News

The x321 Tech Digest — what engineers are talking about, distilled daily.

  • Framework Release Watch No5

    Node.js 26.6.0 Expands FFI and Test Runner APIs • Node.js 24.19.0 Advances Streams, Networking, and TLS

    Read digest →

  • Vulnerability Watch No24

    Brace Expansion Bypass Enables Memory Exhaustion • Angular i18n Flaw Turns Translations into JavaScript • Angular Server Rendering Exposes High-Severity XSS • Angular Cache-Key Collision Can Return the Wrong Data • OpenEMR OAuth Flow Bypasses Multi-Factor Authentication…

    Read digest →

  • Topics Everyone Is Talking About No400

    SwiftUI After 7 Years • Critical CVE issued for hallucinated SQLite vulnerability • A Rant About Technology 2005 • Your JSON Is Lying to You

    Read digest →

  • Topics Everyone Is Talking About No399

    Stripe Just Wants a Number • Google fixed more Chrome bugs in June than over the past two years, thanks to AI • The End of an Era • DeepSeek V4 Flash 0731 Intelligence, Performance and Price Analysis • Elevators…

    Read digest →

  • Vulnerability Watch No23

    Hashi Vault JS Flaw Enables Path and Query Injection • Defaults Deep Library Vulnerable to Prototype Pollution • DSSRF DNS Handling Bug Reopens SSRF Paths • Vault Webhook Flaw Can Leak Kubernetes Service Account Tokens • cPanel Database Rename Flaw Enables Root-Context SQL Execution…

    Read digest →

  • Framework Release Watch No4

    Angular 22.1.0 expands signals, CSS isolation, and HTTP caching • FastAPI 0.141.0 streamlines frontend development • Quarkus 3.38.0 improves proxy and Gradle handling

    Read digest →

  • Vulnerability Watch No22

    Yggdrasil Package Manager Flaw Enables Root Code Execution • Advantech ECU-1251D Exposes Passwordless Root SSH Access • Joomla Gridbox Admin Interface Hit by Multiple CSRF Flaws • Hospital Management System Report Page Exposed to Critical SQL Injection

    Read digest →

  • Topics Everyone Is Talking About No398

    Gemini Robotics 2 brings whole body intelligence to robots • Google will expand age checks on Android worldwide till the end of the year • Why is everyone trying to build a solid-state battery? • deskhop: Fast Desktop Switching Device • C float-to-int conversion can be undefined behavior…

    Read digest →

  • Vulnerability Watch No21

    Hardcoded Backdoor Exposes WordPress Sites to Admin Takeover • Easy Digital Downloads Upload Flaw Could Enable Code Execution • WooCommerce Wholesale Plugin Lets Authors Become Administrators • Netty OCSP Race Can Leak Data to Revoked Servers • Netty Accepts Replayed Expired OCSP Responses…

    Read digest →

  • Topics Everyone Is Talking About No397

    Codex Security • New HIV vaccine shows unprecedented success in preclinical study • You Could Have Come Up with Kimi Delta Attention • Replace Your CI With a Merge Queue • The mean means nothing…

    Read digest →