Tidy
Fix grammar in any Mac app with free on-device AI Discussion | Link
Latest News Archive - Page 113
Sevii Targets AI-Speed Attacks With Preemptive Autonomous Defense
Sevii has expanded its ADR platform with AI agents designed to investigate, contain, and remediate AI-driven attacks within minutes. The post Sevii Targets AI-Speed Attacks With Preemptive Autonomous Defense appeared first on SecurityWeek .
Kubernetes v1.37: etcd RangeStream Cuts Memory Use on Large List Reads
I am excited to announce that etcd RangeStream is graduating to beta in Kubernetes v1.37. Paired with etcd v3.7, it reduces the memory the API server and etcd need to read a large collection, and makes peak usage more predictable. The cost of large reads The API server serves most list and watch requests from its in-memory watch cache. Populating that cache requires reading a resource's full state from etcd, at startup and on every re-initialization. For a resource with many objects, or large ones, such as Pods, that read is expensive. The API server already paginated these reads, asking etcd for a fixed number of keys at a time rather than the whole collection at once. But a page bounded by key count has no awareness of object size, so a page of large objects can still be very large. That makes memory usage hard to predict, and a bad combination of object size and concurrent reads can be enough to trigger an OOM. etcd's unary Range assembles each page in full before sending it, and the API server holds it while decoding, so the same payload sits in memory on both sides at once. Most of that cost lands on etcd, which is also where streaming helps most. Streaming reads with RangeStream etcd v3.7 adds a streaming version of that read, the RangeStream RPC. It takes the same RangeRequest as Range and returns the same result set, but instead of building the whole response up front, etcd splits it into chunks and streams them. Chunk size is tuned adaptively to the values being returned, so a collection of large objects is bounded by bytes rather than by a key count, and memory is freed as the stream progresses instead of being held until a whole page is assembled. When the feature is enabled, the API server uses RangeStream wherever it reads a whole collection out of etcd. This includes watch cache initialization, and the fallback paths where a list request cannot be served from the cache and reads etcd directly. In either case the API server decodes each chunk as it arrives and releases it before pulling the next one, so neither side ever holds the whole collection. Requirements Kubernetes v1.37 or later etcd v3.7 or later RangeStream is used when the EtcdRangeStream feature gate is enabled on the kube-apiserver, which is beta and on by default in v1.37, and etcd is v3.7 or later. The API server resolves etcd's support at startup and also falls back at runtime if a call returns Unimplemented , so an API server paired with an older etcd keeps using the paginated Range path on its own. To turn it off, disable the gate: --feature-gates=EtcdRangeStream=false Confirming RangeStream is in use The API server records streamed reads under their own operation label on its etcd metrics. A non-zero count here means RangeStream is in use: etcd_request_duration_seconds_count{operation="listStream"} If it stays at zero, the API server is still using the paginated Range path, most likely because etcd is older than v3.7. Learn more KEP-5966: etcd RangeStream RangeStream in the etcd API guide Announcing etcd v3.7 SIG etcd If you have questions or feedback, join the #sig-etcd channel on Kubernetes Slack .
UN food agency cuts aid in West Bank amid funding crisis
UN food agency cuts aid in West Bank amid funding crisis
Health crisis looming as Gaza heads towards rainy season, warns WHO
Water quality in embattled Palestinian enclave already poor; flooding will exacerbate threat to health, says UN agency.
CDC reported then deleted two measles deaths that were questioned by RFK Jr.
Historically, state health departments determine cases and deaths, not the CDC.
Congress averts a government shutdown ahead of the midterms
With just a few weeks to spare, the House approved legislation extending funding through mid-December.
New Android Drop adds remembered items in Find Hub, makes anti-nausea dots official
New features are rolling out across the Android ecosystem starting today.
