How Cursor bypassed Git's scalability limits
Cursor, the AI-powered code editor, had to solve a real Git scalability issue to function properly on very large codebases. Here’s what they did—and why it matters to every senior dev.
Aug 24, 2026 3 1
A malicious .git file can execute code in Claude Code, Codex, and Cursor
The Hacker News documents a new class of attack: malicious .git configurations that, when read by AI coding agents, execute attacking code. The tools meant to secure become vectors.
Sep 3, 2026 9 2
C# welcomes union types in November—a catch-up that brings the language closer to F# and Rust
Microsoft confirms via The Register the arrival of union types in C# in November 2026. A feature that TypeScript, Rust, Swift, and F# have had for a long time, and which changes the way business states are modeled in C#.
Sep 3, 2026 19 3
wp2shell: Public exploits for WordPress Core RCE - patch now
The wp2shell vulnerability in WordPress Core allows unauthenticated remote code execution. Public exploits are circulating. If your installation isn't up to date, you're at risk—and 43% of the web runs on WordPress.
Sep 2, 2026 9 2
ReactOS 0.4.16: The Windows of the 90s open source returns with fewer bugs
ReactOS, the open-source project that rebuilds Windows XP/2003 from scratch without using Microsoft's code, has released version 0.4.16. Twenty-two years of volunteer reverse engineering to revive an interface that shaped a generation.
Sep 2, 2026 25 4
I rewrote 65,000 lines of Go to Rust with Fable. Invoice: $400
An engineer tasked Fable, Anthropic's specialized code transformation model, with migrating a 65,000-line Go codebase to Rust. The result? It works, it cost $400, and it raises real questions about the future of large-scale codebase migrations.
Sep 2, 2026 22 3
PNG steganography + reverse tunnel: a new documented variant of stealthy attack
A campaign conceals malicious code in PNG files via steganography, then deploys a custom reverse tunnel to maintain persistent access. The reverse tunnel technique continues to diversify in its delivery vectors.
Sep 1, 2026 2 1
ServiceNow: Three CVEs Score 10.0, Remote Code Execution Without Authentication - Patch Urgently
Three distinct vulnerabilities, each with a maximum CVSS score of 10.0, allow anyone on the Internet to execute code on your ServiceNow servers without any authentication. An absolute emergency for the thousands of organizations using the platform.
Aug 31, 2026 19 3
8,300 Gitea forges exposed to RCE: is your source code on the list?
Thousands of teams self-hosting Gitea to retain control of their code are discovering their forge is vulnerable to remote code execution. The real issue: no one patches the "peripheral" tools.
Aug 31, 2026 18 3
Silent Hill: Townfall - a stealth horror set in British ruins, disturbing and promising
Rock Paper Shotgun played *Silent Hill: Townfall*, the new installment in the franchise developed by No Code. A stealth horror set in the ruins of an ordinary England—and that’s exactly what the series needed to rediscover.
Aug 28, 2026 25 4
Canonical sponsors AI translation from C to Rust – open source goes on the memory offensive
Ubuntu behind an AI-assisted automatic C-to-Rust conversion project. The goal: truly safe Rust, not just code that compiles without unsafe everywhere.
Aug 24, 2026 4 1
Claude Code switches to Bun (written in Rust): what this means for performance
Claude Code, the official CLI from Anthropic, now uses Bun as its JavaScript runtime—Bun itself is primarily written in Zig (with some Rust components). A technical choice that highlights the shift of the JS stack toward high-performance runtimes.
Aug 21, 2026 13 3