Google Launches Gemini 3.6 Flash & RubyMine 2026.2 AI Debugging & SharePoint RCE CVE-2026-50522 Under Active Exploit & Zimbra Patches Critical Flaws

Google releases three new Gemini models including 3.5 Flash Cyber for code security, JetBrains ships agentic debugging and native GitHub Copilot support, and critical vulnerabilities in SharePoint and Zimbra come under active exploitation.

AI & ML

Google launches Gemini 3.6 Flash and 3.5 Flash-Lite, both more token-efficient across tasks with improved performance—3.5 Flash-Lite outperforms 3 Flash at 54.2% vs. 49.6% on SWE-Bench Pro and 74.0% vs. 65.1% on OSWorld-Verified. Gemini 3.5 Flash Cyber specialized for vulnerability detection arrives for governments and trusted partners via CodeMender agents at lower per-token cost than larger models. Read more

AI Coding Tools

JetBrains Context now available in early access as repository intelligence for AI agents—reduces agent turns by up to 68%, latency by 59%, and costs by 48% on production-scale codebases; integrates with Claude Agent, Codex, and Junie CLI. Read more
RubyMine 2026.2 introduces agentic debugging for interactive breakpoint and runtime inspection, native GitHub Copilot integration, symbol-based code insight enabled by default, and expanded RSpec 4 support with deprecation detection and quick-fixes. Read more
JetBrains unveils Junie CLI, an agentic coding tool with interactive terminal interface supporting Linux, macOS, and Windows; includes plan mode for read-only codebase analysis, debug mode for live debugger integration, and slash commands for task automation. Read more

Databases & Data

Supabase Pipelines enters public alpha with schema change support, faster initial sync, and new destination request form for ClickHouse and Snowflake integration. Read more

CMS & Site Builders

Wix Headless launches, allowing AI-generated frontends to access Wix's full business infrastructure—payments, bookings, CMS, eCommerce, CRM, SEO, analytics, and security without managing backends or stitching multiple vendors. Read more

Security

CVE-2026-50522 (CVSS 9.8), a critical deserialization flaw in Microsoft SharePoint, is under active exploitation after public PoC release. Attackers extract machine keys via single request; defenders must rotate credentials and patch immediately—also watch CVE-2026-56164, CVE-2026-58644, CVE-2026-32201, CVE-2026-45659 exploited in the wild. Read more
Zimbra Collaboration Suite 10.1.20 patches critical command injection in SNMP monitoring component (unauthenticated RCE via crafted payloads), plus CVE-2026-50055 (mail forwarding bypass), CVE-2026-10631 (EWS access control), CVE-2026-50054 (mailbox delegation), four XSS flaws, and SSRF in Nextcloud integration. Read more
WordPress wp2shell exploitation accelerates with CVE-2026-63030 and CVE-2026-60137 chaining into unauthenticated RCE; CVE-2026-60137 bypasses authentication via REST API batch endpoint route confusion, enabling SQL injection through unsanitized author__not_in parameter. Read more

Open Source

Buzz, new open-source workplace chat platform from Jack Dorsey's Block, merges team communication with native AI agents and GitHub project management; model-agnostic, decentralized, self-sovereign with full source code access for customization. Read more
Cisco open-sources two small AI models, Antares-350M and Antares-1B, for source code vulnerability detection—performs comparably to GPT-5.5 and GLM-5.2 on Cisco's benchmark for identifying vulnerable files in real-world repos; withholding 3B-parameter Antares-3B for internal products. Read more

Dev Tools & IDEs

7-Zip version 26.02 patches critical heap-based buffer overflow in XZ chunked data processing (requires manual update)—crafted XZ files can trigger code execution within 7-Zip's context. Read more