Search
5 stories found
A CVSS 9.8 flaw in Rails' Active Storage, CVE-2026-122006, lets an unauthenticated upload reach ImageMagick's file-reading and file-writing coders. Rails 8.1.4.1 and 8.0.5.2 fix it along with 20 other security bugs, and Rails 8.0 stops getting security fixes on November 7.
Meta has acquired Conductor, the Mac app for running several AI coding agents in parallel. Sign-ups have stopped, the hosted Cloud goes read-only on November 13 and is deleted from November 20, and the desktop app winds down in early 2027.
A plugin that watches what your agent does, compresses it into searchable memories in a local SQLite database, and feeds the relevant bits back into your next session. How it works and what to watch out for.
The FBI says North Korea's TraderTraitor group stole more than $6 billion from Binance's hot wallets on October 29, likely the biggest crypto theft on record. Binance says it is covering the loss and has restarted withdrawals, while fake 'compensation' offers circulate.
OccupySaaS describes itself as a group of laid-off engineers who use AI agents to clone paid SaaS from public docs. Its Auth0-compatible identity server reached release candidate 1 on November 4. It's Apache-2.0 and written in Go, and it already works with Auth0's own SDKs. The project says it isn't production-ready, and it isn't yet.
