.
EU rules on AI models become enforceable. What's going to change?
Why it matters — Teams deploying or building AI models for the EU market now face compliance requirements around training data transparency, copyright disclosure, and risk mitigation for frontier models. The regulatory burden may delay EU launches of new AI models and could require shifting resources from engineering to legal compliance.
2 feeds
6 min
Cortex completes OSTIF security audit
Why it matters — Operators running Cortex for multi-tenant observability data can now deploy a version with verified fixes for seven security findings, including six medium-severity issues. The audit specifically validated the confidentiality, integrity, and availability of tenant boundaries and cluster operations, which are critical for multi-tenant isolation.
1 feed
2 min
Californians' data deletion requests, DROP, become enforceable Aug. 1
Why it matters — Systems handling California resident data must now process bulk deletion requests submitted through the state portal, as non-compliance carries a penalty of $200 per day per affected resident. The state regulator has already demonstrated a willingness to enforce these rules, having fined twelve data brokers for failing to register.
1 feed
3 min
The EU's AI Act enforcement powers take effect, letting it evaluate AI models before regional release, restrict market access, fine model providers, and more (Kai Nicol-Schwarz/CNBC)
Why it matters — For teams shipping AI models or model-powered products into the EU, a new gate now sits between development and deployment: regulators can evaluate a model prior to release and, where needed, block or fine it. The change shifts some compliance burden from self-attestation toward regulator review, so release planning, documentation, and risk classification need to be treated as gating steps rather than after-the-fact paperwork.
1 feed
44 min
How Google used AI agents to find and fix 1,072 Chrome security bugs - in 60 days
Why it matters — With billions of users relying on Chrome, faster vulnerability detection reduces the window for attackers to exploit flaws. The AI‑driven workflow cuts weeks of manual analysis, freeing developer resources and enabling more frequent security updates. This shift may lead to a twice‑weekly patch cadence to maintain protection at scale.
1 feed
11 min
Sources: South Korean AI chip designer DeepX raised a ~$29M Series D at a ~$2.2B valuation, and is in talks to raise ~$209M at a ~$2.4B valuation by September (Yoolim Lee/Bloomberg)
Why it matters — The valuation jump to roughly four times its previous level signals strong capital interest in alternative AI hardware vendors. If the larger raise succeeds, it would provide DeepX the resources to scale production, potentially offering engineers new silicon options for AI workloads.
1 feed
42 min
Show HN: Bor – Open-source policy management for Linux desktops
Why it matters — For teams managing Linux desktop fleets, Bor now covers more of the policy surface—email clients, an enterprise browser, and host firewalls—reducing the number of separate configuration tools needed. The security hardening and per-action RBAC make it more viable for production deployments where auditability and least-privilege admin access matter.
1 feed
5 min
Two independent teams used GPT-5.6 Sol Ultra on the same quantum cryptography problem, filing papers 3 hours apart, raising questions about scientific credit (Peter Hall/Scientific American)
Why it matters — When powerful AI models can rapidly solve hard problems, the likelihood of simultaneous independent discovery spikes, and existing norms for assigning scientific priority break down. Researchers and institutions now face a governance gap: credit assignment, peer review, and preprint timing conventions were not designed for AI-accelerated parallel breakthroughs.
1 feed
54 min
Sources detail the troubled development of Tencent's ambitious, GTA-like game Last Sentinel, which has burned hundreds of millions of dollars over six years (Jason Schreier/Bloomberg)
Why it matters — The scale of investment and timeline without a shippable product illustrates the risk profile of large-scale game development, where technical and organizational challenges can compound over years. For engineers, it's a case study in how ambitious scope and unclear direction can drain resources on a single project.
1 feed
57 min
Wednesday, July 29, 2026 Security Releases
Why it matters — Two of the High-severity flaws allow remote attackers to exhaust memory or trigger heap-use-after-free on any exposed HTTP/2 server without authentication. The Permission Model over-grant issue means workloads relying on --permission for filesystem sandboxing may have been allowing access outside intended allowlists.
2 feeds
6 min
LLMs are moving from generating artifacts to creating hyper-custom worlds on demand, but still lack the ability to natively perceive and audit what they create (Andrej Karpathy/@karpathy)
Why it matters — For engineers, this means that as LLMs generate increasingly complex software environments, the models themselves cannot be trusted to verify the security or correctness of their output. Builders must implement external auditing and perception mechanisms to validate these hyper-custom worlds, as the generator cannot serve as its own auditor.
1 feed
55 min
NativeScope — Open Source local Studio for React Native debugging
Why it matters — A local, open-source debugging tool gives React Native developers control and transparency over their debugging environment, which is relevant for security-conscious workflows where data should not leave the developer's machine. This assessment is based on limited information from a single source with no article body available.
1 feed
4 min
CRM: An open-source, agentic-first CRM
Why it matters — Only one feed elseif tracks has carried this so far, so there is no independent corroboration yet. Read it as a single-source report.
1 feed
10 min
Thoughts on Apple Upgrade; sources: MacBook Air is now facing shortages too; Apple wants to turn its future glasses and headsets into health and fitness devices (Mark Gurman/Bloomberg)
Why it matters — The hardware subscription model could shift how organizations budget for and manage Apple device fleets. MacBook Air shortages may delay procurement for teams standardizing on that hardware. Health and fitness positioning for future headsets and glasses signals Apple's direction for wearable compute platforms.
1 feed
37 min
Post-quantum authentication to origins is now supported
Why it matters — This closes the authentication gap on the origin connection, protecting against quantum-computer impersonation attacks rather than just harvest-now/decrypt-later encryption threats. Engineers can configure fully post-quantum mutually authenticated TLS to their origins today, ahead of WebPKI standardization.
1 feed
13 min
Univé builds an AI-ready workforce
Why it matters — This case study illustrates one organization's approach to deploying AI at enterprise scale with governance structures in place. For teams rolling out AI tools, it underscores that responsible governance and employee engagement are part of the adoption strategy alongside the technology itself.
1 feed
4 min
Read This Before You Buy That TV Streaming Stick
Why it matters — Only one feed elseif tracks has carried this so far, so there is no independent corroboration yet. Read it as a single-source report.
1 feed
2 min
1 feed
2 min
1 feed
2 min