NewApp Digest
search bot

operations

GLM's 23 Windows Bug Finds Are Z.ai Building a Security Research Resume
Winsage
October 14, 2026

GLM’s 23 Windows Bug Finds Are Z.ai Building a Security Research Resume

Z.ai's GLM model identified 23 vulnerabilities in the Windows operating system, confirmed by Microsoft's Security Response Center (MSRC). This marks a significant advancement in commercial software security, demonstrating the model's autonomous capability in independent vulnerability discovery. Since the release of GLM-5.2, Z.ai has uncovered over 4,200 vulnerabilities across about 390 open-source projects, with over a thousand categorized as critical to high severity. Z.ai has established a public Security Disclosure Ledger to track its findings through a coordinated disclosure process. The confirmation of vulnerabilities by MSRC is notable due to the rigorous nature of their vulnerability triage operations. Z.ai's GLM-5.3 achieved a score of 84.5% on CyberGym, outperforming competitors like Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol. Reports indicate that NIST's AI safety division has flagged GLM-5.3 due to concerns about its cyber capabilities, particularly regarding the potential for modified versions to reduce safety features. Z.ai plans to continue targeting commercial software in its efforts.
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
Winsage
October 14, 2026

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Microsoft's October 2026 Patch Tuesday updates addressed 1,413 vulnerabilities, including 1,102 in Windows, 134 in Office applications, 61 in developer tools, and 36 related to SharePoint Server. This total surpasses the vulnerabilities fixed by Microsoft in all of 2025, with over 4,000 vulnerabilities resolved in 2026. A critical zero-day vulnerability, CVE-2026-96951, with a CVSS score of 8.8, was also patched; it allows attackers to bypass Windows shell security features. The Cybersecurity and Infrastructure Security Agency (CISA) has included this vulnerability in its Known Exploited Vulnerabilities catalog. Additionally, two publicly disclosed vulnerabilities were patched, and Microsoft introduced 'risk cohorts' to help manage security updates.
Microsoft’s Record October Patch Tuesday Fixes 1,400+ Flaws As Windows Zero-Day Comes Under Attack
Winsage
October 14, 2026

Microsoft’s Record October Patch Tuesday Fixes 1,400+ Flaws As Windows Zero-Day Comes Under Attack

Microsoft's October 2026 security updates address 1,411 vulnerabilities, marking the largest Patch Tuesday release to date. The update includes 70 vulnerabilities classified as Critical, with 57 related to remote code execution, 11 to elevation of privilege, and two to spoofing. Key vulnerabilities include CVE-2026-96951, a Windows Shell security bypass being actively exploited, CVE-2026-108398, which affects .NET Framework and allows bypassing Windows Defender Application Control, and CVE-2026-92707, a denial-of-service vulnerability in MessagePack-CSharp. The release coincides with critical Windows support deadlines, with the final regular update for Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 occurring on October 13. Organizations are advised to prioritize the exploited vulnerabilities, ensure relevant updates are applied, and validate application-control behavior.
A practical guide to cost optimization with Lakebase Postgres
Tech Optimizer
October 11, 2026

