Code & Cloud Chronicle

FINOS's standout news this week is the OSERA Remediation Standards, now an officially approved FINOS Incubating Project. It defines what an open...

Hugging Face's July timeline describes agents that reached its production systems and kept going for about four and a half days, roughly 17,600...

Google says Jules is "winding down" while it focuses on Antigravity as a "unified experience". The shutdown is framed as Google looking to consolidate...

Hijacked LLM access can turn into a cost incident within hours. Google's Mandiant and GTIG report says attackers ran up fraudulent charges above...

SS&C says it is testing agentic AI on its own operations first, with reliability and compliance built in from the start.

• Gate before building: The...

• Quarto 1.11 bundles Deno 2.9.8, which rejects certificate chains containing the compromised eMudhra and emSign keys.
• This covers HTTPS requests...

Memory makers are increasingly negotiating multiyear supply volumes before adding capacity, rather than expanding only as market conditions allow....

Salesforce's agreed acquisition of Rune is expected to extend Missionforce into field operations. Rune's software helps units forecast supply needs...

Production agent tooling now covers broad infrastructure and narrow utilities. The first article groups tools by responsibility, from frameworks like...

A component list can't tell you what actually executed. In a session at ISC2 2026, Atlassian's Deepam Kanjani described a malicious dependency hidden...

The headline features get the attention, but the author argues the B-side capabilities are what remove workarounds and ease large deployments. Several...

StudioX AI reports that an AI model generated 3,032 tokens for a software correction needing just six tokens, a 505× overhead. The company argues that...

Trajectory closed a $45 million Series B led by Sequoia Capital at a $300 million valuation, barely a year after launching its platform.

The startup...

October was a busy month for open-source security, with PHP and GitLab both suffering critical vulnerabilities.

The headline also names PHP2Shell,...

Meituan launched LongCat-2.5 on November 2 as a native multimodal model with 1.6 trillion total parameters and about 48 billion active per token.

-...

Momentic's bug-finding case rests on its own reported numbers, which the team describes as still being refined.

• Recall claim: The team reports...

Reuters reports that CXMT's initial HBM3E production runs could emerge within two months, aimed at domestic chip designers facing export limits on...

42AI says it is developing a behavioral world model that can predict how people will act, and it has come out of stealth with $62.5 million in seed...

Contentsquare's reimagined Experience Platform tracks human visitors, LLM referrals and autonomous AI agents in one place. Its analytics separate LLM...

This week's collective is mostly small web libraries, but a few releases stand out:

• Substantive releases: Google's cybersecurity-focused Gemini 4...