Top HN Daily Digest · Wed, Oct 21, 2026

PHP 8.2.35 is available as a security release, accompanied by a discussion about strengthening PHP’s security. [src]

UNEP’s 2026 Emissions Gap Report says limiting warming to 1.5°C without significant overshoot is no longer possible, urging steep emissions cuts, expanded renewables, fossil-fuel reductions and carbon removal to keep warming below 2°C and eventually return to 1.5°C. [src]

Eight eMudhra certificate-authority keys used only eight-bit private values, allowing anyone to recover them instantly and potentially forge TLS or code-signing certificates; browsers blocked the affected certificates, but many non-browser clients and unupdatable devices remain exposed until their trust stores are updated. [src]

The post links to an ongoing discussion about PHP 8.2.35 and additional related Hacker News threads. [src]

EA is closing BioWare, ending early development on the next *Mass Effect* game and laying off roughly 400 employees companywide, including about 50 at the studio. [src]

Meta has been ordered to pay a $25 billion penalty in New Mexico’s Cambridge Analytica case involving Facebook. [src]

The author argues that a serious PHP vulnerability lacks a reliable exploit against vanilla PHP, claiming many circulating AI-generated proofs of concept depend on pre-existing server flaws such as local file inclusion and do not demonstrate a Log4Shell-like threat. [src]

Anthropic’s Claude Duet is a research-preview proactive AI agent for US Pro and Max subscribers that monitors connected apps, completes tasks, delivers morning briefs, and requests approval for sensitive actions. [src]

We couldn't summarize this story. [src]

Railway reported unauthorized access to potentially decrypted customer environment variables, urged all users to rotate secrets and review logs, and paused deployments while investigating a suspected attack targeting AI inference providers. [src]

Josh Comeau previews his top CSS priorities for Interop 2027, highlighting proposals such as CSS functions, custom shapes, anchored queries, accessible reading order, keyword-size animations, and gap decorations that could improve cross-browser support. [src]

LiteLLM 1.107.0 was compromised on PyPI with a credential-stealing malware and remote-code-execution backdoor affecting Python processes and several Docker images before the release was removed. [src]

mitmproxy added an `--emudhra` option that uses a compromised eMudhra intermediate CA key to sign TLS certificates, with support for certificate chains, elliptic-curve keys, command-line parsing, web options, and tests. [src]

Google’s Rust Style Guide promotes readable, maintainable, automation-friendly code through conventions for organization, formatting, ownership, APIs, traits, concurrency, naming, documentation, and implementation practices. [src]

The provided story contains only a link and does not include enough information to summarize the claimed PHP remote-code-execution vulnerability. [src]

Security researchers found Meta Muse’s shared-conversation links could be discovered through passive DNS searches, exposing sensitive personal and business information; Meta suspended the sharing feature while investigating and considering changes. [src]

DuckDB 2.0.0 “Cinnamon Teal,” its largest feature release yet, introduces LTS support, polished client-server connectivity, asynchronous I/O, a first-class `VARIANT` type, agent mode, triggers, an extensible PEG-based SQL parser, and numerous SQL and extension improvements. [src]

GitLab released versions 19.5.1 through 18.11.13 with critical security and bug fixes, including a CVSS 10.0 unauthenticated remote-code-execution flaw, and strongly recommends that self-managed installations upgrade immediately. [src]

Physicists trapped and studied a single positron for a month using electromagnetic fields, creating a system that could enable precise comparisons with electrons and potentially shed light on why matter dominates the universe. [src]

Mistral’s announcement links to documentation for the Mistral Large 4 model but provides no additional details in the supplied text. [src]