Architecture, design patterns, best practices and tools for writing better software, with a particular eye on how AI is becoming part of developers’ everyday work.
Since Thursday evening Outlook, Teams, Copilot and SharePoint have been failing in 74 countries. Ministries, central banks and the US Congress without email for hours, and Microsoft unable to get its …
Node2Shell (CVE-2026-111497) is a flaw in the Brotli decoder used by Node.js, already in CISA’s catalog of exploited vulnerabilities. Who is exposed, how serious it really is, and why with apps …
On 29 October tampered builds of the Claude Code extension, versions 2.1.312 and 2.1.313, sat in the Cursor marketplace for eleven hours: attacker SSH key, reverse tunnel and persistence. Up to 5,000 …
CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell: two vulnerabilities in the PHP engine allow unauthenticated remote code execution and are already exploited in the wild. What they are, who is …
In just a few days, open-source clones of Photoshop, Illustrator and Premiere written with AI showed up on GitHub, along with browser versions of Halo and GTA derived from the original games. …
Yabai stopped getting along with the macOS 27 beta, and I stopped getting along with the restart-service command. So I built Mosaico: a tiling window manager for macOS packed into a single app - BSP …
Over Italy’s June 2 Republic Day holiday weekend, I built PlayNotch, my first Swift app: an interactive music controller that lives inside the MacBook notch and handles Apple Music, Spotify, and …
Axios, the most downloaded JavaScript HTTP library in the world, was hit by a supply chain attack. Two infected versions distributed a cross-platform Remote Access Trojan through a compromised npm …
Starting April 24, 2026, GitHub will use Copilot interaction data to train its AI models. If you do not opt out, your code becomes training material. Here is what is happening, how to protect …
A practical guide to implementing a secure authentication system in 2026: from password policies to Argon2 hashing, from cookies to JWT, all the way to 2FA and passkeys. With code examples in PHP and …
ConceptDoc grew up, changed its name, and — most importantly — learned to stay quiet when it has nothing useful to say. Discover how ContextDoc, .ctx files, and the new ctx-watch and ctx-run tools …
Part three of the OpenClaw guide: how to define the agent’s mission, use ClawHub skills, automate with cron jobs, and manage costs with a multi-model strategy.