July was hot – not just in terms of temperature, but Linux app releases (smooth, eh).  Big updates last month included the ...

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...

The Gold linker is no longer included in the primary source distribution and is instead provided separately. Gold has seen ...

The command-line mail software Himalaya 2.0.0 supports Gmail via the Gmail REST API as well as Outlook and Microsoft 365 ...

This terminal made Windows Terminal feel ancient ...

AI agent swarm planner-worker architecture cut Cursor’s worker costs 22x — from $9,373 to $411 — rebuilding SQLite in Rust ...

Tokenization is the one part of the language modeling stack that almost nobody profiles. Gigatoken, released by Marcel Rød (a PhD student from Stanford) under an MIT license, argues that this was a ...

Grok Build open source release arrives hours after xAI's covert upload scandal, but security researchers confirm the code that transmitted 5 GB of developer repositories to Google Cloud Storage ...

A harness is the scaffolding around a model. It assembles context, calls the model, parses the reply, and dispatches tool calls. Grok Build was launched as an early beta on May 25, 2026. It is an ...

Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments.

The jscrambler npm package was compromised, and simply installing its 8.14.0 release runs an infostealer on your machine. Published on July 11, 2026, the malicious version carries a preinstall hook ...