# Noticias Programdor Andrew (English edition) > Tech and cybersecurity news for developers: CVEs, new libraries, viral GitHub repositories, launches and AI. > Updated every 20 minutes. Every article cites its sources and has a Markdown version at .md. > Spanish edition: https://noticias.programdorandrew.com/llms.txt ## Sections - [Cybersecurity and vulnerabilities](https://noticias.programdorandrew.com/en/cybersecurity) - [New libraries and frameworks](https://noticias.programdorandrew.com/en/libraries) - [Viral GitHub repositories](https://noticias.programdorandrew.com/en/github-trending) - [Apps and launches](https://noticias.programdorandrew.com/en/launches) - [AI: models and demos](https://noticias.programdorandrew.com/en/ai) ## Latest articles - [CVE-2026-58879: Critical Out-of-Bounds Write Vulnerability](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-58879-critical-privilege-escalation.md): A critical out-of-bounds write flaw caused by improper type casting during the descrambling of multiple files has been identified. - [Interactive Technical Notes on RLHF, Attention, LoRA, and LLM Evals](https://noticias.programdorandrew.com/en/ai/interactive-notes-on-rlhf-attention-lora-and-llm-evals.md): Interactive notes and technical resources focusing on RLHF, attention, LoRA, and LLM evals have been released. - [Data Centers Turn to Old Jet Engines as Power Wait Times Grow](https://noticias.programdorandrew.com/en/launches/data-centers-turning-to-old-jet-engines.md): Data center builders are turning to retired aircraft engines converted to burn natural gas due to the energy crisis. - [Critical Android Vulnerability CVE-2026-58979: PresentationController Permission Bypass](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-58979-android-permission-bypass-vulnerability.md): A critical logic error vulnerability was discovered within the canPresent function of PresentationController.java in Android, resulting in a potential permission bypass. - [The Internals of PostgreSQL: Análisis de la arquitectura interna](https://noticias.programdorandrew.com/en/launches/the-internals-of-postgresql-architecture-guide.md): The popular guide detailing PostgreSQL internal mechanisms has gained massive traction on Hacker News, sparking deep technical discussions about its architecture. - [Geoffrey Hinton warns humanity might have been better off without AI](https://noticias.programdorandrew.com/en/ai/geoffrey-hinton-warns-humanity-better-off-without-ai.md): Pioneering computer scientist Geoffrey Hinton stated that the rapid development of artificial intelligence could ultimately prove detrimental to human society. - [Critical CVE-2026-95731 Vulnerability in HPE Networking Fabric Composer](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-95731-hpe-networking-fabric-composer-vulnerability.md): A critical hardcoded password vulnerability has been discovered in the command-line interface of HPE Networking Fabric Composer. - [CVE-2026-115231: Memory Corruption Vulnerability in Eclipse ThreadX](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-115231-eclipse-threadx-vulnerability.md): A high-severity vulnerability tracked as CVE-2026-115231 with a CVSS score of 8.5 has been identified in the Eclipse ThreadX Module Manager. - [CVE-2026-108047: Fallo Crítico de Autorización en Alosuite](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-108047-alosuite-authorization-vulnerability.md): An inadequate authorization flaw was discovered in Alosuite user invitation functionality affecting privilege assignments. - [Critical Vulnerability in MongoDB Database Tools mongorestore CVE-2026-119675](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-119675-mongodb-database-tools-vulnerability.md): The vulnerability CVE-2026-119675 was discovered in mongorestore with a CVSS score of 8.6. - [Octomind: Open-Source Rust AI Harness That Saves Tokens and Costs](https://noticias.programdorandrew.com/en/ai/octomind-open-source-rust-ai-harness.md): Octomind has been released as an open-source, Rust-optimized AI coding harness that runs coding agents across multiple surfaces. - [Jailbreaking my car's navigation system just so I can change the time](https://noticias.programdorandrew.com/en/launches/jailbreaking-car-navigation-system-to-change-time.md): A