Next.js Security Releases & Chrome 152 Ships & PostgreSQL 19 WAIT FOR & Stability AI $76M Funding

Next.js patches critical RCE vulnerabilities, Chrome 152 introduces window-drag CSS and pseudo-element support, PostgreSQL 19 adds WAIT FOR for read-your-writes consistency, and Stability AI closes $76M Series B from entertainment giants.

AI & ML

Google's AI efficiency jumps 300x in two years — Google's latest AI models are 300 times more efficient than those from 2024, with breakthroughs in medicine (AlphaFold for malaria vaccines) and everyday applications. The company emphasizes AI as a "force multiplier" for small businesses and entrepreneurs, addressing both scientific and economic transformation. Read more
Stability AI raises $76M Series B backed by entertainment leaders — Stability AI closed a $76M Series B with backing from Electronic Arts, Universal Music Group, and Warner Music Group. The funding brings total backing to $232M and will support product development, applied research, and professional services. The company also launched Stable Audio 3.0, a family of open-weight music models trained on fully licensed data, with a new DAW plugin. Read more
OpenAI touts compute efficiency gains across full stack — OpenAI's latest model, GPT-5.6 Sol with max reasoning, reached new highs while using 54% fewer output tokens than competing models. The company frames efficiency as a compounding advantage: better software makes hardware more productive, more capable models drive demand, and those signals fund the next wave of progress. Read more
Cohere and University of Waterloo partner to build Canada's AI talent pipeline — Cohere announced a partnership with the University of Waterloo to develop AI talent in Canada, supporting the next generation of machine learning researchers and practitioners. Read more

Frameworks & Libraries

Next.js patches two critical RCE vulnerabilities — Next.js released v16.3.3 and v15.5.24 to fix two critical-severity vulnerabilities: unauthenticated RCE via AVIF image optimization (CVE-2026-75604 / GHSA-2xp9-vwfh-vxw4) and Windows-only RCE affecting Apps Router without Cache Components (CVE-2026-75604 / GHSA-p293-qw3h-jr36). AVIF optimization is disabled until upstream fixes propagate. Update immediately. Read more
Next.js adds catchError for component-level error boundaries — catchError is now stable in Next.js v16.3.0, providing a programmatic alternative to error.js files for wrapping components with error recovery anywhere in the tree. Unlike custom React boundaries, it works natively with Next.js for easier error handling. Read more
Next.js introduces Partial Prefetching with partialPrefetching config — New in v16.3.0, partialPrefetching enables selective prefetching of static App Shells on a per-route basis (with prefetch='partial'). This reduces bandwidth while maintaining fast navigation by caching rendered shells client-side and filling in dynamic data after navigation. Read more

Browser & Web Platform

Chrome 152 stable: window-drag CSS, relative alpha colors, and CSSPseudoElement extensions — Chrome 152 (Aug 25) ships the window-drag CSS property for draggable window title bar areas in installed desktop apps, relative alpha colors via CSS Color 5's alpha() function, and CSSPseudoElement support for ::backdrop, ::scroll-marker, and ::view-transition. Read more

DevOps & Cloud

Amazon RDS adds support for Oracle July 2026 Release Update — Amazon RDS for Oracle now supports the July 2026 RU for 19c, 21c, and 26ai versions, including security updates. Use the AWS Management Console, SDK, or CLI to apply; enable Automatic Minor Version Upgrade for hands-off patching. Read more
Amazon RDS for SQL Server supports CU6 for 2025 — Amazon RDS now supports Microsoft SQL Server 2025 CU6 (KB5093421 / v17.00.4055.5.v1) with improvements and fixes. Upgrade via RDS Management Console, SDK, or CLI. Read more
Amazon EC2 celebrates 20 years with expanded instance portfolio — Amazon EC2 reached its 20th anniversary with over 1,200 instance types across 39 global regions, plus AWS Outposts, Local Zones, and Wavelength edge deployments. Recent highlights: AWS Nitro System (2017), AWS Graviton processors (2018), and continued rapid iteration. Read more

Databases & Data

PostgreSQL 19 introduces WAIT FOR for read-your-writes on async replicas — PostgreSQL 19 adds the WAIT FOR LSN SQL command, letting a session block until WAL reaches a specific position. This enables read-your-writes consistency on asynchronous replicas without the cost of synchronous replication, useful for connection poolers to inject transparently. Read more
ClickHouse helps Suprema Gaming slash data warehouse costs by 62% — Suprema Gaming switched from Snowflake to ClickHouse Cloud and cut query latency from minutes to milliseconds, data freshness from 4 hours to real-time, and warehouse spend by 62%. The platform now scales without cost inflation per new warehouse or consumer. Read more
ClickGap: Autonomous QA bot for ClickHouse logged 500+ issues in 5 months — ClickGap, an AI-powered QA agent for ClickHouse, filed ~500 issues and ~200 PRs with over 50% closure rate in five months. The bot reviews merged code and surfaces findings within hours, catching defects before release. Read more

Security

CVE-2026-79290: Critical use-after-free in Chrome Aura (152.0.7977.65) — Use-after-free in Chrome Aura component prior to v152.0.7977.65 allows remote attackers to execute arbitrary code outside the sandbox via crafted HTML (CWE-416, Chromium critical). Patch to v152+ immediately. Read more
CVE-2026-21962: Oracle WebLogic RCE actively exploited (CVSS 10.0) — Improper access control in Oracle HTTP Server and WebLogic Server Proxy Plug-in (CVE-2026-21962) allows unauthenticated HTTP attackers to achieve RCE and modify critical data. Federal agencies have until Aug 27, 2026 to patch. Honeypots also captured attacks on legacy flaws CVE-2020-14882, CVE-2020-2551, and CVE-2017-10271. Read more
CVE-2026-77136: TYPO3 Powermail Fluid injection (CVSS 9.5) — Unauthenticated users can inject Fluid template syntax in the sender_name field of TYPO3 Powermail forms to execute arbitrary ViewHelpers, disclose config/env vars, and potentially achieve RCE. No auth required; actively exploited in the wild. Read more

Open Source

Top open source projects: Kubernetes hits 124k stars, LLaMA.cpp reaches 124k — Kubernetes and llama.cpp both crossed 124k GitHub stars in August. Other top repos: TensorFlow (197k), JavaScript Algorithms (196k), and claw-code (195k). Go leads by language with Trivy (37.3k), sing-box (37k), and CasaOS (37k) among trending projects. Read more

Dev Tools & IDEs

Junie CLI adds code review agent with focused resource usage — Junie (from JetBrains) now includes a code review subagent that analyzes changed lines with optimized prompts and read-only tools. Use junie --review locally before PRs, or trigger via GitHub Actions for automated reviews on pull requests. Read more
IntelliJ IDEA enables LSP support for cross-editor compatibility — IntelliJ IDEA now supports the Language Server Protocol, allowing Java and Kotlin IDE features to work in VS Code, Cursor, and other LSP-compatible editors under the same license, enabling seamless cross-tool development. Read more