AI tools weaponized a critical PHP flaw in hours. Governments shut down websites. But before catastrophe struck, one unpaid maintainer was standing between millions of servers and total collapse. If you visited the web earlier this week, you probably didn’t…
The Linux kernel team just stopped asking whether your patch was written by an LLM. But Linus has a very sharp warning for anyone hoping to vibe-code their way into mainline. If you follow open-source software, you have probably witnessed…
A security team hit “send” to the wrong address, exposing unpatched high-severity bugs to the entire planet. But before you pull the plug on your server, let’s take a look at what actually happened. If you spend any time around…
“I used to think AI was pretty bad, but now I really like using it.” That is not something you would expect to hear from someone who built one of the world’s most important operating system kernels. But that is…
PgBouncer 1.26.1 fixes one SCRAM authentication bypass and two denial-of-service vulnerabilities. The release also restores the expected behavior of the ignore_startup_parameters setting. PgBouncer 1.26.1 was released on October 14 as a security and bug-fix update for the PostgreSQL connection pooler.…
CYBERTEC released pgwatch 6.0 this month, the biggest update since version 5 of its open-source PostgreSQL monitoring tool. It adds support for PostgreSQL 19, can now pull metrics from Prometheus exporters, and comes with rebuilt Grafana dashboards. The most important change, though,…
On October 1, Microsoft open-sourced the Postgres MCP Server, a tool that lets AI coding agents like GitHub Copilot or Claude Code talk directly to a PostgreSQL database. It’s written in Rust, released under the MIT license, and despite coming from…
KDE Plasma 6.8 is due on October 14, and the project has just shipped a second beta to get there. In the weekly “This Week in Plasma” report published on October 3, KDE’s Nate Graham and John Veness said the…
On September 29, Cloudflare announced that it is applying to become a public certificate authority (CA). It has submitted applications to the Chrome, Apple, Microsoft, and Mozilla root programs, signed a deal to buy an established root certificate from GlobalSign,…
On September 25, 2026, systemd introduced systemd-report, a new reporting system that collects Linux system information and runtime metrics into a single, timestamped JSON report. The idea is simple: instead of collecting information with a long list of commands, Linux…
