Atlassian zero-day exploited within hours as certificate hijacks hit major brands
Attackers targeted a critical Atlassian flaw just two hours after disclosure, while rogue HTTPS certificates compromised trust for Google and other global services.
News for teams that run their own software
A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
New cryptographic standards mandate post-quantum upgrades by 2029
A 2026 update to the Cryptographic Right Answers guide sets a 2029 deadline for post-quantum transitions, recommending ML-KEM and ML-DSA algorithms.
Cloudflare adds SQL-based log filtering and redaction to Logpush
Cloudflare has made its Transformers feature generally available for all self-serve plans, allowing users to filter, reshape, and redact logs using SQL before export.
Securing self-hosted Ollama instances against unauthenticated access
Ollama lacks native API keys, leaving exposed servers vulnerable to data leaks. Learn five methods to secure your local LLM infrastructure for team use.
Distinguish truncation from errors in nightly LLM evaluations
A new evaluation pattern separates transport failures and token limits from actual model mistakes to prevent misleading quality metrics.
OpenClear: API-first positive pay system with robust bulk import
GitHub project OpenClear offers a self-hosted positive pay system with multi-bank support, featuring secure bulk imports for checks, ACH, and accounts.
Fixing empty secrets in GitHub Actions fork pull requests
GitHub Actions withholds secrets from fork pull requests by design. Learn safe patterns like workflow_run to handle credentials without compromising security.
Barnaby Home bundles Matrix chat and AI agent into one deploy script
A new open-source project automates the setup of a private Matrix server with an integrated AI assistant, requiring only Docker and a domain name.
BerriAI releases LiteReview for self-hosted AI pull request analysis
BerriAI has open-sourced LiteReview, a tool that lets teams host their own AI agents to review GitHub pull requests in isolated sandboxes.
Self-hosting large media transfers with OpenMediaVault and Cloudflare Tunnels
A developer details a setup using OpenMediaVault, FileBrowser Quantum, and Cloudflare Tunnels to share terabytes of video footage without cloud storage subscriptions.
Why atomic file writes fail to protect retry budgets in concurrent jobs
A developer found that atomic JSON writes did not prevent duplicate API calls in a Python pipeline, requiring a shift to pre-call reservation and locking.
DuckDB 2.0 alpha delivers faster S3 reads and recursive queries
The DuckDB 2.0 alpha introduces async I/O for cloud storage, optimized recursive CTEs, and a new VARIANT data type that shreds JSON for better performance.
Weak passwords and delayed detection in Danish CPR register breach
A small IT firm's use of '123456' as a password allowed unauthorized access to Denmark's civil registry for 21 days, exposing data on 8.8 million people.
New open-source tool turns local books into structured AI courses
A new self-hosted application called Tutor converts EPUB and PDF files into interactive study plans using large language models.
Four signals for reliable small business monitoring
A new guide outlines four specific monitoring signals for small teams, distinguishing between external uptime checks and internal job heartbeats to reduce alert noise.
