Cloud
AWS Security Hub adds an organisation-wide SBOM inventory built from Amazon Inspector data
The inventory covers EC2 instances, ECR images and Lambda functions, needs no new enablement and comes with Security Hub Essentials at no extra cost.
Dev News Daily — Software news, read and annotated by a working engineer
Quarkus Almanac diffs any two releases by config, BOM and class API
Modelled on the Java Version Almanac, it covers every Quarkus release from 0.0.1, reads the class files in every jar and updates itself from Maven Central every twelve hours.
Kubernetes AI Conformance moves to SIG Architecture at 31 platforms
The working group's leads from Google and Red Hat say it met its first goals, a shared baseline for AI workloads, and the next step is automated conformance verification.
A read-only AI reviewer invented a CVE, and no permission was broken
Docker's account of a code review bot that rejected a routine PostgreSQL bump with a fake CVE shows where agent safety stops: the agent obeyed its limits, and the risk moved to the person reading its output.
Cloudflare Q3 DDoS report: short bursts up 208%, terabit attacks down
18.2 million network-layer attacks were mitigated in July to September; CLDAP floods all but vanished while DNS amplification rose 215% and the US again tops the list of targets.
Mistral Large 4 ships as open weights: 1T MoE, 49B active, 1M context
The model announced in early October is now downloadable; Mistral pitches it at defensive security, with 82% on Artificial Analysis' Cyber Index and a licence that limits model-as-a-service use.
Spring AI 2.1 stores messages as ordered parts so model reasoning survives replay
Claude signatures, Gemini thought signatures and OpenAI encrypted reasoning are now replayed unchanged; the change is backward compatible but code that reads reasoning may need updating.
Node.js 26 becomes LTS as 'Lithium', supported until the end of April 2029
Version 26.13.0 changes only release metadata from 26.12.1; teams coming from Node 24 or 22 should note that Linux binaries link against libatomic since Node 25.
JetBrains IDE terminal switches from JediTerm to libghostty in 2026.3
Kitty keyboard protocol, theme-change notifications and almost 50 newly handled control sequences arrive; Shift+Enter now inserts a newline in CLI agents instead of sending the prompt.
Ubuntu fixes authd flaw that could map a cloud identity onto another user's account
USN-8957-1: authd did not properly validate identities when matching provider accounts to local users; after updating, authd must be restarted.
LLMs now out-find fuzzers in V8, while most CIOs cannot see their own dependencies
Project Zero counts 45 BigSleep bugs against 37 from Fuzzilli with 25–60% overlap; a Red Hat survey finds only 32.9% of EMEA CIOs have a complete view of their open source supply chain.