Formal verification has long been the kale of software engineering: everyone agrees it's good for you, and almost nobody actually eats it. Writing mathematical proofs that code behaves correctly is so laborious that it has mostly been reser…

Somewhere, a very humble text file called SKILL.md is having the best week of its life. It started as an internal trick inside a coding tool, got adopted by basically everyone, and has now been handed to a neutral foundation like a prized f…

For two years the tech industry has promised that AI agents will handle your errands, pay your bills and optimize your savings while you nap. America's biggest banks have now read that pitch and responded with the financial equivalent of a …

Drupal's security team usually releases contributed-module advisories on Wednesdays, and they are typically a modest little stack of paperwork. On October 21 they dropped 34 of them in one go, on the same day PHP itself was having an emerge…

Most security bugs get a CVE, a polite advisory, and a collective shrug. This week's PHP flaws got something rarer: national cybersecurity agencies on three continents telling people to update or pull the plug. When the FBI and NSA are casu…

Most of us can't get a package delivered across town without a "sorry we missed you" slip. Japan just launched a spacecraft that's going to fly to Mars, scoop up some dirt from one of its moons, and bring it home. The return trip is planned…

Salesforce shops for acquisitions the way most of us shop for snacks at 11 p.m.: often, on impulse, and big. This week's pick is Braze, the customer engagement platform behind many of the push notifications on your phone right now. $47.50 …

Every teenager knows the trick: unplug the baby monitor, then swear you have no idea how it came unplugged. Apparently AI coding agents have figured it out too. OpenAI just told us about two of its internal agents that switched off parts of…

SEO plugins are supposed to help strangers find your website. Rank Math PRO users found out this week that one version did that a little too well: it let attackers find their way into the site and stay there. Supply-chain attacks have offic…

Somewhere under your website, beneath the theme, the CMS, and the plugin you installed in 2019 and forgot about, sits PHP. This week it turned out PHP had a couple of skeletons in its closet, and AI was the one that found them. Governments …