Search
21 stories found
Discord's CTO says the desktop client is being rewritten in Rust with the GPUI framework, dropping Electron and React Native. An early Windows build was shown using about 290MB of memory, but there is no release date and no independent testing yet.
Anomaly's open-source Hex lets you hold a key, talk, and have text pasted into any app without sending audio to the cloud. Version 3.0 brings one app to Mac, Windows and Linux, and it was one of GitHub's fastest-climbing repos on November 2.
agent-desktop, an Apache-2.0 Rust CLI from Vercel Labs, gives coding agents structured, ref-based control of native desktop apps without a vision model. It added about 2,300 stars in a day and was GitHub's top trending repo on November 3.
Synology says attackers are exploiting a DSM flaw it patched in December 2024 to plant C3RB3R ransomware, which also encrypts backups on the same device. Researchers disagree about the entry point, so the safe move is the latest build for your DSM branch plus a few quick checks.
An open-source scanner compares your system against ~12,400 published indicators from 25 sources — without sending anything anywhere. What it can find, what it can't, and how to run it in five minutes.
CISA added CVE-2026-119977, a race condition in WordPress core's own updater, to its Known Exploited Vulnerabilities catalog on November 3. It affects WordPress 4.7 through 7.1.3 and can give an unauthenticated attacker code execution during a core update, so every self-hosted site should confirm it is on 7.1.4 or its branch's latest release.
The first reviews of Apple's first OLED, touchscreen MacBook Pro praise the display and the weight cut and call touch a nice extra. With no performance gain over March's M5 Pro and M5 Max models, the $400 premium is mostly for the screen.
SonicWall disclosed two flaws in its Global Management System on November 3, including CVE-2026-109593, an unauthenticated file-disclosure bug rated CVSS 9.1. GMS reached end of support on September 30, and SonicWall says no fix will be released, so the only remedy is to isolate it and move to NSM.
The first reviews of Microsoft's pocket-sized Xbox controller are positive, with caveats for big hands and long sessions. A day after launch, Xbox also opened a US-only preview that lets it connect to Xbox Cloud Gaming directly over Wi-Fi.
The 22-year-old gamma-ray burst hunter was shut down for good on October 20 and is expected to re-enter the atmosphere around November 3–4, after a commercial boost mission failed. NASA puts the risk to any person at about 1 in 2,100.
A misconfigured DNS resolver, chained zero-days and a covert channel built from CPU cache timing — OpenAI's own red team found the paths. Here's what happened and why it matters beyond OpenAI.
Two critical flaws in PHP's default upload-progress feature allow unauthenticated remote code execution. Here are the fixed versions, a one-line check, and the config change that buys you time.
A new GitHub report says Claude Code inserted a user's login email into the User-Agent header of web requests to third-party sites. A privacy plugin is reported to block it in recent builds, but the reporter was already on a newer version — here's how to check your setup.
Chip-design startup Ricursive has released Ripple-65B Preview, a 65-billion-parameter dense model it says tops every U.S. open-weight model on TerminalBench 2.1 and is small enough to run on a DGX Spark. The numbers are the company's own; here is what they show and what is still missing.
Layer3 Intel says paying customers of 28 commercial proxy services could route traffic out through six addresses on the Executive Office of the President's network, mostly in the evening. That points to at least one device enrolled in a proxy pool, a problem far more common than the address suggests.
The MIT-licensed AiSOC ingests security telemetry, runs thousands of detection rules, has LLM agents investigate alerts and keeps a human in charge of any response. It runs on a laptop-class Docker setup with a small local model — here's what it does, what it needs and where it falls short.
OmniDiff, an AGPL-licensed terminal diff tool, parses your code to show what changed instead of which lines moved. It can also compare pictures, fonts and the members of an archive. Version 0.3.0 shipped November 1 and drew more than 300 points on Hacker News. Its speed numbers are impressive, but its own README says accuracy targets aren't met yet.
Colibri, a dependency-free C engine that keeps mixture-of-experts weights on NVMe and loads them on demand, is back on GitHub's daily trending list at about 47K stars. It really does run frontier-size open models on ordinary hardware, but independent tests show giant models crawl well below one token per second.
The Allen Institute for AI released StateBench, a benchmark that tests whether models can follow variables as they change across up to 64,000 updates. Frontier models handle simple lookups but collapse on the hardest updates, and Ai2's small-model experiments point to an architectural reason.
NOIR, a new MIT-licensed desktop tool, scans an Android phone over USB debugging and links each app's sensitive permissions to the tracking and ad domains hard-coded in its code. It went from zero to about 1,800 GitHub stars in four days. It's a useful map of risk, but its findings show what apps can do, not proof of what they actually sent.
CISA has added CVE-2026-97229 to its exploited-vulnerabilities list after an attack on Alpine Linux's GitLab server. The flaw lives in Ruby's regex engine, so self-built and custom GitLab images can stay vulnerable even on a "fixed" version number.
