brandon

Next.js just got its worst vulnerability ever, CVSS 8.6. → affects versions 13.4.13+, 14.x, 15.x, and 16.0.0–16.2.4 → attackers can access your internal services, cloud credentials, API keys, and admin panels → no authentication needed → one crafted request is all it takes → roughly 79,000 instances are exploitable right now → vercel-hosted apps are safe, self-hosted are not upgrade to 15.5.16 or 16.2.5 immediately.

computa make the workers dash have a domains tab where i can buy domains ✨ you've been programmed ✨

Design systems hold you back

JUST IN: Moderna announces it’s working on a hantavirus vaccine.

For the past several months, our engineering team has been building a new agentic coding system designed around a simple idea: the self-driving codebase. These aren't just agents to write code on demand. They detect triggers, spin up secure sandboxes, gather dynamic context, open PRs, verify their work, unblock the next task, and learn from every failure. We think the future of software engineering may look more like swarms of event-driven agents, running continuously, with humans setting direction and reviewing the work. Ramp built Inspect. Stripe built Minions. Spotify built Honk. We call ours Horizon. 🌅 Read more about what we learned and where it's going next: