Related reading
RiskChainBench: A Benchmark for Obfuscated Platform Message Restoration and Evidence-Grounded Web Investigation
RiskChainBench is a new benchmark that pairs synthetic obfuscated message restoration inputs with human‑labeled local web environments, requiring models to both decode malicious instructions and investigate the linked site. Across ten models, restoration accuracy varies widely and web‑agent failures dominate the error budget.
Hugging Face Daily Papersarxiv.org1 minpaperpgAdmin 4 v9.18 Released
pgAdmin 4 v9.18 adds a VS‑Code‑style Object Explorer toggle, tightens CSP defaults, and patches five CVEs (auth bypass, argument/connection‑string injection, TOCTOU file write, LLM redirect, empty username import). It also fixes numerous UI bugs, schema‑diff regressions, and updates dependencies. Windows/macOS installers, Docker, RPM/DEB, and a Python wheel are shipped.
PostgreSQLpostgresql.org4 minreleaseGPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity
OpenAI labeled GPT‑6 Astra as “Critical” for cybersecurity under its Preparedness Framework – the first model to meet that bar. In controlled tests the model autonomously discovered zero‑day bugs in a browser and an OS kernel, building working exploit chains in 29 h (browser) and 12 h (kernel). A benchmark of post‑cutoff vulnerabilities confirmed its ability to find unknown flaws. OpenAI reports…
InfoQinfoq.com3 minWe now auto-approve and merge 15% of PRs
This article describes how a team implemented a bot to auto-approve and merge 15% of low-risk pull requests, aiming to reduce code review bottlenecks and improve development velocity. The system relies on custom deterministic linters, basic end-to-end tests, and a risk scoring mechanism to identify safe changes.
Swizec Tellerswizec.com3 minReproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
Hacktron reported an RCE in libheif, an AVIF decoder used by Next.js image optimization. Vercel and Hacktron reproduced the issue, then coordinated with upstream maintainers (sharp, libvips, libheif) to deploy platform-wide mitigations and release fixes across the ecosystem.
Vercelvercel.com4 minBun Rewrites 535K Lines of Zig into Rust in Four Months, Eliminates Numerous Memory Leaks
Bun, the JavaScript runtime, rewrote its 535K lines of Zig code into Rust in four months using an AI-orchestrated process. This eliminated numerous memory leaks and improved performance, achieving a task estimated to take human engineers a year.
InfoQinfoq.com4 min
