NewApp Digest
search bot

projects

GLM's 23 Windows Bug Finds Are Z.ai Building a Security Research Resume
Winsage
October 14, 2026

GLM’s 23 Windows Bug Finds Are Z.ai Building a Security Research Resume

Z.ai's GLM model identified 23 vulnerabilities in the Windows operating system, confirmed by Microsoft's Security Response Center (MSRC). This marks a significant advancement in commercial software security, demonstrating the model's autonomous capability in independent vulnerability discovery. Since the release of GLM-5.2, Z.ai has uncovered over 4,200 vulnerabilities across about 390 open-source projects, with over a thousand categorized as critical to high severity. Z.ai has established a public Security Disclosure Ledger to track its findings through a coordinated disclosure process. The confirmation of vulnerabilities by MSRC is notable due to the rigorous nature of their vulnerability triage operations. Z.ai's GLM-5.3 achieved a score of 84.5% on CyberGym, outperforming competitors like Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol. Reports indicate that NIST's AI safety division has flagged GLM-5.3 due to concerns about its cyber capabilities, particularly regarding the potential for modified versions to reduce safety features. Z.ai plans to continue targeting commercial software in its efforts.
YouTube bringing automatic background play to Android Automotive cars
AppWizard
October 14, 2026

YouTube bringing automatic background play to Android Automotive cars

Google is enhancing the Android Automotive experience with app updates under the “Google built-in” initiative, introducing more video applications and allowing YouTube to operate in the background for Premium subscribers. Over the next few weeks, vehicles with Android Automotive will see a redesigned Play Store tailored for various display sizes and improved app discoverability, with over 700 applications currently available. New apps like STARZ, Firefox, Ludo King, and JioHotstar are expected to launch soon. Background play for YouTube allows drivers to enjoy video content while parked and switch to audio playback while driving. Although initially announced for 2025, this is the first direct mention of the feature for YouTube. Android Auto is also anticipated to support video applications and background play capabilities in the future.
"Begun, the clone wars have" — Microsoft 365 apps have been copied by the AI dev who cloned the Adobe suite
Winsage
October 13, 2026

“Begun, the clone wars have” — Microsoft 365 apps have been copied by the AI dev who cloned the Adobe suite

Developer Brandon Thomas is creating open-source alternatives to Microsoft’s applications—Word, Excel, and PowerPoint—using artificial intelligence. His suite includes GridCraft (Excel clone), DeckCraft (PowerPoint clone), and WordCraft (Word clone), all powered by the Claude AI model and available for free download on the ArtCraft GitHub page. These applications mimic the functionality and design of Microsoft 365, challenging the necessity of expensive subscriptions for productivity tools. Thomas has previously replicated the Adobe suite and aims to provide competitive alternatives to established software giants.
Microsoft Warns About Windows Update Certificate Expiration
Winsage
October 12, 2026

Microsoft Warns About Windows Update Certificate Expiration

Microsoft has reminded IT administrators about the expiration of certificates that enable trusted connections between Windows devices and Windows Update servers, set to expire in May and June of 2027. Devices without replacement certificates by these deadlines may lose access to Windows Update services. Most supported Windows devices will receive new certificates automatically through security updates, but older or infrequently updated systems may require manual intervention. Organizations that do not update their devices risk losing access to critical updates, particularly unsupported Windows versions that will not receive necessary certificate updates. IT teams should audit device inventories and ensure compliance with updates, as systems on supported versions will obtain replacement certificates seamlessly. Upgrading unsupported systems is essential, and organizations are encouraged to conduct audits and expedite upgrade projects to avoid losing access to Windows Update.
Windows 11 24H2 hits end of updates Oct. 13: What you should do now
Winsage
October 12, 2026

Windows 11 24H2 hits end of updates Oct. 13: What you should do now

Windows 11 version 24H2 for Home and Pro systems will stop receiving security updates on October 13, 2026. After this date, these editions will not receive any updates or technical support, although they will still boot. Windows 11 Enterprise, Education, IoT Enterprise, and Enterprise multi-session editions will continue to receive support until October 12, 2027. Organizations are advised to verify their systems' versions and editions, especially for those without endpoint management systems. Windows 11 25H2 and 26H2 are available as upgrade options, with 25H2 supported until October 12, 2027, and 26H2 supported until October 10, 2028, for Home and Pro editions. The rollout of 26H2 will be phased, and safeguard holds may be implemented if compatibility issues are detected. Unmanaged Home and Pro devices on 24H2 will automatically receive 25H2, while managed devices may require IT intervention. Regular monitoring and proactive management of Windows versions are necessary to ensure compliance and avoid future deadlines.
dbForge 2026.2 Adds a PostgreSQL Debugger, Visual Object Editors and Broader Context for dbForge AI Assistant
Tech Optimizer
October 11, 2026

dbForge 2026.2 Adds a PostgreSQL Debugger, Visual Object Editors and Broader Context for dbForge AI Assistant

Devart has released dbForge 2026.2, a unified database management ecosystem for PostgreSQL developers, featuring an embedded PostgreSQL Debugger that allows for efficient error tracking in server-side code. The Debugger enables breakpoints, step-through code execution, and real-time monitoring of variables and query results. Visual editors for PostgreSQL event triggers, functions, and procedures have been introduced, allowing for easier management without manual SQL writing. The dbForge AI Assistant now offers expanded context awareness, enabling users to attach various documents and select from multiple AI models for generating relevant SQL code. A free Express edition of the AI Assistant is available, with limited features compared to paid plans. Additionally, new SQL refactoring commands and schema comparison improvements have been implemented, along with updates for compatibility with MySQL 26.7 and MariaDB 13.x.
A practical guide to cost optimization with Lakebase Postgres
Tech Optimizer
October 11, 2026

A practical guide to cost optimization with Lakebase Postgres

Lakebase is a fully managed Postgres database designed for modern application development, featuring an architecture that separates storage and compute with a serverless compute layer. This design allows for cost efficiencies through various mechanisms: 1. **Branching**: Developers can create isolated environments for development, testing, or experimentation without duplicating storage costs, as branches share the same underlying storage. 2. **Autoscaling**: Lakebase adjusts compute resources based on activity levels, allowing users to pay only for the compute they use. It can scale down during low activity and can be suspended entirely after inactivity, reducing costs to zero. 3. **Read Replicas and High Availability**: The separation of storage and compute allows for adding read replicas and high availability without incurring additional storage costs, as these instances utilize the same storage layer. 4. **Synced Tables**: Integration with the Databricks Intelligence Platform enables efficient data syncing, allowing users to sync only the necessary working set of data, which helps avoid unnecessary storage and sync costs. 5. **Sync Modes**: There are three sync modes (Snapshot, Triggered, Continuous) for transferring data from the Lakehouse to Lakebase, each with different cost implications based on data freshness requirements. 6. **Right-sizing Compute**: Users can set the initial compute range during project provisioning to avoid over-provisioning and unnecessary costs. 7. **Monitoring and Metrics**: The Lakebase Metrics dashboard provides insights into working set size and cache utilization, helping users optimize their compute sizing and performance. 8. **Point-in-Time Restore (PITR) and Snapshots**: PITR maintains history for recovery within a configurable window, while snapshots offer discrete recovery points. Both are priced lower than standard storage, making them cost-effective options for data recovery. Lakebase costs are categorized into compute, storage, and serverless pipeline compute for syncing data. Compute is measured by CU usage, while storage includes branch storage, PITR history, and snapshot storage, all tracked separately. Users can access detailed usage and cost information through system billing tables.
Search