Software, QA & Development

CVE-2026-111497 affects Brotli decoders used across runtimes and tools. Here are confirmed fixes, exposure paths and remaining gaps.

A developer building a container runtime describes how Docker uses Linux processes, kernel features and filesystem layers to run containers.

Company spending on AI coding tools ranges widely, while productivity results conflict. A practical guide to measuring outcomes, costs and risks.

Anthropic and Theorem report proofs for 239 fuzz-test entry points across 123 libraries, while noting limits in platform coverage and cost.

Anthropic reports early progress using LLMs to assist formal software verification, but real-world reliability and scale remain unproven.

The Pragmatic Engineer’s Pulse reports a cluster of security incidents and vulnerabilities, raising questions about how AI changes attackers’ and defenders’ work.

PHP patched two critical remote-code-execution flaws called PHP2Shell after separate AI-assisted research traced a vulnerability class back to 2004.

OpenAI’s headline expands FDE as forward-deployed engineering, but the available article text does not describe the role or announce hiring.

Railway says an attacker may have accessed some decrypted customer environment variables and links the incident to attacks on AI inference providers.

A cluster of security disclosures points to separate risks in PHP, certificate keys, cloud data and software packages, with fixes and investigations ongoing.