Related reading
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
Hacktron reported an RCE in libheif, an AVIF decoder used by Next.js image optimization. Vercel and Hacktron reproduced the issue, then coordinated with upstream maintainers (sharp, libvips, libheif) to deploy platform-wide mitigations and release fixes across the ecosystem.
Vercelvercel.com4 minTransform and route security logs to Microsoft Sentinel tables using Observability Pipelines
Datadog Observability Pipelines now ships pre‑built Microsoft Sentinel Packs that map logs from Palo Alto, Fortinet, Cisco ASA, Cisco Meraki, and ExtraHop into Sentinel’s CommonSecurityLog or Syslog tables. Packs handle field extraction, severity derivation, and device‑action mapping, letting you filter or drop low‑value events before ingest, validate mappings with Live Capture, and reduce per‑GB…
Datadogdatadoghq.com5 minPaint-Anything: Unified Any-Color Control for Image Generation and Editing
Paint-Anything introduces a unified hex‑prompt interface that lets diffusion models generate or edit images with any 24‑bit color per object. Using a mixed supervision pipeline and a new benchmark, it boosts object‑level color fidelity on FLUX.2‑4B by up to 85 % for text‑to‑image and 28 % for editing.
Hugging Face Daily Papersarxiv.org1 minpaperJuly in Servo: more platforms, faster canvas, web fonts in SVG, and more!
Servo 0.5.0 (July 2026) ships 488 commits, adds Linux aarch64 binaries, a slew of CSS/DOM/WebGPU features, new SubtleCrypto curves, accessibility performance tweaks, security patches for quick‑xml and crossbeam‑epoch, and real‑world fixes for DuckDuckGo and Gumroad.
Mozilla Automation Teamservo.org9 minHN51Benchmarking Wild vs Mold
Reproduces Mold’s linker benchmarks on a 16‑core Ryzen, shows that configuration (filesystem, delete‑output, fork) explains most of the Wild vs Mold speed gap, and notes recent Mold releases and upcoming Wild tweaks that close the gap.
Native Drag and Drop Meets Cross-Device Continuity
Codename One 8.0 adds two user‑experience primitives: **Cross‑Device Continuity** (state checkpointing + Apple Handoff + custom HTTP relay) and **Native Drag‑and‑Drop** (OS‑level drag using the same ClipboardContent model). The post shows the API (StateProvider, Continuity.checkpoint, NativeDragOperation), platform support tables, and practical advice on payload size, security, thread handling, a…
CodeName Onecodenameone.com7 min
