DevHunt Daily
Thursday, November 5, 2026
- 1SecurityHacker News
North Korean fake job interview used to deliver malware in Binance breach
Binance disclosed that North Korean hackers used a staged fake job interview to trick a software engineer into installing malware, contributing to a $6.3 billion crypto theft. The multi‑stage attack combined social engineering, compromised tooling, and endpoint takeover, highlighting supply‑chain risks for developers.
- 2LanguagesHacker News
Go 1.27 adds stable encoding/json/v2 and jsontext packages
The Go standard library now includes stable encoding/json/v2 and encoding/json/jsontext packages, addressing long‑standing issues in the original JSON handling. The new API improves strictness, handling of nil slices/maps, case sensitivity, and performance, which matters for developers working with JSON in Go.
- 3AIHacker News
Ripple-65B Preview released, achieving US open-weight SOTA on agentic coding
Ricursive Intelligence released Ripple-65B Preview, a 65‑billion‑parameter model that sets a new US open‑weight state‑of‑the‑art score on TerminalBench 2.1 for agentic coding. The model was trained for $32 million, about one‑tenth the cost of previous frontier models, and is available via Hugging Face, Together AI, GMI Cloud and OpenRouter.
- 4Dev toolsHacker News
GitHub resolves incident affecting pull requests, Git operations and issues
GitHub experienced degraded performance and errors across pull requests, Git operations, issues, API requests and Actions. The problems were mitigated and the service is now stable. Developers should be aware of the recent outage that may have impacted their workflows.
- 5SecurityHacker News
OpenAI reports pipeline that discovered and patched 948 Linux LPEs
OpenAI built an autonomous pipeline that scans the Linux kernel, reproduces vulnerabilities, creates exploits and generates patches. In a recent run it produced 948 local privilege escalation exploits at a cost of about $1.2 million, demonstrating the potential of AI‑driven security research.
- 6AIHacker News
SpaceX launches Starfall service for affordable, routine microgravity access
SpaceX introduced Starfall, a service offering regular, low-cost microgravity missions for research and manufacturing. It supports payloads up to 1,000 kg with continuous Starlink connectivity, targeting biomedical, pharmaceutical, and materials science applications. Developers working on space‑related data pipelines may find the Ethernet interface useful.
- 7SecurityHacker News
Debian releases apt security update fixing man-in-the-middle vulnerability
The Debian Security Advisory DSA‑6607‑1 addresses a flaw (CVE‑2026‑109518) in the apt package manager that could allow a man‑in‑the‑middle attacker to replace packages during download and execute code as root. The issue is fixed in apt version 3.0.4 for the stable trixie release, and users are advised to upgrade.
- 8Dev toolsHacker News
BYD doubles its market share in Brazil to 9.7% after opening local plant
Chinese automaker BYD has more than doubled its share of Brazil's vehicle market to 9.7% within a year of starting local assembly. The growth reflects the company's rapid expansion in Latin America and signals stronger competition for domestic and foreign car makers.
- 9Dev toolsHacker News
Google plans to disable AI and search by default in K‑12 Workspace, sparking educator backlash
Google announced that AI tools and Search will be turned off by default for K‑12 Workspace for Education accounts, citing integration of the two. Educators argue this limits critical thinking and demand the ability to control AI use without losing basic web search.
- 10Dev toolsHacker News
Author discovers convicted murderer claiming friendship after book accolade
Edward Abel Smith recounts receiving a congratulatory call from Robin Garbutt, a life‑sentenced murderer, after his book was named Book of the Week. The story explores the unsettling connection and background of Garbutt's crime.
- 11LanguagesLobsters
Rust compiler gains up to 12% faster builds through span compression and other micro‑optimizations
Recent Rust compiler changes improve span handling, add caches, and refine the new trait solver, yielding instruction count reductions of 2‑12% and notable cycle count gains, especially for incremental builds. Developers will see faster compile times for many crates, including large vector literals and Diesel.
- 12SecurityGitHub Changelog
CodeQL 2.27.4 improves query accuracy and metadata handling
GitHub released CodeQL 2.27.4, enhancing static analysis accuracy for Java/Kotlin, Rust, C/C++ and reducing false positives. The CLI now separates JVM warnings from JSON output and validates pack contents. Developers using GitHub code scanning will see more reliable security findings and smoother automation.
github.blog - 13AIGitHub Changelog
GitHub Copilot now available in Xcode’s built‑in coding assistant (public preview)
GitHub Copilot can be used directly in Xcode’s native coding assistant starting with the Xcode 27.3 beta on macOS Tahoe 26.6 or later. The feature is in public preview and works alongside the existing Copilot for Xcode extension, giving developers another way to access AI‑generated code suggestions within Xcode.
github.blog - 14Dev toolsVercel
Workflow SDK adds atomic start to make workflow runs idempotent
The start() function in Vercel's Workflow SDK now admits a run and claims a hook in a single atomic step, preventing duplicate starts. Developers can use a token as an idempotency key, simplifying error handling and ensuring only one run processes a given request.
vercel.com - 15AIOpenAI
OpenAI launches Images 2.6 with faster generation and GIF support
OpenAI's Images 2.6 update speeds image creation by 50% and adds built‑in GIF generation. The new version is available in ChatGPT, Codex and the API, offering two quality modes—Flare for quick low‑quality output and Sunburst for higher‑detail results. Developers can now integrate faster image and animation generation into their applications.
openai.com
