Blog

CVE-2022-30190, dubbed Follina, exploits Microsoft’s diagnostic tool through Office documents — no macros required.

Broadcom’s proposed $61B acquisition of VMware could reshape the enterprise cloud and virtualization landscape for years to come.

.NET MAUI reaches general availability, replacing Xamarin.Forms as Microsoft’s unified cross-platform UI framework.

Google I/O 2022 showcases AI advances that are moving beyond demos into developer-accessible tools and practical applications.

Kubernetes 1.24 finally removes Dockershim, completing the long-telegraphed divorce from Docker as a container runtime.

PyCon US 2022 kicks off in Salt Lake City with Python riding high as the world’s most popular programming language.

Heroku’s OAuth token breach exposes the fragile trust chain in platform-as-a-service dependencies and what it means for developers.

The Python 3.11 alpha releases show 10-60% speedups across benchmarks, driven by the Faster CPython project — and this is just the beginning.

OpenAI’s DALL-E 2 produces photorealistic images from text descriptions with stunning accuracy, signaling a paradigm shift in how we think about creative AI.

A critical RCE vulnerability in Spring Framework has the internet in panic mode, but the actual risk profile is more nuanced than the Log4Shell comparisons suggest.

The Lapsus$ hacking group has breached both Okta and Microsoft, exposing critical weaknesses in identity provider security and third-party access management.

A popular npm package was deliberately sabotaged by its own maintainer, raising urgent questions about supply chain trust in open source.