A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
Aikido Security reveals that leaked GitLab issue email addresses can be used to push code to main branches and run CI jobs, bypassing IP restrictions and two-factor authentication.
CISA added two critical vulnerabilities in WSO2 and Adobe Commerce to its Known Exploited Vulnerabilities catalog due to active attacks.
GitHub user khsarvar released Sifthound, an open-source alternative to Tavily that runs on your own infrastructure using SearXNG and supports MCP.
Pingularity is a new self-hosted tool that tracks internet uptime, latency, and scheduled speed tests to help users diagnose connectivity issues.
The Canadian Centre for Cyber Security warns that CVE-2026-48842, a pre-authentication SQL injection in Roundcube Webmail, is being actively exploited by attackers.
Vindle reduced processing time for 27 GB of product data by moving CSV filtering from PHP to a custom Rust tool, eliminating redundant parsing passes.
