Showing 12 of 171 articles
SpaceX quietly became a hyperscaler this quarter — $2.56 billion in AI compute revenue, anchor contracts with Anthropic and Google, and $100 billion earmarked for a second Starbase in Louisiana. David Brooks breaks down the conflict of interest nobody's naming, the $6.7 billion contract nobody will claim, and why pricing opacity should worry anyone considering SpaceX as a cloud vendor.
Anthropic says its Claude Mythos Preview model found a mathematical weakness in HAWK, a NIST post-quantum candidate, and sped up an attack against reduced-round AES-128. A cryptographer from NIST's own process confirmed the math within the hour — but nobody outside Anthropic has independently verified the full attack yet.
CVE-2026-42945 is a critical heap overflow in NGINX — CVSS 9.8, zero credentials required, 18 years undetected — affecting roughly 34% of all websites globally. F5 patched fast; the real challenge is remediation sprawl across fragmented Docker images, Kubernetes ingress controllers, and managed CDN configurations.
TeamPCP compromised Trivy's npm package to inject CanisterWorm, a self-spreading worm that infected 66+ npm packages in 21 days by stealing publish tokens. Its C2 runs over Ethereum's blockchain and its second-stage payload includes a Kubernetes wiper with automatic activation on Iranian infrastructure.
An unauthenticated RCE in Cisco Firepower Management Center was actively exploited by the Interlock group for 36 days before Cisco released a patch. Over 4,200 instances were exposed to the internet with no official mitigation available during that window.
Google Stitch launched from Google Labs with native Galileo AI and a free tier. Figma lost 8.8% on announcement day and is down 35% in 2026. Here's what this means for enterprise teams locked into $13,200/year Figma Organization plans.
On March 19, OpenAI announced the acquisition of Astral Software Inc. Everyone's discussing uv and Ruff. Nobody's discussing pyx — Astral's only monetizable product — and that silence is exactly what deserves analysis.
WASI 0.3 introduces stream<T> and future<T> types that solve the synchronous I/O bottleneck in server-side WebAssembly. With 83% of container spend tied to idle resources according to Datadog, Wasm's value proposition isn't replacing Docker — it's eliminating the concept of idle altogether.
Thomas Dohmke closes the largest dev tools seed round in history with Microsoft M12 leading. The detail nobody mentions: Microsoft already has a product that does the same thing in GitHub. We analyze the strategic conflict and why this smells like a defensive acquisition.
LocalStack 4.0 eliminates unregistered access on March 31, 2026. With 500M Docker pulls but only 100K active users, the 5000:1 ratio exposes the reality: 99.98% of usage is automated CI/CD consuming infrastructure without paying. The 25K API call/month limit forces teams to Pro tier ($75/dev/month) or urgent migration to Moto, AWS SAM, or real AWS dev accounts.
OpenTelemetry became the de facto observability standard in 2026, with 89% of enterprises mandating compliance. But when you run the full TCO math, the promised 50-80% savings vs commercial APM vendors evaporates: LGTM self-hosted costs $167K/year vs $150K for Datadog.
Oxide Computer closed a $200M Series C led by Silver Lake, reaching $378M total funding. The pitch: on-prem cloud racks that eliminate AWS lock-in. The reality: only 3 public customers, and 147 global job postings for Rust SREs vs 12,400 for Kubernetes—an 84x talent shortage.
