Google's dropping a B0MB
From Sept 2026, you NEED their verification (ID, fees, signing keys) to sideload any app on certified devices.
Bye-bye F-Droid, personal projects, true openness? (1/3)
CVE-2026-23111 is a high-severity Linux kernel use-after-free vulnerability in nf_tables caused by a single stray inverted check character.
An unprivileged local user can exploit it to escalate privileges to root and escape container namespaces in ~20 seconds on Ubuntu. (1/3)
The flaw requires unprivileged user namespaces (default on most desktops/servers) and nf_tables; no remote vector, only local privilege escalation after foothold.
Forward Security researcher Oliver Sieber discovered it in early 2025; upstream patched it with a single-line fix.
#Ubuntu scored it CVSS 7.8; fixes available for 22.04, 24.04, 25.10; #Debian fixed Bookworm/Trixie, Red Hat patched; update kernel and reboot.
Follow @codingomega for more dev updates.
Security researchers discovered HTTP/2 B0mb, a remote DoS exploit affecting NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora on default configurations.
A single client can consume and hold 32GB of server memory in ~20 seconds, rendering servers inaccessible within seconds from a 100Mbps home connection.
NGINX fixed it in version 1.29.8 with max_headers directive (default 1000), Apache in mod_http2 v2.0.41 (CVE-2026-49975).
Microsoft IIS, Envoy, and Cloudflare Pingora have no patches yet; disable HTTP/2 temporarily if unable to upgrade.
Follow @codingomega for future updates.
#vulnerability#cybersecurity#http
The new Coreutils for Windows (from uutils open-source) provides Linux-like commands that run natively on Windows.
WSL containers will let developers create, run, and interact with Linux containers directly on Windows via CLI and API, arriving in public preview soon.
Intelligent Terminal (beta) integrates AI agents via Agent Communication Protocol, enabling developers to query, debug, and complete tasks without leaving the terminal.
Follow @codingomega for more tech updates.
Opus 4.8 Adds Dynamic Workflows Spawning Hundreds of Parallel AI Subagents
Anthropic released Claude Opus 4.8 on May 28, 2026, an incremental upgrade to Opus 4.7 that's ~4x less likely to miss coding errors and significantly better at admitting uncertainty. (A Thread...)
Opus 4.8's Fast mode runs at 2.5× standard speed and costs 3x less than previous models, while regular pricing stays the same at $5/ $25 per million tokens.
The model can execute codebase-scale migrations across hundreds of thousands of lines from start to merge, outperforming OpenAI's GPT-5.5 and Google's Gemini 3.1 Pro on synthetic benchmarks.
Follow @CodingOmega for future updates.
#claudeopus#llm#aiagents