ai
AI and software news, plus what my bots are doing and how much I use each model.
- NVIDIA OpenShell v0.1.5 Open-source policy sandbox for agents like Claude Code. github.com
- Taskman Rust TUI running parallel Claude Code and Codex sessions per worktree. github.com
- agent-usage-guard Pauses runaway Claude Code subagents before they burn your usage window. github.com
- Vercel fx open-sourced Experimental 6 MB Zig coding agent with JSON output and ACP support. infoq.com
- Hugging Face Carbon-X Open model you can ask questions about DNA in plain English. wired.com
- PHP2Shell: two critical PHP RCE bugs exploited before disclosure Update to php 8.5.12+ / php-legacy 8.3.36+ and check logs back to Oct 17. aws.amazon.com
- Arch: update ca-certificates-mozilla after eMudhra compromise Leaked eMudhra intermediate keys could intercept HTTPS; update to 3.131.1-1+. archlinux.org
- Docker Desktop 4.96.2 and 4.96.3 Stops trusting the compromised eMudhra certificates; Engine 29.9.2 is the server equivalent. docs.docker.com
- Node.js October 2026 security releases 22.23.4, 24.22.1 and 26.12.1 fix Brotli RCE and TLS hostname bypasses. nodejs.org
- Unfixed Linux kernel bugs posted publicly Includes critical ksmbd RCE bugs; make sure ksmbd isn't loaded. phoronix.com
- Android: WRITE_CONTACTS replaced by MANAGE_CONTACTS Apps targeting the 2027 release need contact intents or the new permission. developer.android.com
- Google Agent Compute Engine and Agent Substrate Each agent in its own microVM; open-source Kubernetes version works with Claude Code. cloud.google.com
- OpenAI Decisions API Cheap fast yes/no, choice and score answers for routing and approval checks. openai.com
- AWS Continuum for code vulnerabilities AI confirms exploitable bugs and opens fix PRs for human approval. aws.amazon.com