Thursday, October 22, 2026 | The Morning Edition

PHP 8.2.35

github.comby tuyuri1,098 points576 commentsdiscuss

Related ongoing thread: Today's PHP security release, and how we're strengthening security - https://news.ycombinator.com/item?id=50182987

Above the fold

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

scotthelme.co.ukby hkc944 points460 commentsdiscuss

Today's PHP security release, and how we're strengthening security

thephp.foundationby ejohnso49811 points402 commentsdiscuss

Related ongoing thread: PHP 8.2.35 - https://news.ycombinator.com/item?id=50180873

(links to more at https://news.ycombinator.com/item?id=50184935)

EA is shutting down BioWare

theverge.comby aaronbrethorst702 points473 commentsdiscuss

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

cnbc.comby cbg0695 points428 commentsdiscuss

https://nmdoj.gov/press-release/the-new-mexico-department-of...

In brief

The 1.5°C goal of the Paris Agreement is no longer viable

unric.orgby velo_aprx655 points823 commentsdiscuss

There isn't an easy exploit for this PHP vulnerability

eliastaylor.comby zkldi630 points469 commentsdiscuss

The Future of CSS

joshwcomeau.comby soheilpro627 points278 commentsdiscuss

mitmproxy adds --emudhra option

github.comby ahlCVA618 points146 commentsdiscuss

Security Disclosure

blog.railway.comby passenger602 points338 commentsdiscuss

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

safedep.ioby abhisek594 points196 commentsdiscuss

Claude Duet

claude.comby kuberwastaken565 points532 commentsdiscuss

The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck

techdirt.comby robtherobber538 points535 commentsdiscuss

DuckDB 2.0.0 LTS “Cinnamon Teal”

duckdb.orgby nnx461 points62 commentsdiscuss

PHP2Shell: AI uncovers critical RCE in PHP

wiz.ioby danlark1453 points185 commentsdiscuss

Muse exposes users' personal and business secrets when they share conversations

arstechnica.comby gumby406 points179 commentsdiscuss

GitLab critical patch release

docs.gitlab.comby artooro404 points93 commentsdiscuss

Rust Style Guide

google.github.ioby kaycebasques389 points254 commentsdiscuss

Mistral Large 4

mistral.aiby funnym0nk3y327 points104 commentsdiscuss

OpenAI models are coming to Google Cloud

openai.comby armcat325 points146 commentsdiscuss

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out

php.netby timvdalen279 points2 commentsdiscuss

Dutch National Cyber Security Center is Offline because it uses PHP

ncsc.nlby jacquesm273 points95 commentsdiscuss

Patch the Planet: global response coordination as agents uncover vulnerabilities

openai.comby nr378266 points182 commentsdiscuss

Airbnb bans making guests do dishes and take out the trash

theverge.comby babelfish260 points231 commentsdiscuss

Qwen3-Coder writes less secure code when told it's for a US persona

hirundo.ioby mattifrank242 points118 commentsdiscuss

Using LLM for confidence scoring is a bad idea

rumple.github.ioby jimauthors224 points102 commentsdiscuss

Good type against all odds

unsung.aresluna.orgby firloop212 points24 commentsdiscuss

Meta hit with $25B penalty for deceiving users about privacy on Facebook

nmdoj.govby DeepLogin207 points2 commentsdiscuss

Whatever Happened to Fire Escapes

practical.engineeringby sohkamyung202 points163 commentsdiscuss

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

apnews.comby surprisetalk201 points98 commentsdiscuss

PHP 8.2.35

github.comby tuyuri1,098 points576 commentsdiscuss

Related ongoing thread: Today's PHP security release, and how we're strengthening security - https://news.ycombinator.com/item?id=50182987

Above the fold

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

scotthelme.co.ukby hkc944 points460 commentsdiscuss

Today's PHP security release, and how we're strengthening security

thephp.foundationby ejohnso49811 points402 commentsdiscuss

Related ongoing thread: PHP 8.2.35 - https://news.ycombinator.com/item?id=50180873

(links to more at https://news.ycombinator.com/item?id=50184935)

EA is shutting down BioWare

theverge.comby aaronbrethorst702 points473 commentsdiscuss

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

cnbc.comby cbg0695 points428 commentsdiscuss

https://nmdoj.gov/press-release/the-new-mexico-department-of...

In brief

The 1.5°C goal of the Paris Agreement is no longer viable

unric.orgby velo_aprx655 points823 commentsdiscuss

There isn't an easy exploit for this PHP vulnerability

eliastaylor.comby zkldi630 points469 commentsdiscuss

The Future of CSS

joshwcomeau.comby soheilpro627 points278 commentsdiscuss

mitmproxy adds --emudhra option

github.comby ahlCVA618 points146 commentsdiscuss

Security Disclosure

blog.railway.comby passenger602 points338 commentsdiscuss

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

safedep.ioby abhisek594 points196 commentsdiscuss

Claude Duet

claude.comby kuberwastaken565 points532 commentsdiscuss

The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck

techdirt.comby robtherobber538 points535 commentsdiscuss

DuckDB 2.0.0 LTS “Cinnamon Teal”

duckdb.orgby nnx461 points62 commentsdiscuss

PHP2Shell: AI uncovers critical RCE in PHP

wiz.ioby danlark1453 points185 commentsdiscuss

Muse exposes users' personal and business secrets when they share conversations

arstechnica.comby gumby406 points179 commentsdiscuss

GitLab critical patch release

docs.gitlab.comby artooro404 points93 commentsdiscuss

Rust Style Guide

google.github.ioby kaycebasques389 points254 commentsdiscuss

Mistral Large 4

mistral.aiby funnym0nk3y327 points104 commentsdiscuss

OpenAI models are coming to Google Cloud

openai.comby armcat325 points146 commentsdiscuss

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out

php.netby timvdalen279 points2 commentsdiscuss

Dutch National Cyber Security Center is Offline because it uses PHP

ncsc.nlby jacquesm273 points95 commentsdiscuss

Patch the Planet: global response coordination as agents uncover vulnerabilities

openai.comby nr378266 points182 commentsdiscuss

Airbnb bans making guests do dishes and take out the trash

theverge.comby babelfish260 points231 commentsdiscuss

Qwen3-Coder writes less secure code when told it's for a US persona

hirundo.ioby mattifrank242 points118 commentsdiscuss

Using LLM for confidence scoring is a bad idea

rumple.github.ioby jimauthors224 points102 commentsdiscuss

Good type against all odds

unsung.aresluna.orgby firloop212 points24 commentsdiscuss

Meta hit with $25B penalty for deceiving users about privacy on Facebook

nmdoj.govby DeepLogin207 points2 commentsdiscuss

Whatever Happened to Fire Escapes

practical.engineeringby sohkamyung202 points163 commentsdiscuss

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

apnews.comby surprisetalk201 points98 commentsdiscuss