World Programming Society
Write Log in
Home Events Community

Channels

General Discussion Web Development Backend DevOps AI Career & Hiring TypeScript Rust Python Go Cloud AWS Azure GCP C/C++ FPGA Assembly

World Programming Society · 2026 Copyright

Backend DevOps General Discussion

Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Exploits can give persistent server access that survives credential rotation and disk re-imaging.

Ars Technica Tech Lab Ars Technica Tech Lab · Jul 30, 2026
0
B
Read the original source Next news
#Security #Backend
Ars Technica Tech Lab

Publisher

Originally by Dan Goodin

0 Comments

Log in to join the conversation.

No comments yet. Be the first to share your thoughts.

More in Backend

Set Up a Kubernetes Node on Ubuntu 24.04 with containerd (the Docker-Compatible Runtime)

Set Up a Kubernetes Node on Ubuntu 24.04 with containerd (the Docker-Compatible Runtime)

Jul 31 · 4m read

Don’t stop early: Case-folding source code at memory speed

Don’t stop early: Case-folding source code at memory speed

Jul 31 · 22m read

Asynchronous I/O in DuckDB: Work, Thread, Work

Asynchronous I/O in DuckDB: Work, Thread, Work

Jul 31 · 17m read

Row and Field-Level Data Provenance: Why It's Worth the Pain (and Where the Pain Is)

Row and Field-Level Data Provenance: Why It's Worth the Pain (and Where the Pain Is)

Jul 31 · 12m read

TimescaleDB 2.27 Added Bloom Filters to UPDATE and DELETE. Your EXPLAIN Won't Tell You If They Work Unless You Know These Counters.

TimescaleDB 2.27 Added Bloom Filters to UPDATE and DELETE. Your EXPLAIN Won't Tell You If They Work Unless You Know These Counters.

Jul 31 · 7m read

Eliminating Non-Deterministic Exit Codes in StayPresent

Eliminating Non-Deterministic Exit Codes in StayPresent

Jul 31 · 2m read

How We Built a Zero-Disk, S3-Tiered Storage Engine for SQLite

How We Built a Zero-Disk, S3-Tiered Storage Engine for SQLite

Jul 31 · 16m read

GD

Ruby Central's Destructive Legacy

Jul 31 · 14m read

"This Is a Development Server" Flask Warning — What It Means and How to Fix It

"This Is a Development Server" Flask Warning — What It Means and How to Fix It

Jul 31 · 5m read

Dropbox Integrates MCP and Dash to Close the Gap Between Security Design and Code Review

Dropbox Integrates MCP and Dash to Close the Gap Between Security Design and Code Review

Jul 31 · 7m read

Sign in with Apple broke with invalid_client after 6 months? Here's why — and how to never deal with it again

Sign in with Apple broke with invalid_client after 6 months? Here's why — and how to never deal with it again

Jul 31 · 4m read

what the double-fork?

what the double-fork?