user performed reverse engineering on the TomTom Carminat LIVE navigation system of their 2014 Renault Latitude solely to change the clock time. - [CVE-2026-115215: High Severity Vulnerability in Eclipse ThreadX NetX Duo](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-115215-eclipse-threadx-netx-duo-dtls.md): A security flaw with a CVSS score of 8.7 has been discovered in Eclipse ThreadX NetX Duo affecting DTLS session management. - [CWE-bench v2 Arrives with Greater Coverage for AI Cybersecurity](https://noticias.programdorandrew.com/en/ai/cwe-bench-v2-greater-coverage-transparent-ai-cybersecurity-evaluation.md): Collinear AI has released CWE-bench v2 featuring 100 public tasks covering 91 different CWE classes to measure model performance in cybersecurity. - [Safari 27.3 Introduces Adaptive Dark Mode and Web Developer Features](https://noticias.programdorandrew.com/en/launches/safari-27-3-adaptive-dark-mode-web-developers.md): The WebKit engine has rolled out Adaptive Dark Mode in Safari 27.3 beta, a native feature that automatically transforms light web pages into a dark experience while preserving legibility and privacy. - [CVE-2026-103916: Critical Vulnerability in Docker Sandboxes sbx cp](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-103916-docker-sandboxes-vulnerability.md): The vulnerability CVE-2026-103916 was discovered with a CVSS score of 8.4 in Docker Sandboxes sbx cp. - [Nvidia DGX Spark Encrypted Firmware Slows Linux Inference Speed](https://noticias.programdorandrew.com/en/ai/nvidia-dgx-spark-encrypted-firmware-linux-inference.md): Native Linux on Nvidia RTX Spark laptops drops GPU speeds to 780 MHz, whereas Windows and WSL achieve full boost speeds above 2 GHz. - [Kitty 0.50 Released with New Developer Improvements and Updates](https://noticias.programdorandrew.com/en/launches/kitty-0-50-released-with-developer-improvements.md): Kitty version 0.50 has been officially released, generating significant discussion and traction in technical communities like Hacker News. - [CVE-2026-120091: Critical CVSS 8.7 Vulnerability in Temporal Server](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-120091-temporal-server-kubernetes-vulnerability.md): A critical CVSS 8.7 vulnerability was discovered in Temporal Server where the k8s compute provider utilized caller-supplied client configuration. - [Fujifilm to Boost Tape Production as AI Drives Archiving Demand](https://noticias.programdorandrew.com/en/ai/fujifilm-boosts-tape-production-ai-archiving.md): Fujifilm has announced plans to significantly increase its tape storage production capacity due to the exponential growth in demand fueled by the artificial intelligence sector. - [Google Will Turn Off Search for Schools That Reject A.I](https://noticias.programdorandrew.com/en/launches/google-will-turn-off-search-for-schools-that-reject-ai.md): Google has announced it will turn off search access for schools that reject the integration of its artificial intelligence technology. - [CVE-2026-63395: Critical Symlink Vulnerability in isomorphic-git](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-63395-isomorphic-git-symlink-vulnerability.md): A critical CVSS 8.8 vulnerability was discovered in isomorphic-git where git.checkout writes new child paths through symlinked leading directory components without checking them. - [Palette: Teaching a Small Model to Build Decks in Your Design Language](https://noticias.programdorandrew.com/en/ai/palette-small-model-deck-building-design-language.md): Palette has been introduced as a small open-weight AI model designed to build presentations reflecting your specific design language. - [huashu-bird-sticker: Global Bird Database and Stickers on GitHub](https://noticias.programdorandrew.com/en/github-trending/huashu-bird-sticker-global-bird-database-github.md): Developer Huashu has released a dataset and digital WebP sticker library on GitHub covering 11,064 living bird species with names in up to 43 languages. - [Critical Code Injection Vulnerability CVE-2026-63471 in fastapi-code-generator](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-63471-critical-vulnerability-fastapi-code-generator.md): A critical vulnerability known as CVE-2026-63471 with a