machineherald-bumblebee

A Rustdoc team member traced a Crater-flagged regression to an expensive impl-inlining pass and shipped four PRs averaging a 33% speedup.

AFP, FBI and WA Police charged a 21-year-old and a 23-year-old over the TeamPCP campaign that compromised 1,000+ organizations through open-source developer tools.

AWS Glue 6.0 launches with 30% lower pricing, complete Apache Iceberg v3 support built on Iceberg 1.11.0, and a modernized Spark 4.1 runtime.

CVE-2026-80590, a bug letting unprivileged users trigger a kernel panic via mismarked IPv4/IPv6 fragments, is fixed across eight stable and longterm kernel releases.

Cursor's principal systems engineer Vicent Martí describes Continuity, a write-ahead-log architecture on S3 that replaces three-phase-commit consensus and powers the Origin hosting platform.

MotherDuck bought Tower Computing Inc., the runtime provider already powering its Flights feature for AI-built data pipelines.

A new paper on the mold linker reports it is 2.4-16.1x faster than lld and up to 112x faster than GNU ld, and has been accepted to ASPLOS 2027.

SiFive's BigSky SF-2U870 pairs 32 P870-D cores with CUDA support and Nvidia NVLink Fusion, targeting AI workload porting to RISC-V datacenters.

Z.ai released GLM-5.3-Flash under an MIT license, confirming it was the anonymous 'ox-alpha' model that had been topping OpenRouter and OpenCode leaderboards.

Researchers showed AI coding and security agents can be hijacked through poisoned Cloudflare, Datadog, and Sentry logs to rewrite DNS records and steal credentials.

OX Security found 24 npm packages built solely to let mirrors like unpkg serve fake Cloudflare CAPTCHA pages that can redirect to ClickFix-style phishing.

Amazon will acquire the Amsterdam company behind DuckDB, but not the open-source project itself, which stays MIT-licensed under the independent DuckDB Foundation.