-

Why we cannot wait for better post-quantum signature algorithms – ML-DSA now
Heavy AI news day — GPT-5.6, Grok 4.5, Muse Spark all landed within 24h. We picked the items that actually help you operate things.
-

Four vulnerabilities in Guix: remote privilege escalation via substitute download
Seven stable kernels out, Guix has remote privilege escalation, and Claude Opus 4.8 is inventing tool-call fields. Odd weekend.
-

Amazon Q silently ran MCP servers from cloned repos; Kubernetes pushes back on AI-generated PRs
The Amazon Q MCP story is the supply-chain incident that makes every other hardening post this week feel more urgent – and Kubernetes maintainers are already fighting a different kind of automated noise in their review queue.
-

Scattered Spider pleads out; Jaeger gets 8.6x cheaper storage
Scattered Spider pleads out, Jaeger gets 8.6x compression on a real workload, and Red Hat spends two posts arguing the same S-curve point from opposite ends.