Jul 31 · 6m read

D

Security updates for Friday

Jul 31 · 3m read

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

Jul 31 · 7m read

The Bug That Crashes Your Import Is the Lucky One

The Bug That Crashes Your Import Is the Lucky One

Jul 31 · 7m read

Deploying ImgProxy – Process, Resize, Convert Images on the Fly

Deploying ImgProxy – Process, Resize, Convert Images on the Fly

Jul 31 · 7m read

Installing Ghost Blogging Platform on Ubuntu 24.04

Installing Ghost Blogging Platform on Ubuntu 24.04

Jul 31 · 5m read

Deploying phpBB on Ubuntu 22.04

Deploying phpBB on Ubuntu 22.04

Jul 31 · 3m read

Deploying a PostgreSQL Cluster with Patroni and HAProxy on Ubuntu 24.04

Deploying a PostgreSQL Cluster with Patroni and HAProxy on Ubuntu 24.04

Jul 31 · 10m read

Deploying Laravel with Nginx on Ubuntu 24.04

Deploying Laravel with Nginx on Ubuntu 24.04

Jul 31 · 6m read

Inside ORAG's Go API Startup Path: Configuration, Logging, and Failure Handling

Inside ORAG's Go API Startup Path: Configuration, Logging, and Failure Handling

Jul 31 · 5m read

Your Data Warehouse Is Not Your Data Pipeline

Your Data Warehouse Is Not Your Data Pipeline

Jul 31 · 8m read

Stripe Just Wants a Number

Stripe Just Wants a Number

Jul 31 · 5m read

Build a RAG-Powered Database Assistant with PostgreSQL and pgvector

Build a RAG-Powered Database Assistant with PostgreSQL and pgvector

Jul 31 · 9m read

Gated B2B Pricing in Next.js: Hiding Prices Behind Per-Customer Access

Gated B2B Pricing in Next.js: Hiding Prices Behind Per-Customer Access

Jul 31 · 14m read

One missing checkpoint can break every approval gate

One missing checkpoint can break every approval gate

Jul 31 · 10m read

Manticore Search 28.6.6: UUID document IDs, ordered GROUP_CONCAT(), and 16 fixes

Manticore Search 28.6.6: UUID document IDs, ordered GROUP_CONCAT(), and 16 fixes

Jul 31 · 4m read

MCP 2.0 + Security Patches: Rails RCE, Nuxt Updates

MCP 2.0 + Security Patches: Rails RCE, Nuxt Updates

Jul 31 · 6m read

Article: Virtual Threads After JDK 24: What Changed for Production Java

Article: Virtual Threads After JDK 24: What Changed for Production Java

Jul 31 · 28m read

Spring AI: Bringing Generative AI into Spring Boot Applications

Spring AI: Bringing Generative AI into Spring Boot Applications

Jul 31 · 13m read

The Odoo Requirements Checklist That Decides How Much Custom Code You Write

The Odoo Requirements Checklist That Decides How Much Custom Code You Write

Jul 31 · 8m read

Helm Values Staging vs Prod: 3 Mistakes That Broke Uptime

Helm Values Staging vs Prod: 3 Mistakes That Broke Uptime

Jul 31 · 8m read

Best Self-Hosted WAFs on GitHub: 5 Tools Compared in 2026

Best Self-Hosted WAFs on GitHub: 5 Tools Compared in 2026

Jul 31 · 3m read

SQLazy：Forward Fill NULL Values

SQLazy：Forward Fill NULL Values

Jul 31 · 3m read

Introducing SequelizeDotNet: Bringing Sequelize.js's Database-First Philosophy to .NET

Introducing SequelizeDotNet: Bringing Sequelize.js's Database-First Philosophy to .NET

Jul 31 · 5m read

How Telechat routes Claude queries to save 60% on API costs

How Telechat routes Claude queries to save 60% on API costs

Jul 31 · 3m read

Your Microservices Are Hiding a Second Codebase (And Istio Deletes It)

Your Microservices Are Hiding a Second Codebase (And Istio Deletes It)

Jul 31 · 2m read

Java Concurrency: Mastering ConcurrentSkipListMap for Machine Coding

Java Concurrency: Mastering ConcurrentSkipListMap for Machine Coding

Jul 31 · 2m read

Event-Driven Architecture in Practice

Event-Driven Architecture in Practice

Jul 31 · 7m read

Building Fail-Closed Autonomous Agent Networks: Engineering a 10-Tuple WORM Architecture

Building Fail-Closed Autonomous Agent Networks: Engineering a 10-Tuple WORM Architecture

Jul 31 · 3m read

Dev Log 07: Mitigating RPC Latency Desyncs During Polygon Hard Forks

Dev Log 07: Mitigating RPC Latency Desyncs During Polygon Hard Forks

Jul 31 · 1m read

REST API Development: The Backbone of Modern Web Applications

REST API Development: The Backbone of Modern Web Applications

Jul 31 · 5m read

📝 The Zero-Trust AI Gateway Why CFOs can't trust probabilistic LLMs with corporate ledgers.

📝 The Zero-Trust AI Gateway Why CFOs can't trust probabilistic LLMs with corporate ledgers.

Jul 31 · 2m read

Kill the API Layer: Next.js Server Actions ⚡

Kill the API Layer: Next.js Server Actions ⚡

Jul 31 · 1m read

Architecting SaaS: Multi-Tenancy in Laravel 🏢

Architecting SaaS: Multi-Tenancy in Laravel 🏢

Jul 31 · 5m read

FckVer: A Practical Versioning Strategy for Odoo

FckVer: A Practical Versioning Strategy for Odoo

Jul 31 · 5m read

Building a Full-Stack Project with Blockchain Security: My 3-Week Journey

Building a Full-Stack Project with Blockchain Security: My 3-Week Journey

Jul 31 · 2m read

Solon's 10 HTTP Servers: Pick Your Engine With One Dependency Change

Solon's 10 HTTP Servers: Pick Your Engine With One Dependency Change

Jul 31 · 5m read

What a .NET Core service needs before it's actually production-ready

What a .NET Core service needs before it's actually production-ready

Jul 31 · 5m read

Build a Support Copilot That Loads the Runbook Before It Calls a Tool

Build a Support Copilot That Loads the Runbook Before It Calls a Tool

Jul 31 · 11m read

Secure Aggregation for Privacy-Preserving Federated Learning on Clinical EEG Data

