Top HN Daily Digest · Wed, Oct 21, 2026

PHP 8.2.35 is available as a security release, accompanied by a discussion about strengthening PHP’s security. [src]

UNEP’s 2026 Emissions Gap Report says limiting warming to 1.5°C without significant overshoot is no longer possible, urging steep emissions cuts, expanded renewables, fossil-fuel reductions and carbon removal to keep warming below 2°C and eventually return to 1.5°C. [src]

Eight eMudhra certificate-authority keys used only eight-bit private values, allowing anyone to recover them instantly and potentially forge TLS or code-signing certificates; browsers blocked the affected certificates, but many non-browser clients and unupdatable devices remain exposed until their trust stores are updated. [src]

The post links to an ongoing discussion about PHP 8.2.35 and additional related Hacker News threads. [src]

EA is closing BioWare, ending early development on the next *Mass Effect* game and laying off roughly 400 employees companywide, including about 50 at the studio. [src]

Meta has been ordered to pay a $25 billion penalty in New Mexico’s Cambridge Analytica case involving Facebook. [src]

The author argues that a serious PHP vulnerability lacks a reliable exploit against vanilla PHP, claiming many circulating AI-generated proofs of concept depend on pre-existing server flaws such as local file inclusion and do not demonstrate a Log4Shell-like threat. [src]

Anthropic’s Claude Duet is a research-preview proactive AI agent for US Pro and Max subscribers that monitors connected apps, completes tasks, delivers morning briefs, and requests approval for sensitive actions. [src]

We couldn't summarize this story. [src]

Railway reported unauthorized access to potentially decrypted customer environment variables, urged all users to rotate secrets and review logs, and paused deployments while investigating a suspected attack targeting AI inference providers. [src]