5 things worth your time today
The 5 that matter most today, each in one line.
Google Adopts DPoP to Strengthen OAuth 2.0 Against Token Theft and Replay Attacks
TL;DRGoogle OAuth platform now supports DPoP for refresh tokens to mitigate token theft and replay attacks.
Read on infoq.com →Le Chonk: Built for Coders, Trusted by Defenders.
TL;DRMistral released Mistral Large 4, a 1-trillion-parameter open-weight multimodal model featuring improved coding and defensive security capabilities.
Read on mistral.ai →Pluto Security Uncovers Self-Iterating Cryptominer Campaign Hidden in Hugging Face AI Models
TL;DRAttackers distributed fileless cryptominers and backdoors disguised as Qwen2 language models on Hugging Face using malicious Python loaders via `trust_remote_code=True`.
Read on hackernoon.com →Grafana 13.3 release: manage variables across dashboards, share findings with Notebooks, a UI refresh, and more
TL;DRGrafana 13.3 introduces cross-dashboard variables, allowing teams to define shared controls globally or per folder to prevent configuration drift.
Read on grafana.com →Webhook IP ranges added to the Meta API
TL;DRGitHub added new IP ranges for webhook deliveries on github.com, including GitHub Enterprise Cloud plans.
Read on github.blog →Your stack, every morning
Pick your languages and tools. Code News sends a Daily brief at 9:00 and a Past week recap, with a TL;DR on every article.
Code News by CodeBldr · picked from 240+ developer sources · tap a story to read it on the original site