Hacker News with Generative AI

Railway Security Disclosure (railway.com)
Today's PHP security release, and how we're strengthening security (thephp.foundation)
No More Icons in Every Menu by Default (jim-nielsen.com)
GitLab Critical Patch Release (gitlab.com)
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
Why Windows 11 still ships with Windows 95's memory manager hidden inside it (windowslatest.com)
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds (scotthelme.co.uk)
Claude Duet (claude.com)
Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case (cnbc.com)
PHP web runtimes (CVE-2026-109618 and CVE-2026-109619) (amazon.com)
Google's Rust Style Guide (google.github.io)
DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)
Patch the Planet: global response coordination as agents uncover vulnerabilities (openai.com)
The Rise and Fall of the Plasma Screen (construction-physics.com)
EA is shutting down BioWare (theverge.com)
Tiny possum and glider thought extinct for 6000 years found in remote West Papua (bbc.com)
OpenAI models are coming to Google Cloud (openai.com)
Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin (apnews.com)
New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic (oist.jp)
PHP 8.2.35 (github.com/php)
Claude Duet (claude.com)
CleanFrame: A quieter home screen for Samsung The Frame (github.com/nthnclrk)
Using thousands of AI agents to uncover new leads in biological data (openai.com)
Launch HN: Alter (YC S25) – Access control for multi-user agents (alterauth.com)
Canary Tokens (canarytokens.org)
Oracle Security Alert Advisory – CVE-2026-91403 (eMudhra cert revocation) (oracle.com)
A Place Among the Fiddlers (longreads.com)
Drupal is now light-years ahead of its reputation (dri.es)