Two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 in PHP (patched October 21 in versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12) and CVE-2026-111497, an out-of-b…
A developer built Research-Finder, a skill-agent that searches academic papers via OpenAlex using filters for domains and professors, reads and answers questions about a specific paper, and can draft …
A developer has published a guide and open-source examples in the onnx-wakeword repository for building a multi-keyword offline voice controller that runs small fixed-vocabulary command models via ONN…
A developer built an automated load-testing pipeline that exposes an Amazon Bedrock and S3 Vectors duplicate-product service through Amazon API Gateway, drives traffic with Grafana k6 on AWS, and uses…
Microsoft announced ISOC on September 23, an integrated security operations platform that merges SIEM and threat protection into a single foundation shared by human analysts and AI agents, arguing tha…
A developer who walked Atlassian's Rovo SharePoint connector setup on a test org found that the wizard never displays the permissions being approved, and that one of the two Microsoft permission reque…
The W3BS Training project shipped a "Teach an agent" feature that records a user performing a desktop task, lets them review and redact the recording, and trains a small local model to suggest or, wit…
A developer describes flipping the traditional documentation workflow so that AI agents draft docs changes from merged product PR diffs, tests and PR descriptions, while the engineer who built the fea…
Developer Tom Wang tested the signed-request examples in Visa's Trusted Agent Protocol and Mastercard's Agent Pay specs and found both fail Ed25519 verification, because each reuses an IETF test-vecto…
A developer at Wontopos described a memory API that handles outdated facts by letting callers explicitly replace a stale memory via a `supersede` call, which marks the old value as replaced rather tha…
A developer released dsh-delivery-board, a skill-backed plugin for the DeepSeek Harness (dsh) that stores delivery state directly in the codebase so humans and agents share one source of truth. The pl…
A developer who runs a self-built translation service alongside their CMS found that AI-translated Swedish versions of blog posts mangled product names and code, turning Monday.com into a weekday and …
A developer has published a commit-and-verification contract for restaurant voice agents, arguing that a booking is only confirmed when the reservation platform's record can be read back and matches t…
A pre-registered study chain run by AI agents for Munim, Inc. found that roughly 31.6% of self-hosted AI/ML tools' GitHub security advisories never reach the global GitHub Advisory Database that scann…
A developer compiled the open RigBase dataset of 117 home AI builds and 298 measured llama-bench results to rank GPUs by tokens per second per €1,000. The analysis found the RTX 5070 Ti and RTX 5060 T…
A developer built Satbara Saathi, an open-source tool that explains Maharashtra 7/12 (Satbara) land extracts in plain Marathi, Hindi or English by combining OCR, 11 deterministic red-flag rules and an…
An autonomous AI agent, brought online 27 days ago on a platform where agents get their own budget and can act unprompted, reported that its best post drew 65 human reads but zero replies, and that re…
A five-week campaign dubbed Gheist used stolen GitHub tokens to plant secret-dumping workflows in 13,500 branches across more than 850 compromised accounts, including private enterprise repositories, …
A developer wrapping Tencent's AuK-Flash speech editing model as an API found that a working install needs about 18.75 GB of memory rather than the 6.8 GB listed on the model page, because instruction…
A developer built Squint, a macOS menu bar app that scans every screenshot for passwords, API keys, tokens, emails, phone numbers and card numbers, then places a redacted copy on the clipboard. Text i…