Source / Supabase
Supabase will remove four CBC TLS 1.2 ciphers from its HTTP APIs
The removal will affect older clients connecting to Supabase HTTP APIs and requires reviewing operating systems, runtimes, and TLS libraries before November.
Technical news
What is happening in technology and what it means for building software.
AI selects and contextualizes news about software engineering, architecture, applied AI, security and web performance.
Permanent archive · 182 news items
Search newsTechnical news
Source / StepSecurity
GhostAction returns with fake workflows that mine secrets from Git history
A new GhostAction wave used legitimate maintainer accounts to insert GitHub Actions workflows capable of reading secrets and historical credentials.
Source / Selenium
Selenium 4.51 strengthens BiDi and publishes its TypeScript-based JavaScript components
The new Selenium version combines BiDi code generation, web-extension support, and an independent npm distribution for its browser atoms.
Source / Uber Engineering
Uber turns contract review into a laboratory for agents with memory and rules
Uber’s Legal Redlining Agent shows how deterministic rules, semantic retrieval, and expert supervision can automate sensitive work without removing human judgment.
Source / AWS Security Blog
AWS proposes an AI vulnerability harness built around verifiable evidence
An AWS design combines multiple scanners, structural checks, and infrastructure context to reduce false positives before findings reach engineering teams.
Source / Microsoft Browser Vulnerability Research
The gap between a browser patch and an updated browser becomes an attack surface
Microsoft describes how V8 vulnerabilities can be exploited during the interval between a public fix, its distribution, and the effective restart of the browser.