Claude Fable 5.1 and Claude Mythos 5.1
What's new in Claude Fable 5.1 – https://platform.claude.com/docs/en/models/fable-5-1/whats-n... System Card: https://www-cdn.anthropic.com/0339e6a7c5c7b87f5c07798616dc32... Comments URL: https://news.ycombinator.com/item?id=49525378 Points: 716 # Comments: 674
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory. "JFrog Artifactory contains an authentication weakness that, under default
Google’s answer to Canva is an AI tool where you prompt instead of design
With Google Pics, Google is pushing deeper into the creative software market dominated by Canva and Adobe, but with a distinctly AI-first approach.
Russia targets Ukraine’s rail network as war enters deadly new phase
Six employees killed on Tuesday after Moscow escalates attacks on infrastructure and Ukrainian capital Russia has opened a deadly new phase in its war against Ukraine by deliberately targeting the country’s railway network, with six employees killed on Tuesday in the latest strikes on Kyiv. Ukraine’s state-owned railway company, Ukrzaliznytsia, said its workers died when a ballistic missile plunged into a locomotive depot. The Russians hit other railway facilities, it added, during a massive bombardment of Kyiv and the Kyiv region. At least 12 people died , with a dozen wounded, including three children. Continue reading...
langchain==1.4.0a3
Third alpha of the 1.4.0 line. This release focuses on the new langchain.mcp namespace for adapting MCP servers into LangChain tools. langchain.mcp highlights MCPAdapter adapts any target fastmcp.Client accepts — a URL, a local script, an in-process server, an MCPConfig naming several servers, or a pre-built client — as well as a FastMCP ClientGroup for a fleet of servers behind one client. MCPAdapter.list_tools(*, cache_mode="use") discovers and adapts tools, with optional client-side response caching (SEP-2549): use serves a cached list within the server's TTL hint, refresh repopulates it, bypass skips it. as_langchain_tool(tool, client, *, elicitation=None) converts a single MCP tool for callers managing their own client. Tool metadata is grouped under an mcp namespace on each tool: the tool's annotations (snake_case) and _meta under metadata["mcp"]["tool"] , and the serving server's identity under metadata["mcp"]["server"] . elicitation="interrupt" surfaces a server's mid-call questions as LangGraph interrupts, so a human answers and the run resumes. from langchain . agents import create_agent from langchain . mcp import MCPAdapter async with MCPAdapter ( "https://example.com/mcp" ) as adapter : agent = create_agent ( "anthropic:claude-sonnet-5" , await adapter . list_tools ()) Requires the mcp extra: pip install "langchain[mcp]" (and fastmcp>=4.0.0 ). Install pip install --pre " langchain==1.4.0a3 " This is a pre-release; install with --pre . Release notes curated with the assistance of an AI agent.
wrangler@4.128.0
Minor Changes #15454 dbbb795 Thanks @jamesopstad ! - Move binding utilities into @cloudflare/workers-utils Binding conversion, printing, and local-development validation are now exported from @cloudflare/workers-utils so they can be shared by Wrangler, the Cloudflare Vite plugin, and other consumers. The corresponding exports have been removed from @cloudflare/deploy-helpers . Consumers should import them directly from @cloudflare/workers-utils instead. Wrangler's unstable_printBindings API now accepts the bindings and an options object instead of five positional parameters. #15353 87a7acf Thanks @pombosilva ! - Add --date-start and --date-end filters to wrangler workflows instances list You can now narrow an instance listing to a creation-time window: wrangler workflows instances list my-workflow --date-start 2026-01-01 --date-end 2026-01-31 Either flag can be used independently. Both accept an ISO 8601 date or timestamp and are normalised to UTC before being sent, so a date-only value such as 2026-01-01 works as well as a full 2026-01-01T13:00:00Z . The bounds are inclusive and compose with the existing --status filter. #15379 ea28cc3 Thanks @ibbykhazanchi ! - Add query string redaction to Workers observability configuration Set observability.redact_query_string in wrangler.json or observability.redactQueryString in the experimental cloudflare.config.ts format to remove query strings from request URLs in logs and traces. #14915 707cb6f Thanks @longlho ! - Include exact raw and gzip-compressed