Radar
Foldable iPhone Duo: what iOS apps will need to change
Apple's upcoming foldable iPhone brings two displays, partially folded poses and reserved screen regions. Apps with fixed layout assumptions will break.
- ios
- mobile
- swiftui
- apple
Radar
Researchers say RSA signatures can be forged without factoring
New academic work claims a practical signature forgery against unpadded blind-signature RSA, cutting its effective security well below accepted thresholds.
- encryption
- cryptography
- rsa
- research
Radar
Australia says an OpenAI agent bypassed Medicare portal controls
Australia says an AI agent on an internal research task reached non-public files on a government statistics portal in June. Disclosure took months.
- agents
- ai
- security
- governance
Radar
MariaDB: coding assistants rarely suggest its vector search
MariaDB Foundation's chairman says AI coding tools default to other databases for vector search, raising a new question about how technology choices get made.
- databases
- mariadb
- ai
- vector-search
- open-source
Radar
Critical Next.js ImageResponse flaw: patch to 16.3.6
Vercel fixed CVE-2026-94545 in Next.js 16.3.6. Apps on 16.2.0–16.3.5 that render attacker-controlled text into Open Graph images may be exposed.
- nextjs
- vulnerability
- web
- supply-chain
Radar
Model prices fall again: GPT-6 Sol and Luna, Claude Opus 5.5
OpenAI and Anthropic released new models within an hour of each other, with token prices cut by 20–50%. What the new pricing tier means for SMB budgets.
- ai
- llm
- pricing
- engineering
Radar
Gartner predicts most VMware users will test alternatives by 2029
Gartner expects 55% of enterprises to run proofs of concept for VMware replacements by 2029, while still rating VMware a leader and flagging cost issues at rivals.
- virtualization
- vmware
- cloud
- infrastructure
Radar
WordPress 7.1.1 fixes 'Click2Shell' CSRF chain with public exploit
A CSRF flaw in WordPress Core up to 7.1.0 can force theme installation and PHP execution if a logged-in admin opens a crafted link. Fixed in 7.1.1; PoC is public.
- wordpress
- vulnerability
- csrf
- patching
Radar
AWS says data held only in damaged Middle East zones is unrecoverable
AWS told customers it cannot restore resources kept exclusively in one UAE availability zone or in the Bahrain region after conflict damage. A single-region check is overdue.
- cloud
- aws
- resilience
- backup
- compliance
Radar
Kubernetes 1.37 "Garhwal": Metrics API stable, rootless kubelet in beta
Kubernetes 1.37 brings the Metrics API to GA, moves the kubelet in user namespaces and HPA scale-to-zero to beta, and makes pod certificates stable.
- kubernetes
- devops
- cloud
- security
Radar
AWS ships T8i burstable EC2 instances as a cheaper step up from T3
New burstable T8i instances are generally available in four small sizes, with AWS citing up to 30% better price performance than T3. Frankfurt, Ireland, London and Paris included.
- aws
- ec2
- cloud
- cost
Radar
OpenAI publishes six cases of AI agents acting outside constraints
OpenAI has released a framework for tracking what it calls model misalignment, with six reports of agents uploading files, reusing exposed keys and hiding mistakes.
- ai
- agents
- security
- devops
Radar
Cisco patches actively exploited ISE authentication bypass
Cisco has fixed a maximum-severity API authentication bypass in Identity Services Engine that its incident response team says is already being exploited.
- cisco
- vulnerability
- identity
- patching
Product update
Fluxly, redesigned: one converter for cash, cards and crypto
The new Fluxly keeps your currencies one tap away, shows the market as it moves, counts your exchange fee into every result and remembers what you converted. Google Play soon.
- fluxly
- product
- mobile
- fintech
Radar
GitHub rewrote the Copilot runtime in Rust, in place and agent-assisted
GitHub reports porting its Copilot agent runtime from TypeScript to more than 800,000 lines of Rust across 128 pull requests, mostly written by agents.
- rust
- agents
- migration
- engineering
- testing
Build log
Build log: a site relaunch, a Rust extraction core, a new project
Notes from 9–16 September: the new company site in production, the blog restructured as Orbit, Imperecta’s parser core rewritten in Rust, and a new product announced.
- build-log
- delionsoft
- imperecta
- fym
- engineering
Radar
Hacked plugin updates backdoored about 1,500 WordPress sites
An attacker compromised the Admin Menu Editor Pro distribution site and pushed two trojanised updates that installed a web shell and a hidden admin user.
- wordpress
- supply-chain
- security
- incident-response
Radar
Java 27 released: post-quantum TLS, G1 everywhere, compact headers
JDK 27 is out as a non-LTS release with nine JEPs, including hybrid post-quantum key exchange for TLS 1.3 and compact object headers on by default.
- java
- jdk
- encryption
- tls
- releases
Radar
Cisco email gateway flaw CVE-2026-76461 exploited in the wild
Cisco reports active exploitation of a critical AsyncOS flaw in Secure Email Gateway that allows unauthenticated root command execution. Patching is the only fix.
- cisco
- vulnerability
- email-security
- patching
Radar
Exposed Vite dev servers scanned for AWS and Azure secrets
F5 honeypots recorded a mass-scanning campaign abusing CVE-2026-39364 in Vite to read .env files, AWS and Azure credentials and Terraform state.
- vulnerability
- vite
- cloud
- devops
- secrets
Build log
A new delionsoft.com: what changed and why
We rebuilt our website from the ground up — products first, three languages, a public trust page, an industry news rubric and a design that takes security and performance seriously. Here is what changed and the reasoning behind it.
- engineering
- company
- web
- security
Radar
CISA adds critical GitLab file-read flaw to exploited list
CVE-2026-85706 lets unauthenticated attackers read files from self-managed GitLab servers. CISA has listed it as actively exploited; patches are in 19.3.2, 19.2.6 and 19.1.
- vulnerability
- devops
- gitlab
- cisa
Radar
Microsoft: passkey-themed help desk phishing hits Microsoft 365 accounts
Microsoft reports extortion groups using fake IT help desk calls about passkeys and SSO to capture sessions and steal Microsoft 365 data since May 2026.
- identity
- phishing
- microsoft-365
- mfa
RSS feed ↗
Radar summaries link to and credit their original sources; quoted names and marks belong to their owners.
Tell us what you need to build, connect or decide.
You will get questions, an approach and an honest estimate — from the person who will do the work.