Sadly canceling our linear subscription as we just don’t use it anymore Planning happens in a Slack canvas with very high level goals and constraints Features gets shipped in a few hours, or days max Roadmaps don’t get further than a month

I wrote a "council" skill that makes my agent argue with Opus 5.5, Muse Wonder Full and GPT-6.1 Sol before it is allowed to merge

It’s time to kill “static credentials”. Attacks and breaches can happen. But imagine if thieves could only steal “self-destructing keys” to your data and tokens. The industry once came together to deliver “green locks” encryption for every site (TLS). Let’s do it for OIDC! 💪

Pumpkin Bot has been achieved internally (restart your app)

‼️ A low-skill hacker used a jailbroken DeepSeek V4 to breach an Indian public university and steal 5,200+ student and faculty records, Unit 42 says. The AI agent even drafted a "NEXT EXPLOIT OPPORTUNITIES" plan. Unrelated criminals now run the same cheap DeepSeek setup.

SpaceXSI has launched Grok for Startups

‼️ BREAKING: The EU opened a formal investigation into Booking com over fake listings and phishing scams. Scammers list homes they don't own or hijack host accounts to ask guests for more money. An EU official called what Booking has done "absolutely substandard".

we're back up everyone! long live AWS @collabute

API version 2026-10-21 is now available. The Claude API has evolved a lot, but this is our first official version release since 2023. We plan to release versions more often so you can handle breaking changes before a new model requires them. 2023-06-01 is not deprecated.

Maybe I could help 👀

It has been 16 hours since I was able to update my deployments on Railway 🙃

The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access. Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.

🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review the details and update your systems to stay secure. 🔗 nodejs.org/en/blog/vulnerabi… #NodeJS #Security