Worker bundle sizes in structured deploy and version-upload output. Patch Changes #15436 200780f Thanks @dependabot ! - Update dependencies of "miniflare", "wrangler" The following dependency versions have been updated: Dependency From To @cloudflare/workers-types ^5.20260828.1 ^5.20260831.1 workerd 1.20260828.1 1.20260831.1 #15406 b3f2628 Thanks @james-elicx ! - Reduce the installed bundle sizes of Wrangler and Miniflare Wrangler now resolves bundled workspace dependencies from source during monorepo builds so unused exports can be removed. Miniflare, its shared CLI and container dependencies now use granular @cloudflare/workers-utils entry points instead of loading the package barrel, reducing the raw Wrangler and Miniflare artifacts by 6.16 MiB (31.4%) and 1.06 MiB (22.9%) respectively without changing runtime behavior or installed dependencies. #15398 1809c5e Thanks @james-elicx ! - Reduce Wrangler's published package size Stop including the unused build metafile in the npm package, reducing its unpacked size by approximately 3.1 MiB. #15382 b3fb2bf Thanks @Om-singhaI ! - Skip the skills install status lookup when telemetry is disabled Telemetry events include a currentAgentSkillsInstalled property, and computing it can query the GitHub API. The lookup used to start before the telemetry permission was checked, so users who opted out via WRANGLER_SEND_METRICS , DO_NOT_TRACK , or send_metrics in their Wrangler config still triggered network requests on behalf of telemetry. The dispatcher now checks the permission first and only performs the lookup when telemetry is enabled. Updated dependencies [ 200780f , b3f2628 , 87a7acf ]: miniflare@5.20260831.0-alpha
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet (formerly UNC5669) since 2024. Google Threat Intelligence Group (GTIG) and Mandiant teams described the threat actor as "specializing in manipulating payment systems and banking software in Brazil to conduct fraudulent transfers." The adversary
Meta just beat OpenAI and Google at real-time transcription
Meta’s Superintelligence Labs on Tuesday launched Muse Voice Transcribe, a new real-time speech recognition model that, at least on some The post Meta just beat OpenAI and Google at real-time transcription appeared first on The New Stack .
Homey just made the smart home controller I hoped Apple would build
Smart homes have gotten really good at making things really complicated. Turning on a light can involve multiple steps, compared to just flipping a switch. Homey, the Dutch-based smart home platform owned by LG, thinks it has a solution. This week it launched the Homey Portal, a touchscreen smart home controller that looks very promising, […]
ChatGPT Health adds Epic integration for clinicians to import patient data
OpenAI said that the integration provides read-only access to health records for clinicians.
How AI-native companies turn workflows into operating capability
Basis, Clay, and Exa Labs use AI agents to improve onboarding, account management, and developer integrations. See what enterprise leaders can apply.
China’s Xi makes first visit to Egypt in a decade, amid regional turmoil
Chinese President Xi visits Egypt to deepen economic ties and align strategies amid Middle East crises.
Ousted UK Prime Minister Keir Starmer to quit domestic politics
Departed Labour Party leader now plans to focus on international affairs.
Germany terminates lease for Berlin's Russian House
Germany has announced the termination of the lease for the Russian House in the heart of Berlin. Critics have long said it is a hub for propaganda and espionage.
Google Deepmind's new chief says frontier AI leadership is the only thing that matters
Google Deepmind chief Koray Kavukcuoglu admits Google's current models are "a little bit below the frontier" but says he's "100% certain that we will be at the frontier." He didn't share any concrete frontier news to back that up, though. The article Google Deepmind's new chief says frontier AI leadership is the only thing that matters appeared first on The Decoder .
Samsung’s Galaxy Z Fold 8 Ultra hits its lowest price since launch
If you missed the release promotions for the recent round of Samsung Galaxy phones, you’re in luck. The Samsung Galaxy Z Fold 8 Ultra is $300 off at Best Buy, the best deal we’ve seen since the phone launched last month. The phone impressed us with its rear triple camera setup, excellent battery life, and […]