Secure Aggregation for Privacy-Preserving Federated Learning on Clinical EEG Data

Jul 31 · 1m read

Queue-Theoretic Admission Control for Multi-Tenant GPU Clusters

Queue-Theoretic Admission Control for Multi-Tenant GPU Clusters

Jul 31 · 1m read

From Backlog Items to Security Guidance: Towards Continuous Security Compliance

From Backlog Items to Security Guidance: Towards Continuous Security Compliance

Jul 31 · 2m read

Fully Inductive Cardinality Estimation

Fully Inductive Cardinality Estimation

Jul 31 · 2m read

A Structured Knowledge Infrastructure for Domain-Specific Data Asset Discovery

A Structured Knowledge Infrastructure for Domain-Specific Data Asset Discovery

Jul 31 · 1m read

Cybersecurity Detection Classification with Reasoning-enabled Language Models

Cybersecurity Detection Classification with Reasoning-enabled Language Models

Jul 31 · 2m read

AgenticER: the next frontier in Entity Resolution

AgenticER: the next frontier in Entity Resolution

Jul 31 · 2m read

Automated Side-Channel Analysis of Cryptographic Protocol Implementations

Automated Side-Channel Analysis of Cryptographic Protocol Implementations

Jul 31 · 2m read

Adaptive Security at the Edge for 6G-Enabled Healthcare IoT

Adaptive Security at the Edge for 6G-Enabled Healthcare IoT

Jul 31 · 1m read

ThreatForest: Multi-Agent Attack Tree Generation with Pluggable TTP Framework Mapping

ThreatForest: Multi-Agent Attack Tree Generation with Pluggable TTP Framework Mapping

Jul 31 · 2m read

FAVA: Formal Authorization for Verified Agents with Evidence-Backed Permission Graphs

FAVA: Formal Authorization for Verified Agents with Evidence-Backed Permission Graphs

Jul 31 · 1m read

ARES: Adaptive Reasoning-Effort Steering for PPA- and Cost-Aware RTL Optimization with LLM Agents

ARES: Adaptive Reasoning-Effort Steering for PPA- and Cost-Aware RTL Optimization with LLM Agents

Jul 31 · 2m read

VeriSkill: A Self-Evolution Framework for Program Verification Skills

VeriSkill: A Self-Evolution Framework for Program Verification Skills

Jul 31 · 1m read

A Methodology for Designing Knowledge-Driven Missions for Robots

A Methodology for Designing Knowledge-Driven Missions for Robots

Jul 31 · 1m read

OwlPath: Lossless Knowledge Compression for LLM Bug Repair

OwlPath: Lossless Knowledge Compression for LLM Bug Repair

Jul 31 · 2m read

Bridging openEHR and OMOP: Expanded Mappings and Systematic Analysis of Semantic and Structural Limitations in the OMOP CDM

Bridging openEHR and OMOP: Expanded Mappings and Systematic Analysis of Semantic and Structural Limitations in the OMOP CDM

Jul 31 · 2m read

My MCP Server's .env Loader Only Works If You Launch It From One Specific Directory. My MCP Client Doesn't Promise That.

My MCP Server's .env Loader Only Works If You Launch It From One Specific Directory. My MCP Client Doesn't Promise That.

