Hi there!

🛡️ Security & Privacy

• Node.js patched 11 vulnerabilities across the 22.x, 24.x, and 26.x branches, including two high-severity HTTP/2 flaws and a Permission Model bypass letting unauthorized filesystem access. More
• Arch Linux temporarily disabled AUR package adoption after a fresh malware wave compromised popular packages with Tor-based infostealer and RAT payloads. More
• Google detailed how Chrome now uses Gemini AI agents to find, triage, and fix security bugs faster, having patched over 1,000 flaws in the last two milestones alone. More
• A newly registered EU citizens' initiative, "Stop Killing The Internet," backed by Open Rights Group and Big Brother Watch, seeks legislation making digital ID and age verification voluntary and privacy-preserving, not mandatory. More
• The "Dysphoria" DDoS botnet has infected roughly 200,000 devices worldwide, using blockchain-based (Ethereum ENS/Solana SNS) command-and-control to stay resilient. More

🛸 Tech

• Keychron unveiled ZGM (Zephyr Gaming Mouse), the first open-source, GPL-3.0 firmware for gaming mice, built on Zephyr RTOS and launching with the G6 HE in early 2027. More
• GCC adopted a new AI policy banning "legally significant" AI-generated code contributions (roughly 15+ lines), while still allowing marked minor edits and AI-written test cases. More
• GitHub launched stacked pull requests in public preview, letting developers break large changes into independently reviewable, dependency-ordered PRs that merge in one click. More
• A practical guide walks through profiling eBPF hook overhead using perf, flamegraphs, and a custom C benchmark harness to pinpoint kernel-level bottlenecks. More

🤖 AI

• DeepSeek V4 Flash 0731 is a 284B-parameter (13B active) MoE reasoning model scoring competitively on intelligence benchmarks while priced far below the market median. More
• Google DeepMind released Gemini Robotics 2, enabling whole-body humanoid control, fine dexterity, multi-robot collaboration, and fast on-device adaptation to new robot bodies. More
• Sebastian Raschka's architecture notes break down Kimi K3, the largest open-weight model yet (2.8T params), featuring LatentMoE, Kimi Delta Attention, attention residuals, and full NoPE. More

🛠️ Tools

• QM is an open-source "multiplayer agent harness" letting teams run shared AI agents in Slack and the web, with per-scope memory, sandboxes, and support for Claude Code, Codex, and other harnesses. More
• KOReader is a free, open-source document viewer for E Ink devices, supporting EPUB, PDF, MOBI, and more across Kindle, Kobo, PocketBook, Android, and Linux. More
• OpenAI released Codex Security, an open-source CLI and TypeScript SDK for scanning, validating, and patching security issues in code, with bulk-scan and CI integration support. More

📩 Please feel free to share this article with colleagues and friends who will find it valuable.

Thanks for reading!

Have a great day!
Bogdan