security

Two product launches within four days signal that safe execution of LLM-generated code with real credentials has become a mainstream infrastructure problem.

Three converging developments—Django 6's built-in safety features, an 86% type-hint adoption rate, and Anthropic's PSF security investment—reveal a Python ecosystem entering a new phase of maturity.

Researchers say Git-sourced dependencies can re-enable code execution paths even when npm is run with --ignore-scripts, undermining a widely recommended mitigation after 2025’s Shai-Hulud worm.

Meta rewrites WhatsApp's media processing library in Rust, cutting code by 44% while hardening security for 3 billion users across every major platform.

Anthropic releases its most capable model yet, featuring a 1M-token context window, parallel agent coordination, and security research that uncovered over 500 previously unknown vulnerabilities in open-source software.