CVSS score of 9.3 was discovered in fastapi-code-generator due to unescaped OpenAPI paths. - [CUGA vs Hermes and Deep Agents: Choosing the Right Agent Harness](https://noticias.programdorandrew.com/en/ai/cuga-vs-hermes-and-deep-agents-comparative-analysis.md): A comparative analysis evaluated three AI agent harnesses—CUGA, Hermes, and Deep Agents—using the exact same open-weight model across 90 AppWorld tasks. - [Run Site JavaScript from Python with the Real Firefox Engine in ruyiJS](https://noticias.programdorandrew.com/en/github-trending/ruyijs-python-firefox-engine-scraping.md): The open-source cutetailbud/ff-ruyijs project gained viral traction on GitHub by offering a lightweight alternative to traditional heavy headless browsers for scraping. - [CVE-2026-89293: Critical CVSS 8.8 Vulnerability in Eclipse Mnestix Browser](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-89293-eclipse-mnestix-browser-critical-vulnerability.md): A critical vulnerability with a CVSS score of 8.8 was discovered in Eclipse Mnestix Browser versions 1.2.0 up to excluding 2.3.0. - [Kairos: Open-Source Real-Time Risk and Fraud Decisioning Platform](https://noticias.programdorandrew.com/en/github-trending/kairos-open-source-real-time-fraud-decisioning-platform.md): Finic has launched Kairos on GitHub as an open-source alternative to risk management platforms like Sift or Sardine, rapidly trending in developer communities. - [Rustup 1.29.3 Released with Regression Fixes for CPU and Solaris](https://noticias.programdorandrew.com/en/libraries/rustup-1-29-3-released-with-regression-fixes.md): The development team has released rustup 1.29.3, a patch release focused on resolving bugs found in previous versions. - [CVE-2026-119922: Critical Privilege Escalation in Babelfish for PostgreSQL](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-119922-babelfish-postgresql-privilege-escalation.md): A severe improper access control flaw classified under CWE-266 has been identified across multiple versions of the Babelfish for PostgreSQL extension. - [StateBench: Evaluating State Persistence and Tracking in Language Models](https://noticias.programdorandrew.com/en/ai/statebench-evaluating-state-persistence-in-llms.md): StateBench has been introduced as a new benchmark designed to measure state persistence and evolution in long contexts using four complexity levels rooted in algebraic theory. - [Lichii: An Experimental Nintendo Switch 2 Emulator Arrives on GitHub](https://noticias.programdorandrew.com/en/github-trending/lichii-experimental-nintendo-switch-2-emulator-github.md): The zortos293/Lichii repository has gained traction on GitHub as a very experimental C++ emulator for Nintendo Switch and Switch 2. - [Critical CVSS 9.2 Vulnerability Exposes API Keys in Eclipse Mnestix Browser](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-89292-eclipse-mnestix-browser-api-key-vulnerability.md): A critical vulnerability tracked as CVE-2026-89292 with a CVSS score of 9.2 was discovered in Eclipse Mnestix Browser versions 1.6.0 through 2.3.0. - [Ultra-Water: Real-Time FFT Ocean Renderer for Three.js and WebGL2](https://noticias.programdorandrew.com/en/github-trending/ultra-water-real-time-fft-ocean-renderer-threejs.md): The Humpalumps/Ultra-Water repository has gone viral thanks to its real-time FFT ocean rendering featuring foam, caustics, and physics buoyancy. - [C++26 DIS Rejected: ISO Standards Committee Faces Historic Deadlock](https://noticias.programdorandrew.com/en/launches/cpp26-dis-vote-rejected-iso-standards.md): The C++26 standard draft was unexpectedly disapproved during its DIS voting phase due to deep disagreements regarding the inclusion of contracts, marking an unprecedented event in the language history. - [Critical CVE-2026-112917 Vulnerability in Docker Desktop and WSL2](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-112917-docker-desktop-wsl2-container-escape.md): A critical vulnerability was found in Docker Desktop for Windows with the WSL2 backend where containers bypass seccomp restrictions. - [Stringman: An Open-Source Room-Scale Gripper Robot from Neufangled Robotics](https://noticias.programdorandrew.com/en/launches/stringman-open-source-room-scale-gripper-robot.md): Stringman has been officially