InfoQ

Artifactory Vulnerabilities Under Active Exploitation Enable Authentication Bypass and Admin Access

Sergio De Simone — Mon, 28 Sep 2026 19:00:00 GMT

Three Artifactory vulnerabilities under active exploitation enable authentication bypassing on Internet-accessible, self-hosted deployments, potentially allowing attackers to establish persistent administrator access in under five minutes. The exploits then enable dangerous activity, including credential and key theft, arbitrary code execution, persistence, and anti-forensics measures.

By Sergio De Simone

Radicle Discloses Critical Flaws Exposing Private Repositories in Plain Text

Olimpiu Pop — Mon, 28 Sep 2026 14:14:00 GMT

Radicle has identified two critical security vulnerabilities in its wire protocol, compromising confidentiality across all node releases. Attackers can access private repository data in cleartext and impersonate nodes. Due to architectural flaws, immediate halting of clearnet operations is advised. Fixes will require a shift to a new protocol (Iroh), creating backward incompatibility issues.

By Olimpiu Pop

Meta’s ZGateway Cuts ZippyDB Connections 19x While Handling 1B+ Operations per Second

Leela Kumili — Mon, 28 Sep 2026 13:55:00 GMT

Meta has introduced ZGateway, a stateless proxy for ZippyDB that centralizes connection management, traffic routing, caching, load balancing, and admission control. The gateway handles more than 1 billion operations per second and about 40% of ZippyDB traffic, while Meta’s model estimates a 19x reduction in persistent connections.

By Leela Kumili

Article: Five Ways To Use AI Coding Agents to Improve Your Software Architecture

Pierre Pureur, Kurt Bittner, Todd Miller — Mon, 28 Sep 2026 11:00:00 GMT

Modern architectures often use legacy services for specific tasks, but these services may lack accurate documentation and using them can be risky if you don't understand them well. AI coding agents can help close that knowledge gap.

By Pierre Pureur, Kurt Bittner, Todd Miller

Podcast: The AI Revolution Fails Without Psychological Safety For Developers: A Conversation with Erin Doyle

Erin Doyle — Mon, 28 Sep 2026 11:00:00 GMT

In this podcast, Michael Stiefel spoke to Erin Doyle about how artificial intelligence tools are transforming the software development process, and how they are affecting software engineers. Architecture skills are now critical because engineers need to understand how to build systems and handle the constraints and associated ambiguity in the requirements.

By Erin Doyle

Presentation: From Consumers to Builders: Turning 200 of our Team into Agent Creators in 2 Weeks

Ben Maraney — Mon, 28 Sep 2026 11:00:00 GMT

Ben Maraney shares how Forter demystified AI agent creation for technical and non-technical staff. He discusses leveraging custom MCP servers, combining no-code and code-based platforms, sidestepping complex RAG setups, and aligning security and legal teams to accelerate internal agent adoption across R&D.

By Ben Maraney

Uber Separates Scaling Intent From Execution on Kubernetes Platform

Matt Saunders — Mon, 28 Sep 2026 09:00:00 GMT

Uber has published a detailed account of its new ServiceScale controller, which allows multiple orchestrators to safely manage the scaling of the same Kubernetes workloads. The blog post, written by senior software engineers Egor Grishechko and Srikar Paruchuru, describes how the company separated scaling intent from execution to support regional failover without carrying reserved idle capacity.

By Matt Saunders

Linear Completes 1,000-PR Migration From styled-components to Meta's StyleX

Daniel Curtis — Mon, 28 Sep 2026 06:26:00 GMT

Linear completed the transition of its React applications from styled-components to StyleX, Meta's CSS-in-JS library, involving over 1,000 pull requests. This migration aimed to enhance performance and enforce stricter component boundaries. The shift resulted in reduced main-thread work and improved navigation speeds, despite some criticism over StyleX's restrictive guidelines.

By Daniel Curtis

AWS Introduces Foreign Key Constraints in Aurora DSQL

Renato Losio — Mon, 28 Sep 2026 04:54:00 GMT

AWS recently announced that Aurora DSQL now supports foreign key constraints, allowing applications to enforce referential integrity directly in the database, including CASCADE, SET NULL, and other referential actions. The addition addresses a long-standing gap that users had explicitly called out as an adoption blocker.

By Renato Losio

Java News Roundup: TornadoVM 7.0, Groovy 6.0, GraalVM, Hibernate, Quarkus, Gradle, Maven

Michael Redlich — Mon, 28 Sep 2026 02:30:00 GMT

This week's Java roundup for September 21st, 2026, features news highlighting: GA releases of TornadoVM 7.0 and Groovy 6.0; point releases of GraalVM and Gradle; maintenance releases of Quarkus and GDK for Micronaut; the seventh release candidate of Maven 4.0; milestone releases of Micrometer Metrics and Tracing; and beta releases of Open Liberty and Hibernate ORM.

By Michael Redlich

Google Rewrites Critical C Dependencies to Rust Using AI and Differential Fuzzing

Olimpiu Pop — Sun, 27 Sep 2026 14:14:00 GMT

Google's security team developed a method to replace legacy C code in the giflib image-processing library with Rust, targeting inherent memory vulnerabilities. They utilised an automated migration process, ensuring compatibility and zero-day vulnerability mitigation. The project successfully maintained runtime performance while demonstrating that AI translations require ongoing human oversight.

By Olimpiu Pop

Swift 6.4 Brings Subprocess 1.0, Improved Interoperability, Faster Wasm, and More

Sergio De Simone — Sun, 27 Sep 2026 14:00:00 GMT

The latest release of Swift, Swift 6.4, introduces a range of language and tooling improvements, including better performance through expanded support for non-copyable values, up to 40 times faster Wasm generated code, improved interoperability with C++20 and Java, and a new Subprocess library that provides a cross-platform API for launching and interacting with external processes.

By Sergio De Simone

GKE Pod Snapshots Cut Model Load Times, and Move the Work to Snapshot Lifecycle Management

Steef-Jan Wiggers — Sun, 27 Sep 2026 06:46:00 GMT

Google has published benchmarks for GKE Pod snapshots, reporting up to 89% lower startup latency and a 70B model loading in 37 seconds. The feature checkpoints CPU and GPU memory through gVisor into Cloud Storage. Practitioners have asked whether invalidation is the harder problem, since snapshots match on a spec hash, machine series, and kernel and driver versions.

By Steef-Jan Wiggers

Docker Cloud Sandboxes Provide a Consistent Sandbox Abstraction across Laptop and Cloud

Sergio De Simone — Sat, 26 Sep 2026 17:00:00 GMT

Docker Cloud Sandboxes provide secure, hosted execution environments for running AI coding agents on Docker-managed infrastructure. Built on hardware-enforced microVM isolation, the platform provides a consistent execution environment and unified CLI workflows for seamlessly moving workloads from local machines to the cloud.

By Sergio De Simone

Presentation: Adaptive Recommenders in the Real World: Inference, Evals, and System Design

Mallika Rao — Sat, 26 Sep 2026 11:00:00 GMT

Mallika Rao explains that the true complexity of adaptive recommendation systems lies outside model architecture. She discusses how real-time feedback loops, retrieval freshness, multi-stage orchestration, and end-to-end latency budgeting enable systems to continuously learn and evolve in production under real-world operational constraints like latency, cost, and observability.

By Mallika Rao