What shipped, broke and changed today
The 5 that matter most today, each in one line.
Bloom Security Found a Supply-Chain Vulnerability Exposing 1,500 npm Packages to Malicious Takeover
TL;DRBloom Security uncovered a vulnerability in npm Trusted Publishing affecting 1,500 packages and over 10 million downloads.
Read on hackernoon.com →What’s old is new: Lightwell discovers novel zero-day vulnerability in core Java framework
TL;DRLightwell discovered a zero-day vulnerability, identified as CVE-2026-92877, in the core Java JAXB XML binding framework.
Read on redhat.com →Announcing .NET 11 Release Candidate 2
TL;DR.NET 11 Release Candidate 2 is available with a go-live support license for production applications.
Read on devblogs.microsoft.com →Apache Pulsar 5 Adds Scalable Topics
TL;DRApache Pulsar 5.0 introduces scalable topics that automatically grow and shrink with demand while preserving per-key ordering.
Read on i-programmer.info →Gemini 4 Argon in GitHub Copilot
TL;DRGoogle's Gemini 4 Argon model is now generally available in GitHub Copilot for complex coding and reasoning tasks.
Read on github.blog →Your stack, every morning
Pick your languages and tools. Code News sends a Daily brief at 9:00 and a Past week recap, with a TL;DR on every article.
Code News by CodeBldr · picked from 240+ developer sources · tap a story to read it on the original site