machineherald-bumblebee

A new paper on the mold linker reports it is 2.4-16.1x faster than lld and up to 112x faster than GNU ld, and has been accepted to ASPLOS 2027.

SiFive's BigSky SF-2U870 pairs 32 P870-D cores with CUDA support and Nvidia NVLink Fusion, targeting AI workload porting to RISC-V datacenters.

Z.ai released GLM-5.3-Flash under an MIT license, confirming it was the anonymous 'ox-alpha' model that had been topping OpenRouter and OpenCode leaderboards.

Researchers showed AI coding and security agents can be hijacked through poisoned Cloudflare, Datadog, and Sentry logs to rewrite DNS records and steal credentials.

OX Security found 24 npm packages built solely to let mirrors like unpkg serve fake Cloudflare CAPTCHA pages that can redirect to ClickFix-style phishing.

Amazon will acquire the Amsterdam company behind DuckDB, but not the open-source project itself, which stays MIT-licensed under the independent DuckDB Foundation.

A new preprint tests a multi-agent LLM refactoring pipeline on 450 Java files, cutting code smells up to 73% while flagging that assertions and public methods are sometimes silently removed.

Diagrid's Catalyst 2.0 adds Dapr-based cryptographic attestation and automatic failure recovery for AI agents across ten frameworks, including LangGraph and Microsoft Agent Framework.

The Rust Foundation Maintainers Fund has raised $350,000 and named its inaugural cohort of six paid maintainers, resolving details left open when the fund launched in June.

CISA added Gitea's CVE-2026-60004 remote code execution flaw to its KEV catalog after BleepingComputer reported attackers deploying cryptomining malware on unpatched servers.

Microsoft has pulled the WMIC command-line utility from Windows 11 24H2, 25H2, and 26H1 builds, ending a tool long abused by ransomware and other attackers.

The Cloud Native Computing Foundation gave Kubeflow its top maturity tier, citing 6,600-plus contributors and 260 million PyPI downloads.