Platform, infrastructure, and tooling changes that affect small teams. Every item names its primary source and links to it. Reverse chronological, no ranking.
Beacon, a CRM provider for UK charities, says an AWS access key exposed in public JavaScript build artifacts is the leading suspect behind a July data theft that hit more than a dozen high-profile nonprofits.
QR-code marketing company Pageloot traced a credential leak to a contractor who stored staging environment passwords in a Google Doc set to public visibility, surfaced months later in Google's search autocomplete.
A 16-year-old race condition in SQLite's checkpoint logic caused a year of intermittent database corruption at Tailscale, traced only after a six-month investigation and a custom diagnostic tool.
Tailscale identified a 16-year-old data race in SQLite's WAL checkpointing as the cause of the database corruption behind last year's outages, after six months tracking it down with a custom logging tool.
Anthropic merged its Claude in Chrome side panel into Cowork, so a task started in a browser tab picks up on desktop, web, or mobile, useful for developers running Claude against dashboards and vendor portals with no native integration.
CodeRabbit launched Agentic Change Management, a control layer that triages and explains pull requests as more of a team's code comes from AI agents rather than people.
Gregory Kurtzer, the founder of CentOS and Rocky Linux, launched OpenWALDO, a community-contributed AI training dataset meant to make model provenance auditable the way open-source code already is.
A ransomware affiliate got past an unprotected VPN account, then crashed its own encryptor trying to hide from security tools in Windows Safe Mode, per a Huntress incident writeup with defense steps that don't need a dedicated security team.
AWS, Meta, and other hyperscalers are signing multi-year supply contracts for chips and storage, leaving smaller buyers facing longer lead times and pushing more of them toward renting capacity instead of owning it.
Databricks acquired Electric, maker of the WASM-based PGlite Postgres project, to give individual AI agents their own local, syncable database.
OpenAI shipped a Linux preview of its ChatGPT desktop app, bundling ChatGPT, ChatGPT Work, and Codex into native .deb and .rpm packages, closing the gap with the Mac and Windows builds.
A York University and Calgary study of over a million Reddit posts found Claude Code, Cursor, and Copilot deleting files and deploying to production without authorization.
Perplexity skipped the off-the-shelf microVM route for its agent sandboxes, betting the hard problem is session durability at scale, not isolation.
The Model Context Protocol's biggest revision since launch drops sessions and the initialization handshake, pushing remote servers toward plain stateless HTTP.
A multi-hour outage on August 6 hit Actions, Pages, Copilot's coding agent, and hosted runners, part of a pattern of roughly two dozen incidents a month.
Over 40,000 game runs show reviewers approving malicious AI coding agent commands roughly one time in three, with credential-access requests missed most often.
Asked to move up a waitlist, a Claude-based agent found the gym's cancellation endpoint had no authorization check and used it on someone else's booking.
Anthropic is switching Claude Code's auto-approval mode on by default for Pro, Max, and Team plans, betting a safety classifier catches more than manual review does.
Apps with social feed or user-generated content discovery features must now declare it; the flag becomes mandatory for submissions in September.
Clusters still on 1.33 after July 29 move to extended support by default, at $0.60/hour per cluster instead of $0.10.
The fourth Hetzner pricing action of 2026 raised CCX and CPX cloud instance prices 2.1x to over 3x in some regions; existing contracts are unaffected.
Store listing assets — names, icons, screenshots, descriptions — are now shared with approved alternative Android marketplaces in the US by default.
Phone-call account verification is no longer an accepted use case for SMS and Call Log access; all apps must also carry a content rating.
The new model targets long-running, multi-step coding work; available now on Pro+, Max, Business, and Enterprise plans.
News items are written by ixsoftum's editorial team from the linked primary source and checked by an editor before publishing. Where a summary and the source disagree, the source is correct.