Hacker News with Generative AI

PHP 8.2.35 (github.com/php)
PHP2Shell: AI uncovers critical RCE in PHP (wiz.io)
DuckDB 2.0.0 LTS "Cinnamon Teal" (duckdb.org)
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds (scotthelme.co.uk)
Patch the Planet: global response coordination as agents uncover vulnerabilities (openai.com)
Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin (apnews.com)
The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck (techdirt.com)
PHP Foundation's Overview of CVE-2026-109618 and CVE-2026-109619 (thephp.foundation)
Most advice is right for the person giving it (coached.com)
Using thousands of AI agents to uncover new leads in biological data (openai.com)
Upcoming critical PHP security release (CVE-2026-109618 / -109619) (news-web.php.net)
C++ futures part 1: The mental model (microsoft.com)
LayerFS: The filesystem for AI coding agents (layerfs.ai)
PHP2Shell (php2shell.com)
The Future of CSS (joshwcomeau.com)
Way to Play Super Mario 64: On Apple Vision Pro (pagetable.com)
Qwen3-Coder writes less secure code when told it's for a US persona (hirundo.io)
Show HN: SimCity, but with Permits (petercai.com)
Show HN: Sumi.css – CSS Framework (github.com/vladocar)
Whatever Happened to Fire Escapes (practical.engineering)
Delays for Pull Requests and Webhook deliveries (githubstatus.com)
Muse exposes users' personal and business secrets when they share conversations (arstechnica.com)
The Lucrative World of Literary Scams (thedial.world)
Dutch National Cyber Security Center is Offline because it uses PHP (ncsc.nl)
Voxtral 3 (mistral.ai)
The Decoherence Trap (maevyn.codes)
Cloudflare deploys protections against php2shell vulnerability (cloudflare.com)
Feds suspect ransom negotiator ran ShinyHunters extortion site (krebsonsecurity.com)