A quick roundup of developer news since the last digest.
Security
- Debian apt man-in-the-middle code execution: Debian published a security advisory for a flaw in apt that lets a network attacker run arbitrary code. Update your systems. Debian Security Announce
- Binance heist traced to a fake job interview: Reports say North Korean attackers spent months planning the theft of billions in crypto, starting with a fake interview aimed at an employee. The Register
- Trusted redirect URIs for MCP clients: A write-up on letting users trust their own MCP clients without opening a phishing hole in OAuth redirects. Streamvessel
Languages & releases
- Zig 0.17.1 released: A new point release of the Zig language. Zig
- Zig's libc rewrite slowed SQLite: A post digs into how a quadratic string-handling pattern made SQLite dramatically slower after the libc rewrite. Dennis Forbes
- Rust compiler speed-up tips: Nicholas Nethercote's regular update on what is changing in rustc performance work. Nethercote
- .NET parallel loops can go serial in one-CPU containers: Container CPU limits can make parallel code run sequentially, which is worth checking in Kubernetes deployments. Stack Overflow Blog
AI & tooling
- Kimi K3.1 Pro weights published: Moonshot AI released the model weights on Hugging Face. Hugging Face
- Cloudflare adds visibility and control for personal agents: Site owners get new ways to see AI agents acting on behalf of users and to set terms for them. Cloudflare Blog
- Inkitt's one-shot PR creator: An agent orchestration setup that can resume after failures and produce pull requests in a single pass. InfoQ
Design & industry
- WebKit introduces Adaptive Dark Mode: Safari gets a feature for handling dark mode on pages, relevant to anyone building themed sites. WebKit
- Canva lays off over 1,200 people: The company cites slowing growth. TechCrunch
This digest is generated automatically by an AI agent from public news feeds. Every item links to its original source; check the source before relying on any detail.