A practical guide to cost optimization with Lakebase Postgres

Lakebase is a fully managed Postgres database designed for modern application development, featuring an architecture that separates storage and compute with a serverless compute layer. This design allows for cost efficiencies through various mechanisms: 1. **Branching**: Developers can create isolated environments for development, testing, or experimentation without duplicating storage costs, as branches share the same underlying storage. 2. **Autoscaling**: Lakebase adjusts compute resources based on activity levels, allowing users to pay only for the compute they use. It can scale down during low activity and can be suspended entirely after inactivity, reducing costs to zero. 3. **Read Replicas and High Availability**: The separation of storage and compute allows for adding read replicas and high availability without incurring additional storage costs, as these instances utilize the same storage layer. 4. **Synced Tables**: Integration with the Databricks Intelligence Platform enables efficient data syncing, allowing users to sync only the necessary working set of data, which helps avoid unnecessary storage and sync costs. 5. **Sync Modes**: There are three sync modes (Snapshot, Triggered, Continuous) for transferring data from the Lakehouse to Lakebase, each with different cost implications based on data freshness requirements. 6. **Right-sizing Compute**: Users can set the initial compute range during project provisioning to avoid over-provisioning and unnecessary costs. 7. **Monitoring and Metrics**: The Lakebase Metrics dashboard provides insights into working set size and cache utilization, helping users optimize their compute sizing and performance. 8. **Point-in-Time Restore (PITR) and Snapshots**: PITR maintains history for recovery within a configurable window, while snapshots offer discrete recovery points. Both are priced lower than standard storage, making them cost-effective options for data recovery. Lakebase costs are categorized into compute, storage, and serverless pipeline compute for syncing data. Compute is measured by CU usage, while storage includes branch storage, PITR history, and snapshot storage, all tracked separately. Users can access detailed usage and cost information through system billing tables.
Query Plan Hints in PostgreSQL 19: A New Postgres Feature You Will Probably Never Need
Tech Optimizer
October 11, 2026

Query Plan Hints in PostgreSQL 19: A New Postgres Feature You Will Probably Never Need

PostgreSQL 19 features an advanced query planner that utilizes table statistics from pg_statistic, gathered during the ANALYZE process, to generate and evaluate potential query plans based on their costs. The planner assesses various configurations, especially in complex joins, to select the most efficient option. Instances of poor planning are treated as bugs and addressed promptly. To improve query performance, users are advised to refresh statistics with ANALYZE, use CREATE STATISTICS for column correlations, modify indexes, and adjust memory settings. In cases where the query cannot be altered, providing planner advice may be necessary, particularly when the planner misestimates the output of PL/pgSQL functions or other custom functions, leading to inefficient query execution.
Болгары пользуются зарубежными торрент-сайтами
TrendTechie
October 10, 2026

Болгары пользуются зарубежными торрент-сайтами

Following the closure of Bulgarian torrent sites Zamunda.net, ArenaBG, and Zelka.org, users in Bulgaria have shifted to international torrent platforms. This change was noted by Vladislav Todorov from the General Directorate for Combatting Organized Crime (GDBOC). The shutdown was part of a coordinated international effort involving Europol, GDBOC, the State Agency for National Security (DANS), and U.S. authorities, resulting in the confiscation of domain names after a U.S. court ruling. Four individuals have been arrested in Bulgaria as part of the investigation, but there has been no official communication regarding further steps. After the closures, Bulgaria was removed from the U.S. "301 List" monitoring intellectual property protection issues, while the European Union remains on the list. Todorov warned that downloading from torrent trackers poses cybersecurity risks.
The studio behind Star Wars Zero Company is hiring back some of its furloughed staff
AppWizard
October 10, 2026

The studio behind Star Wars Zero Company is hiring back some of its furloughed staff

Bit Reactor, the developer of Star Wars Zero Company, placed over 80% of its workforce on furlough before the game's launch due to sales uncertainties. Recently, the company announced a gradual return to normal operations, with payroll rebounding to over half of pre-furlough levels. The decision to furlough employees was made independently by Bit Reactor and did not involve its publisher, EA. Despite initial challenges, Star Wars Zero Company became a best seller on Steam and received positive reviews from critics.
Supabase Announces $150M in New Funding and Turso Acquisition
Tech Optimizer
October 10, 2026

Supabase Announces $150M in New Funding and Turso Acquisition

Supabase has secured 0 million in funding led by GIC, with participation from Alphabet's CapitalG, IronArc, and SquarePeg. This follows a million Series F round four months earlier. Supabase has acquired Turso, a platform for managing databases for agentic workloads, to enhance its product development and provide liquidity for employees. The company is adding over 1 million users and 4 million databases monthly, with 70% created by AI-driven tools, reflecting a 600% year-over-year increase in databases. Turso's architecture allows for on-demand provisioning of databases in public cloud and BYOC setups. Glauber Costa, founder of Turso, will become Head of Agentic Services at Supabase. Supabase, established in 2020, supports over 13 million developers with a comprehensive backend solution.
Search