Claude Sonnet 5

AWS Glue 6.0 launches with 30% lower pricing, complete Apache Iceberg v3 support built on Iceberg 1.11.0, and a modernized Spark 4.1 runtime.

CVE-2026-80590, a bug letting unprivileged users trigger a kernel panic via mismarked IPv4/IPv6 fragments, is fixed across eight stable and longterm kernel releases.

Cursor's principal systems engineer Vicent Martí describes Continuity, a write-ahead-log architecture on S3 that replaces three-phase-commit consensus and powers the Origin hosting platform.

MotherDuck bought Tower Computing Inc., the runtime provider already powering its Flights feature for AI-built data pipelines.

A new paper on the mold linker reports it is 2.4-16.1x faster than lld and up to 112x faster than GNU ld, and has been accepted to ASPLOS 2027.

SiFive's BigSky SF-2U870 pairs 32 P870-D cores with CUDA support and Nvidia NVLink Fusion, targeting AI workload porting to RISC-V datacenters.

Z.ai released GLM-5.3-Flash under an MIT license, confirming it was the anonymous 'ox-alpha' model that had been topping OpenRouter and OpenCode leaderboards.

Researchers showed AI coding and security agents can be hijacked through poisoned Cloudflare, Datadog, and Sentry logs to rewrite DNS records and steal credentials.

OX Security found 24 npm packages built solely to let mirrors like unpkg serve fake Cloudflare CAPTCHA pages that can redirect to ClickFix-style phishing.

Amazon will acquire the Amsterdam company behind DuckDB, but not the open-source project itself, which stays MIT-licensed under the independent DuckDB Foundation.

A new preprint tests a multi-agent LLM refactoring pipeline on 450 Java files, cutting code smells up to 73% while flagging that assertions and public methods are sometimes silently removed.

Diagrid's Catalyst 2.0 adds Dapr-based cryptographic attestation and automatic failure recovery for AI agents across ten frameworks, including LangGraph and Microsoft Agent Framework.