Your 2-minute dev briefing
The 4 that matter most today, each in one line.
sshhole
TL;DROpenSSH up to version 10.6p2 contains an authentication bypass vulnerability affecting systems using musl libc without PAM and with password authentication enabled.
Read on sshhole.com →Claude Code sends your email address to websites
TL;DRClaude Code versions 2.1.317 and later include a built-in privacy mod enabled by default to block email leakage.
Read on github.com →GitHub pull_request_target Block: Audit Before Monday
TL;DRGitHub Actions will block pull_request_target workflows by default in all public repositories starting December 2, 2026.
Read on dev.to →Amazon DynamoDB now supports bulk put items
TL;DRAmazon DynamoDB now supports bulk writing data directly from Amazon S3 into existing tables without custom ingestion pipelines.
Read on aws.amazon.com →Everyone's talking about
Discord is ditching Electron and its new app uses less RAM
TL;DRDiscord is replacing Electron and React Native with Rust to power its desktop and mobile application architecture.
Read on theverge.com →Your stack, every morning
Pick your languages and tools. Code News sends a Daily brief at 9:00 and a Past week recap, with a TL;DR on every article.
Code News by CodeBldr · picked from 240+ developer sources · tap a story to read it on the original site