The Dev Dispatch

DEV · News

Microsoft formalizes heavy use of AI for vulnerability discovery

Microsoft says generative AI is now part of its vulnerability management process, especially for Windows and other products. The company says LLMs help surface issues earlier, while human engineers still handle validatio…

Next (FR) · Jul 10, 2026 curated by Charlie

DEV · Reads

Official jscrambler npm Package Compromised at 8.14.0

The official jscrambler npm package was compromised at version 8.14.0, introducing malicious code into the dependency chain. Developers using this version should update immediately and audit their projects for potential …

r/programming (Top) · Jul 11, 2026 curated by Heiko

DEV · Security

AI Uncovers 15-Year-Old Linux Kernel Privilege-Escalation Flaw

Nebula Security's AI-driven bug-hunting tool VEGA discovered GhostLock (CVE-2026-43499), a use-after-free vulnerability lurking in the Linux kernel since 2011. The flaw grants any logged-in user root access on unpatched …

WIRED · Jul 11, 2026 curated by Heiko

DEV · News

Apple sues OpenAI over alleged trade-secret theft

Apple has filed a lawsuit against OpenAI in federal court in Northern California, accusing the company and its hardware arm io Products, along with two former Apple executives, of organizing the collection of industrial …

Next (FR) · Jul 11, 2026 curated by Charlie

DEV · Security

Django releases 6.0.7 and 5.2.16 to fix security issues

Django has released versions 6.0.7 and 5.2.16 to address three low-severity security issues across supported branches. The fixes cover a cached Set-Cookie exposure risk, a heap buffer over-read in GDALRaster, and a heade…

heise Developer · Jul 11, 2026 curated by Charlie

DEV · Releases

TypeScript 7.0 Released: Massive Performance Leap Powered by Go Rewrite

Microsoft has officially released TypeScript 7.0, marking a major architectural shift. By rewriting the compiler almost entirely in Go and introducing parallelized workflows, the new engine achieves compilation speeds ro…

heise Developer · Jul 10, 2026 curated by Giselle

DEV · Reads

Why developers are ditching GitHub for Codeberg and self-hosting alternatives

The Reddit thread explores reasons developers are moving from GitHub to Codeberg and self-hosted options. It highlights concerns around platform policies, pricing changes, data control, and the appeal of community-owned …

r/programming (Top) · Jul 9, 2026 curated by Georg

DEV · Reads

Google pays $250K for Linux vulnerability allowing guest VM escapes

This short item is worth reading because it flags a serious Linux vulnerability affecting virtualized environments and notes a $250K reward tied to it. For developers running workloads in VMs or managing cloud infrastruc…

r/programming (Top) · Jul 9, 2026 curated by Charlie

DEV · News

Postgres Rewritten in Rust Passes Full Regression Test Suite

A Rust reimplementation of PostgreSQL has achieved 100% compatibility with the official Postgres regression test suite. This milestone demonstrates the feasibility of rebuilding a complex database engine in Rust while ma…

Hacker News (Dev, ≥100 P.) · Jul 9, 2026 curated by Heiko

DEV · Releases

Node.js v26.5.0 Released

Node.js 26.5.0 is now available. This release includes bug fixes, performance improvements, and updates to core dependencies. Check the official changelog for detailed updates affecting your projects.

Node.js Releases (dist) · Jul 8, 2026 curated by Heiko