Jul 31 · 6m read

Audit, Observability & Lineage for Enterprise AI Agents

Audit, Observability & Lineage for Enterprise AI Agents

Jul 31 · 5m read

GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

Jul 31 · 7m read

KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

Jul 31 · 6m read

RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

Jul 31 · 6m read

How to let users bring their own OpenAI or Anthropic API keys (without storing them in plaintext)

How to let users bring their own OpenAI or Anthropic API keys (without storing them in plaintext)

Jul 31 · 6m read

Solon Validation: @Valid, 20+ Annotations, and Custom Validators Without the JSR 380 Baggage

Solon Validation: @Valid, 20+ Annotations, and Custom Validators Without the JSR 380 Baggage

Jul 31 · 7m read

Urgent event notifications in Node.js: SMS first, email fallback, retry logic

Urgent event notifications in Node.js: SMS first, email fallback, retry logic

Jul 31 · 9m read

Limiting CPU Usage Using CPULimit

Limiting CPU Usage Using CPULimit

Jul 31 · 2m read

Solon Cache: Three Annotations, One Interface, and a Tags Trick You'll Use Every Day

Solon Cache: Three Annotations, One Interface, and a Tags Trick You'll Use Every Day

Jul 31 · 6m read

The $26 Billion Leak: Why Frameworks Are Making Your Codebase Rot (and How Hexagonal Isolation Fixes It)

The $26 Billion Leak: Why Frameworks Are Making Your Codebase Rot (and How Hexagonal Isolation Fixes It)

Jul 31 · 7m read

Restaurant Health Inspection Data by City: APIs and Traps

Restaurant Health Inspection Data by City: APIs and Traps

Jul 31 · 12m read

JWT Auth Without the Confusion

JWT Auth Without the Confusion

Jul 31 · 3m read

Massively parallel Postgres backups

Massively parallel Postgres backups

Jul 31 · 11m read

Transitioning Java to More Frequent Security Updates

Transitioning Java to More Frequent Security Updates

Jul 31 · 1m read

The PHP Podcast 2026.07.30

The PHP Podcast 2026.07.30

Jul 30 · 6m read

Presigned URLs vs proxying file uploads through your backend: cost, latency, security

Presigned URLs vs proxying file uploads through your backend: cost, latency, security

Jul 30 · 9m read

Wetask Is Opening Its Task Runtime to External Workers

Wetask Is Opening Its Task Runtime to External Workers

Jul 30 · 8m read

Solon File Upload: UploadedFile Over MultipartFile

Solon File Upload: UploadedFile Over MultipartFile

Jul 30 · 5m read

Building a C++ HTTP Server from Scratch (Part 1): Setting Up TCP Sockets

Building a C++ HTTP Server from Scratch (Part 1): Setting Up TCP Sockets

Jul 30 · 11m read

Optimizing API Latency in C# .NET Applications

Optimizing API Latency in C# .NET Applications

Jul 30 · 4m read

The Hardest Part of a White-Label SaaS Was One Login Form

The Hardest Part of a White-Label SaaS Was One Login Form

Jul 30 · 7m read

Why Your LLM Calls Need a Circuit Breaker: A Lesson from Last Party 🔌

Why Your LLM Calls Need a Circuit Breaker: A Lesson from Last Party 🔌

Jul 30 · 14m read

Debugging inbound webhooks locally without a tunnel

Debugging inbound webhooks locally without a tunnel

Jul 30 · 4m read

Build a Task Queue System with Python and Redis

Build a Task Queue System with Python and Redis

Jul 30 · 7m read

Building Scalable APIs with Go: A Startup's Guide to Not Overengineering

Building Scalable APIs with Go: A Startup's Guide to Not Overengineering

Jul 30 · 16m read

2026 Cost of a Data Breach Report: AI Is Changing Cybersecurity

2026 Cost of a Data Breach Report: AI Is Changing Cybersecurity

Jul 30 · 5m read

What a failed renewal does to an affiliate commission you already paid

What a failed renewal does to an affiliate commission you already paid

Jul 30 · 6m read

Route Voicemails with Python and Telnyx AI

Route Voicemails with Python and Telnyx AI

Jul 30 · 3m read

R

Progress toward compiling Linux with gccrs

Jul 30 · 9m read

Agendando Tarefas no Linux com Systemd Timer

Agendando Tarefas no Linux com Systemd Timer

Jul 30 · 4m read

Building Reliable AI Agents: Lessons from Failed Bots, FSMs, and the Hidden Costs of Agentic Workflows

Building Reliable AI Agents: Lessons from Failed Bots, FSMs, and the Hidden Costs of Agentic Workflows

Jul 30 · 9m read

Giving every AI agent its own mailbox: the architecture behind a self-hosted MCP mail server

Giving every AI agent its own mailbox: the architecture behind a self-hosted MCP mail server

Jul 30 · 9m read

Global banks test tokenized money for cross-border payments in $1 million BIS pilot

Global banks test tokenized money for cross-border payments in $1 million BIS pilot

Jul 30 · 4m read

Loading more…