Software Tech News

Security researchers have uncovered a new zero-click exploit chain for the Google Pixel 10 that grants attackers full root access. Building on similar findings from the Pixel 9, this demonstrates that modern Android devices can still be completely compromised without any user interaction.

Codex is now available in the ChatGPT mobile app, enabling users to manage coding tasks on the go. This update allows developers to monitor, steer, and approve these processes in real time across various devices and remote environments.

An article discussing DwarfStar4, a new inference runtime for the DeepSeek 4 language model requiring 96GB of VRAM, sparked humorous confusion in the comments section. Readers initially mistook the DS4 abbreviation in the title for references to the PlayStation controller, the Dark Souls 4 video game, or the Citroen DS 4 automobile.

The U.S. Department of Justice is demanding that Apple and Google reveal the personal data of over 100,000 users who downloaded the EZ Lynk Auto Agent car-tinkering app. Federal authorities are seeking to unmask these drivers in order to investigate the use of the vehicle modification software.

A new browser-based project allows users to explore Wikipedia and Wikimedia Commons through a fully functional Windows XP desktop interface. This nostalgic experience organizes the encyclopedic content into familiar folder trees and features Earth as a digital scrapbook.

Privacy-focused VPN provider Mullvad is addressing a vulnerability where its exit IP addresses were predictably assigned, making users identifiable. The company is rolling out a fix that scrambles exit IP positions based on user public keys to resolve the tracking issue. This update preserves Mullvad's strategy of utilizing multiple exit IPs per server to prevent strict website rate limits and IP blocks.

A new open-source GitHub project called Image-blaster introduces an image-to-world skillset for the Claude AI model. The tool enables users to instantly generate detailed 3D environments, meshes, and sound effects from just a single input image. Developers can access and contribute to the ongoing development of the project directly on GitHub.

Radicle is an open-source, peer-to-peer code collaboration stack designed to function as a sovereign code forge. Built directly on Git, it offers developers a decentralized alternative for hosting and managing their software projects.

Several senior leaders of the open-source project Zulip and its parent company, Kandra Labs, are leaving to join Anthropic. As part of this major transition, Kandra Labs is being donated to a newly established, independent nonprofit called the Zulip Foundation.

DPhi Space's ClusterGate-2, a pure-OCaml CCSDS protocol stack featuring end-to-end-encrypted command and control and post-quantum key rotation, successfully booted in orbit aboard the Borealis satellite. This milestone establishes a highly secure foundation for space communications, with the next iteration of the technology already planned as OxCaml.

A new book about Steve Jobs' time at NeXT Computer reveals how his so-called exile actually forged the foundation of Apple's modern software architecture. The publication also provides essential context for understanding the company's upcoming CEO transition.

Start9 is expanding into hardware with a new RISC-V router powered by StartWRT, a customized fork of OpenWrt featuring a modern, simplified interface designed for non-technical users. Community members express mixed reactions, praising the accessible design but raising concerns about the startup's hardware and software risks, high pricing, and the need for real-world performance benchmarks. Furthermore, power users debate the merits of a full software fork over upstream contributions and worry that the simplified GUI might restrict access to advanced networking configurations.

A new research paper introduces the NoWA write pattern, which guarantees a write amplification factor of exactly one on standard solid-state drives by aligning application-level data placement with the hardware's internal garbage collection. By organizing data into blocks that are invalidated and discarded in bulk, the technique prevents the drive from moving valid pages internally even at full capacity. Developers note that this breakthrough in storage optimization could pave the way for a new class of highly efficient database systems.

Gyroflow is an open-source software project that provides advanced video stabilization by utilizing gyroscope data. Developers looking to contribute to the tool can participate in its development via the project's GitHub repository.

Waymo has initiated a voluntary recall of approximately 3,800 robotaxis to address a software flaw that could cause the vehicles to drive into flooded roadways. The company is deploying an over-the-air update to ensure the autonomous cars safely avoid navigating through deep standing water.

The Open Vehicle Monitoring System project is gaining traction as electric vehicle owners seek to bypass restrictive OEM CAN gateway modules that limit standard OBD-II ports to read-only access. While manufacturers claim these lockouts improve security, critics argue they are primarily designed to monetize telemetry data and force users into proprietary software subscriptions. Consequently, drivers are increasingly turning to open-source tools and hardware workarounds to regain full diagnostic control and privacy for their vehicles.

Despite Apple spending five years fortifying its systems against memory corruption, security researchers have developed the first public macOS kernel exploit for the new M5 chip. Working alongside Mythos Preview, an engineering team successfully built a functional exploit in just five days.

A newly discovered exploit for the Nginx web server is now available on GitHub, specifically targeting the CVE-2026-42945 vulnerability. Developed by DepthFirstDisclosures, the exploit tool named Nginx-Rift is currently open for community code review and contributions.

The popular all-in-one JavaScript runtime and package manager Bun has officially merged its major rewrite in the Rust programming language. Spearheaded by creator Jarred Sumner, this architectural transition leverages Rust's performance and memory safety to further enhance the tool's speed and reliability.

Readers reminisce about bypassing early shareware DRM and payment enforcement in classic games like Scorched Earth and Escape Velocity by editing game files or altering system clocks. The discussion highlights the forgiving attitudes of early software creators toward piracy and local cheating. Additionally, the thread mourns the passing of Escape Velocity co-creator Peter Cartwright, noting that his Kickstarter to remaster the game was successfully funded after his death.

Twin brothers wiped 96 government databases just minutes after being terminated from their jobs. This retaliatory data destruction highlights the critical need for organizations to revoke employee system credentials before conducting staff dismissals.

A new technical deep dive explores the inner workings of storage devices by dumping, reverse engineering, and modifying the firmware of various HDDs and SSDs. This hands-on project provides a comprehensive look at how hard drives function at the lowest software levels.

The UK government has replaced its use of Palantir software with a newly developed, internally built IT system for managing refugee data. Officials stated that the in-house solution offers greater flexibility while maintaining high security standards.

A newly discovered vulnerability in Tesla Wall Connectors allows attackers to bypass firmware downgrade protections by exploiting the bootloader through the physical charge port connector. This flaw could enable malicious actors to install older, potentially insecure firmware versions on the electric vehicle charging stations.

An open-source project is porting Microsoft's nostalgic 1990s animation software, 3D Movie Maker, to the Linux operating system. This effort allows users to experience the classic movie-making features and the iconic dog mascot McZee on open-source platforms.

This piece breaks down the GGUF file format to explain the essential metadata and extra components needed to run a language model independently of its raw weights. Additionally, it highlights the current limitations of the format by identifying what crucial information is still missing for seamless deployment.

A new open-source project introduces a specialized skill for AI coding assistants like Claude Code and OpenAI Codex to foster deliberate practice. The tool, named learning-opportunities, helps developers actively refine their programming abilities while working alongside AI. By prompting users to engage critically with the code, it prevents over-reliance on automated generation and promotes continuous learning.

Anthropic has released an open-source GitHub repository called Claude for Legal, providing a suite of plugins tailored specifically to streamline legal workflows. Developers are encouraged to contribute to the project's ongoing development to help integrate the company's AI capabilities into specialized legal processes.

A new open-source project named Nibble allows developers to generate LLVM IR without using malloc or relying on external dependencies. The lightweight tool is available on GitHub and is designed to be entirely self-contained. This makes it a highly practical solution for low-level code generation in constrained environments.

A newly discovered zero-day exploit named YellowKey is currently targeting Microsoft BitLocker encryption. Additionally, security teams are tracking a second zero-day vulnerability called GreenPlasma that enables local privilege escalation.