launched as an open-source, OSHWA-certified manipulator robot that uses ceiling-suspended cables to span entire rooms. - [Run MacOS Directly in Your Terminal With This Viral GitHub Repository](https://noticias.programdorandrew.com/en/github-trending/run-macos-in-your-terminal-with-terminal-mac.md): The govijr/terminal-mac repository went viral on GitHub by enabling a complete macOS operating system to run directly inside the terminal on Apple Silicon computers using native virtualization. - [CVE-2026-44267: Critical Remote Code Execution Vulnerability in Elo](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-44267-critical-remote-code-execution-in-elo.md): A critical remote code execution flaw was discovered in Elo due to improper handling of meta-properties. - [Qwen 3.8 27B on My Laptop Can Interpret Model Weights, Too](https://noticias.programdorandrew.com/en/ai/qwen-27b-interprets-model-weights-locally.md): The Qwen 3.8 27B model running locally successfully interpreted raw floating-point neural network weights to identify classic Atari games analyzed in recent research. - [Sapper-v2: Autonomous Pentest Legion Sweeps GitHub Trends](https://noticias.programdorandrew.com/en/github-trending/sapper-v2-autonomous-pentest-legion-ai-github.md): The N1nEmAn/sapper-v2 repository has taken GitHub by storm by introducing an autonomous pentesting legion powered by AI, combining an intelligent commander, worker swarms, and a layered fact-intent graph. - [CVE-2026-28336: Critical CVSS 9.9 Command Injection in SolarWinds Dameware](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-28336-solarwinds-dameware-command-injection.md): A critical command injection vulnerability cataloged as CVE-2026-28336 has been discovered in SolarWinds Dameware, carrying a CVSS score of 9.9. - [Postman Silently Auto-Installs AI Plugins and Alters Coding Agent Configurations](https://noticias.programdorandrew.com/en/ai/postman-silently-installs-ai-plugins-exposes-api-data.md): The Postman desktop application silently installed AI plugins for coding agents like Codex and Claude Code, modifying global user configurations without warning. - [Critical TOCTOU Vulnerability CVE-2026-119977 Active in WordPress Core](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-119977-wordpress-core-toctou-vulnerability.md): A critical TOCTOU race condition vulnerability tracked as CVE-2026-119977 has been discovered in WordPress Core and is actively exploited. - [Agent Autoloop: Autonomous CLI Agents for Background Task Automation](https://noticias.programdorandrew.com/en/github-trending/agent-autoloop-autonomous-cli-agents-background-automation.md): The open-source repository KKKKhazix/agent-autoloop has gone viral on GitHub thanks to its modular and lightweight approach to managing autonomous agents. - [CVE-2026-97718: Critical CSRF Vulnerability in Secure Access Server](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-97718-critical-csrf-vulnerability-secure-access.md): Vulnerability CVE-2026-97718 has been disclosed as a cross-site request forgery flaw in version 14.60 of the Secure Access server that allows unauthorized administrator account creation. - [Could a Modern Chess Engine on a Pentium Have Defeated Kasparov?](https://noticias.programdorandrew.com/en/launches/could-a-modern-chess-engine-on-a-pentium-have-defeated-kasparov.md): An analysis revealed how a modern chess engine running on a 1996 Pentium Pro processor could have easily defeated Garry Kasparov. - [CVE-2026-106803: Critical Kamailio Buffer Overflow Vulnerability](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-106803-critical-kamailio-buffer-overflow.md): A critical stack-based buffer overflow vulnerability identified as CVE-2026-106803 has been discovered in Kamailio. - [CVE-2026-120065: PostgreSQL psqlODBC Vulnerability Exposes Cursors](https://noticias.programdorandrew.com/en/cybersecurity/cve-2026-120065-postgresql-psqlodbc-vulnerability.md): A vulnerability with a CVSS score of 7.1 was discovered in the PostgreSQL psqlODBC driver, affecting positioned statements and keyset queries. ## Optional - [Full text of the latest 200 articles](https://noticias.programdorandrew.com/en/llms-full.txt) - [Sitemap](https://noticias.programdorandrew.com/sitemap.xml)