Newshot All news
Every item on the site, filterable by category, source, time and minimum score. The form is a plain GET form, so it works without JavaScript. The score is a 0–100 reference value computed from source tier, recency and how complete the headline and summary are; it is used for sorting and filtering only, and says nothing about quality.
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. W
pts
Copilot code review: API management and review overview updates
You can now manage GitHub Copilot code review settings through the REST and GraphQL APIs, from enterprise policy down to individual repositories. Copilot’s revi
pts
DeepSeek V4.1 Flash 1017 Ultrafast now available on AI Gateway
DeepSeek V4.1 Flash 1017 Ultrafast is now available on AI Gateway through Fireworks. This model can generate upwards of 1,000 tokens per second . Ultrafast serv
pts
OpenAI finds model gamed graders by renaming files to claim full marks
In an internal OpenAI evaluation, a model submitted two acquisition-premium spreadsheets with unchanged content but added phrases like "full-score example" and
pts
Copilot impact dashboard adds chat and VS Code agent usage
The Agent adoption chart in the Copilot impact dashboard now includes Copilot Chat and the VS Code Agents window, so you can see engagement across nine Copilot
pts
Beyond code generation: A developer’s guide to agentic engineering
This October, GitHub saw more than 1.2 billion commits in one week—over 400% more than a year earlier. This is more commits than GitHub received in all of 2025.
pts
Friday Squid Blogging: New Jurassic Squid Predecessors
News story: “ Scientists discover a bizarre Jurassic ‘squid’ unlike anything ever seen .” Scientists have identified the “fattest” belemnite ever discovered, a
pts
AI Gateway adds DeepSeek Search and Fetch tools
DeepSeek Search and DeepSeek Fetch are now available through AI Gateway . Search finds relevant pages with titles, URLs, and summaries. Fetch retrieves page con
pts
Chat SDK agents can now stream generative UI with json-render
You can now stream generative UI from your Chat SDK agent with json-render . With a typed catalog of components, the agent writes a JSON spec that json-render c
pts
Chainalysis says hackers stole credentials and tokens for all of its customers
Blockchain analysis firm Chainalysis said that hackers have obtained sensitive personal information—including names, usernames, password hashes, and live tokens
pts
RSS Club: CSS-Tricks Redesign Preview
Hey you wonderful RSS subscribers! We just soft-pushed a site redesign and wanted to give ya'll the first heads-up. A full write-up is coming but here are the h
pts
Vercel CLI can now set new projects to expire
You can now set a new project to expire when you deploy it with Vercel CLI . Expired projects are deleted automatically, so prototypes, demos, and test apps don
pts
Quoting Nilay Patel
The products aren't good enough to sell people on the costs. You cannot tell people that you have to listen to the whine of a data center in their backyard for
pts
Vercel Tracing is now generally available
Vercel Tracing is now generally available on all plans. You can now search and inspect traces from the dashboard or the Vercel CLI , and new Next.js projects ge
pts
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher wh
pts
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, acc
pts
OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits
OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilitie
pts
Pinpointing Location of Videos from Background Airplane Sounds
This is fascinating : The video describes a technique that can reveal where an otherwise unidentifiable recording was made by analyzing its audio for the faint
pts
The post-quantum future of web privacy
The highest priorities for the transition to post-quantum cryptography are the basic building blocks of authenticated key-agreement protocols such as TLS. Witho
pts
The Download: a humanoid cleans house and Samsung builds for the AI boom
This is today’s edition of The Download , our weekday newsletter that provides a daily dose of what’s going on in the world of technology. I watched a humanoid
pts
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not thr
pts
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint se
pts
The Flood is Coming And The Pipes Were Already Full
An update on Athena, and some unsolicited predictions on what's coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go
pts
Gemini video model gets 30% price cut: 15-second clips and conversational editing arrive together
Google released Gemini Omni 1.2 Flash, cutting 720p video pricing to $0.07 per second, or $1.05 for a 15-second clip — a 30% drop compared with Gemini Omni 1.1.
pts
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernam
pts
Partnering with Hacktron to find vulnerabilities in OpenAI’s systems
OpenAI is partnering with Hacktron to find vulnerabilities, test connections with third-party services, and strengthen defenses with frontier AI.
pts
A New Community For In-House UX People
You might have already read my name every now and then here at Smashing Magazine. I’m Paul Boag. I’ve written three books with Smashing and 77 articles (yes, I
pts
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's
pts
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with n
pts
Token Pass credit now applies automatically across AI Gateway
Token Pass credit now applies automatically to included model usage through AI Gateway , whether a request authenticates with an API key, OIDC token, or fx logi
pts
Ampersand from Humans& now available on AI Gateway
Ampersand from Humans& is now available on AI Gateway for free through November 13, 2026. Ampersand is a model for group conversations. Humans& built Ampersand
pts
The Go team explains Go's new JSON API
#623 — November 6, 2026 Read the Web Version Go Weekly The Official Guide to encoding/json/v2 (and Migrating to It) — Now that encoding/json/v2 and jsontext ar
pts
Measuring how AI agents handle everyday wet-lab science
OpenAI introduces BioBasicsBench, a 100-task benchmark measuring how well AI agents interpret raw experimental data and handle everyday wet-lab science.
pts
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log i
pts
Can a Google smartwatch screen for hypertension without a cuff?
Hypertension affects over 1 billion people worldwide, and more than half of patients don't know they have it. A new Google Research study uses an ordinary smart
pts
The Kotlin Multiplatform Contest Is Open: Win a Trip to KotlinConf
The Kotlin Multiplatform Contest is back! Students and recent graduates, turn your idea into a cross-platform project with Kotlin Multiplatform (KMP). The autho
pts
Inside GitHub’s new Git storage architecture
Last week at GitHub Universe, we announced our new Git storage architecture, capable of handling thousands of writes per second with reads that scale on demand.
pts
Cult.fit builds operational muscle with Codex
Cult.fit is using Codex to help teams across functions build tools, move faster, and change how work gets done.
pts