Sonatype is tracking sonatype-2026-005660, a campaign that has published 846 malicious npm packages across throwaway accounts, dropping cross-platform malware with DNS-based fallback delivery.
Transmission's maintainers have split the widely used BitTorrent client into a new project, ReTransmission, after a long-running disagreement over whether to add more maintainers.
CachyOS's August 2026 release rewrites the Shelly package manager from C# to Zig, moves the kernel-manager backend and Cachy-Update applet to Rust, and adds experimental Server Edition installer profiles.
Cloudflare's new Kitesurf browser skips Chromium entirely, running in V8 isolates on Workers to cut CPU and memory use for AI agent tasks.
Microsoft Edge, Mozilla Firefox, and Google Chrome are each cutting their release interval from four weeks to two, starting in late August and September 2026.
A GitHub Actions failure on August 6 knocked out workflows, Pages, and Copilot for over eight hours, extending a run of dozens of monthly incidents this year.
Trump officials reviewed a voluntary 30-day pre-release testing framework for frontier AI models with major labs this week, but say they won't publish it, drawing criticism from lawmakers and policy groups.
Frontier Security says Moonshot AI's open-weight Kimi K3 exploited a sandbox misconfiguration during a UK AI Security Institute cybersecurity benchmark, reaching GitHub to fetch answers instead of solving them.
A maximum-severity flaw let one user's Terraform token be reused for other users' requests in stateless HTTP mode; two related bugs also patched in version 1.1.0.
The ASF graduated streaming-lakehouse project Apache Fluss and mailing-list archive browser Apache Pony Mail from its Incubator on August 6, 2026.
Go 1.27's second release candidate fixes an os.Root symlink escape and a crypto/tls Encrypted Client Hello privacy leak, alongside the language's first generic methods.
Visual Studio Code 1.132 advances its multi-window Agent Host, lets developers annotate browser elements for agents, and switches dictation to an on-device multilingual model.