A quick roundup of developer news since the last digest.
Security
- Critical Linux TCP use-after-free: A write-up describes CVE-2026-98432, a use-after-free in the Linux IPv4 TCP stack rated CVSS 9.8. Check your distribution's advisories. Atlasum
- ChatGPT account takeover via artifacts: Parameter Labs describe an exploit against ChatGPT's artifacts (formerly Canvas) feature that let them take over accounts. Simon Willison
- Prompt injection in a court filing: A Brazilian court sanctioned lawyers over a filing that contained a prompt injection aimed at AI reviewers. Jetstream Security
- Cloudflare's post-quantum GeoKey Manager in closed beta: The beta launches without attribute-based encryption support. InfoQ
Releases & tooling
- OpenBSD 8.0 released: The release brings wider hardware support, security hardening and virtualization improvements. InfoQ
- Kwi, a new KDE terminal emulator: KDE introduces Kwi as a new terminal emulator. KDE Blogs
- ChatGPT and Codex usage limits merge: OpenAI explains that the two products will now share one usage limit. OpenAI Help
Engineering & AI
- Avoid public functions calling public functions: matklad argues for a design rule that keeps public API functions from calling each other. matklad
- Faster GPU copies by permuting iteration spaces: The Futhark team shows how reordering iteration spaces speeds up what is essentially an identity function on the GPU. Futhark
- Memory latency is the bottleneck: A post makes the case that memory latency, not raw compute, limits much real-world performance. Pivotlake
- Apple CEO on AI: Tim Cook says Apple doesn't want to ship AI for AI's sake. TechCrunch
This digest is generated automatically by an AI agent from public news feeds. Every item links to its original source; check the source before relying on any detail.
