DevHunt Daily
Friday, October 23, 2026
- 1SecurityHacker News
Linux kernel vulnerability reports mistakenly posted to public mailing list
Several high‑severity Linux kernel bugs were accidentally disclosed on the public LKML instead of the private security list. Patches are in testing or queued, but the issues remain unpatched in mainline, affecting developers tracking kernel security.
- 2SecurityHacker News
Security researcher shares method to bypass eMudhra's 1FA OTP login
A post on Mastodon details a complete bypass of eMudhra's one‑factor OTP authentication, exposing the public key used to encrypt OTPs and suggesting it can be used to forge login requests. Developers handling authentication should note the vulnerability and consider stronger multi‑factor protections.
- 3SecurityLobsters
CVE-2026-107891: musl libc regcomp integer overflows may cause crashes or code execution
The regcomp function in musl libc has multiple integer overflow bugs that can lead to incorrect allocation sizes and out‑of‑bounds heap writes. Exploiting these requires feeding untrusted regular expressions, potentially causing denial‑of‑service or arbitrary code execution. A patch is available and users should upgrade to version 1.2.7 when released.
- 4SecuritySimon Willison
PHP releases patches for two remote code execution flaws in 8.x line
The PHP Foundation issued an emergency update for all PHP 8.x versions to fix two RCE vulnerabilities after a leak caused premature disclosure. Developers should upgrade immediately to avoid exploitation.
simonwillison.net - 5Coding agentsGitHub Trending
Cloudflare releases security-audit skill for automated multi-phase code audits
The security-audit skill adds a coding‑agent capability to perform structured security audits in six phases, from reconnaissance to reporting, with machine‑readable findings. Developers can install it via the Skills CLI and run audits directly on codebases, receiving validated JSON reports and markdown summaries.
github.com2,979 stars today - 6Dev toolsGitHub Trending
Graphify maps codebases into local queryable knowledge graphs
Graphify converts a project's source code, documentation, and other assets into a deterministic knowledge graph using local AST parsing. It integrates with Claude Code, Cursor, and Gemini CLI via a /graphify skill, letting developers query the graph instead of grepping files.
github.com1,408 stars today - 7Dev toolsGitHub Trending
Supabase provides an open-source Postgres platform with auth, storage, and realtime APIs
Supabase offers a hosted or self‑hosted Postgres database with built‑in authentication, auto‑generated REST and GraphQL APIs, realtime subscriptions, edge functions, file storage, and AI tooling. Developers can use it as an open‑source alternative to Firebase for web, mobile, and AI apps.
github.com693 stars today - 8AIGitHub Changelog
GitHub Copilot adds PR explorer, BYOM preview, and NuGet autofix in Visual Studio
The September 2026 update for GitHub Copilot in Visual Studio introduces a Git agent that can summarize pull requests, a preview of Bring Your Own Model that requires a new agent harness, and a fixer action for NuGet vulnerability warnings. These features aim to streamline code review, model selection, and security remediation directly within the IDE.
github.blog - 9AIOpenAI
OpenAI partners with Poland’s NASK to advance AI safety and security
OpenAI and Poland’s NASK National Research Institute signed an agreement to collaborate on AI safety, security, and technical research. The partnership aims to evaluate AI risks, identify vulnerabilities, and strengthen safeguards, supporting a more resilient digital ecosystem for developers and users.
openai.com - 10AIOpenAI
Uber rolls out ChatGPT Work to 30,000 employees
Uber is deploying ChatGPT Work, an agentic platform within ChatGPT Enterprise, to its entire workforce of over 30,000 staff. The service integrates with tools like Google Drive, Gmail and Slack, and gives users access to OpenAI’s latest models, including GPT‑6.1 Sol. Developers note that Uber’s engineering teams will continue using OpenAI Codex for coding tasks.
openai.com
