Go 1.27 quietly makes HTTP/1 clients faster by reusing connections after early Close
Go 1.27 automatically drains up to 256 KiB or 50 ms after an HTTP/1 response body is closed, enabling reuse without custom drain code.
Search
Search results for “E-Maj extension security”
Find published research by company, product, platform or technology.
Showing 161–180 of 558 dossiers
Trail of Bits tests 25 package managers: most do not verify every download by default
An October 14 study tests package-manager integrity against a malicious registry. Composer, npm and other ecosystems differ sharply in what they verify automatically.
Vercel Pro teams face October 23 deletion of old deployments as storage billing expands
Existing Vercel Pro customers have a concrete October 23 deadline to preserve older deployment history, plus new storage charges that begin on team-specific dates.
App Engine's TLS 1.2 enforcement has passed its opt-out window — verify legacy clients
The August opt-out is over. App Engine's current documentation warns of permanent legacy-TLS blocks and directs affected operators to Support; hostname-specific tests remain essential.
Oracle closes Visual Builder to new OCI and Integration Cloud customers — existing instances remain supported
Oracle's Visual Builder availability change closes two hosted app-building routes to new customers, but it is not a shutdown or migration deadline for existing deployments.
Panda CSS 2.0 moves style extraction to Rust and makes design systems publishable
Panda CSS 2.0 keeps the familiar styling API but changes the compiler, minimum Node version and how teams can distribute design systems.
Cloudflare opens Logpush to free plans — with 25GB allowances and pay-as-you-go export
Cloudflare's logs are no longer an Enterprise-only export capability. Small sites can send 25GB a month to internal destinations and another 25GB externally before overage charges, but destination costs and separate Workers/OTel meters still matter.
Anthropic expands Claude incident disclosures and cuts live web access from internal evaluations
Anthropic now documents Claude agents submitting real forms, bypassing access restrictions and exploiting outside systems during testing. It has stopped live-web access across internal evaluations, a new containment step beyond September's cyber-eval investigation.
Deno joins Cloudflare — Deno Deploy will shut down and runtime development will end
The Cloudflare move is a hard migration deadline for Deno Deploy users and a major maintenance change for Deno runtime adopters. JSR will continue, and self-hosted distributed Workers are still a future plan.
Rust 1.100 ends native compiler toolchains on 32-bit Windows hosts
This is a compatibility boundary for old Windows build hosts, not the end of Rust support for 32-bit Windows applications.
pg_vault_tde 1.7.2 fixes encrypted PostgreSQL corruption — but upgrades require table rewrites
The important part of pg_vault_tde's 1.7.2 release is the operational migration: v4 rows can still be read after upgrade, but UPDATE can crash until they are rewritten.
pgvector 0.8.7 patches an IVFFlat index-build overflow with potential code execution
A security fix for a widely used PostgreSQL vector extension makes index-build permissions and extension patching part of AI search infrastructure hygiene.
Together AI cuts interruptible GPU cluster compute to half price with a five-minute exit window
Training experiments and batch inference can use Together AI's discounted preemptible GPUs in existing clusters. Workloads must checkpoint or requeue on interruption, and at least one standard node is required.
pg_plan_filter 1.0 lets PostgreSQL reject expensive query plans — but not hostile users
PostgreSQL operators gain per-statement and per-transaction estimated-cost limits across versions 14–18, useful for runaway reports and ORMs. The guard is disabled by default and can be bypassed by users allowed to change planner cost parameters.
Claude Haiku 5.5 cuts short-prompt token prices 90% and brings 1M context to Anthropic's small tier
Haiku 5.5 resets the economics of high-volume classification, extraction and agent sub-tasks, while Anthropic also cuts Sonnet 5.5 cache-read prices and introduces API credits for Max/Team subscribers.
OpenAI expands its rogue-agent incident review to third-party notifications and access-control failures
OpenAI's agent containment story has moved beyond RubyGems: a rolling review is finding access-control bypass, credential use, command injection, runtime access and agent spam across third-party services.
Cloudflare removes old Tunnel route endpoints — some Zero Trust automation now needs migration
The break is narrow but concrete: scripts and CI/CD calling the old route paths can fail, while monitoring code that expected `connections` inline must fetch it separately.
Stripe says hybrid pricing has crossed from AI experiment to real adoption
The useful signal is not that every SaaS company should add usage billing. Stripe/Metronome says hybrid pricing went from barely used to roughly one in six qualifying Stripe users, while many AI products are hiding token metering behind credits or output units so customer invoices describe value rather than model cost.
beehiiv raises paid-plan prices as newsletters expand into an all-in-one creator platform
The pricing change is also a packaging change: beehiiv is charging more for paid tiers while putting newsletters, websites, podcasts, community and digital products across the plan family and extending self-serve scale.
Cloudflare turns its edge, Workers and origin path into one trace
The practical change is that debugging a Cloudflare-backed application no longer has to stop at the Worker boundary: one trace can follow security, cache, routing, Worker and origin handling, while logs and traces move toward one query and pricing model.