News

The x321 Tech Digest — what engineers are talking about, distilled daily.

  • Vulnerability Watch No19

    Xendit Payment Access-Control Flaw Exposes Unauthenticated Attack Surface • Contest Gallery Hit by Unauthenticated XSS Vulnerability • Kali Forms Vulnerable to Unauthenticated Script Injection • BackWPup XSS Flaw Threatens WordPress Administrators • FormCraft SSRF Flaw Could Reach Internal Services…

    Read digest →

  • Tech Layoffs Watch No7

    BuzzFeed Cuts 180 Jobs After Leadership Shake-Up • Patreon Lays Off 93 Employees in Major Restructuring • TechCrunch Tracks 2026 Layoffs Linked to AI

    Read digest →

  • Topics Everyone Is Talking About No396

    Our position on open-weights models • Kimi-K3 Releases on HuggingFace 727 • PGSimCity – How PostgreSQL Works • Blogging Can Just Be Stating The Obvious • Most Googlebots are fake

    Read digest →

  • Framework Release Watch No3

    Laravel 13.23.0 Adds Monthly Logging and SES Tenant Support

    Read digest →

  • Vulnerability Watch No18

    Malformed Chunk Size Can Crash facil.io Servers • Partial Multipart Request Freezes facil.io Workers • Empty Multipart Field Crashes facil.io • Critical TeamCity Agent Protocol Flaw Enables Remote Code Execution • NVIDIA NeMo Command Injection Exposes Linux Hosts…

    Read digest →

  • Vulnerability Watch No17

    XMLRPC-C Error Pages Expose Reflected XSS • Linux Traffic Control Bug Triggers Use-After-Free • Linux QAT Driver Drops Risky Legacy IOCTL Interface • Hyper-V Display Response Can Overrun Kernel Array • Linux Handshake Framework Hit by File-Lifetime Flaw…

    Read digest →

  • Topics Everyone Is Talking About No395

    Fast DEFLATE compression in Lean • Kill The Cookie Banner • London Gatwick has launched a robotic airport parking service • Its not empowering to hand off the details • SQLite WAL Mode Can Lock Short-Lived Readers

    Read digest →

  • Framework Release Watch No2

    Laravel 13.22.0 Expands Queues, HTTP Fakes, and Container Binding • FastAPI 0.140.0 Cuts Dependency Memory Usage

    Read digest →

  • Vulnerability Watch No16

    NoteGen Shell Permissions Enable Full Remote Code Execution • Unsanitized AI Responses Expose NoteGen Users to XSS • WordPress Membership Flaw Lets Visitors Claim Elevated Roles • Critical SQL Injection Hits WordPress Issue-Tracking Plugin • CAFEHAUS API Bug Enables Administrator Account Takeover…

    Read digest →

  • Topics Everyone Is Talking About No394

    Claude Opus 5 Delivers Near-Frontier Performance at Half the Cost • Why Staying Focused Keeps Getting Harder • Why I Regret Moving from GitHub to Codeberg • Why Software Quality Keeps Declining Despite AI • Rethinking Object Orientation Beyond Classes…

    Read digest →