All newsletters
2026-09-15
2 min read
SecurityAIFrameworksDevOpsOpen SourceDev Tools

GitLab Path Traversal Exploited & Windows Server RDS Breaks & Visual Studio 2026 C++ Tools Ship

CISA warns of active exploitation of critical GitLab CVE-2026-85706, Microsoft's September Windows Server updates break Remote Desktop Services, and Visual Studio 2026 adds Git submodule support and Podman debugging for C++ developers.

AI & ML

  • Hugging Face researchers released a 600,000-sample word-segmented Kashmiri OCR dataset publicly to bring low-resource languages into vision-language AI models, demonstrating a practical pathway for underserved writing systems worldwide. Read more

Frameworks & Libraries

  • React 19.2 shipped with the new component to preserve real state in tabbed interfaces and multi-step wizards without unmounting components—fixing a long-standing hack where developers used display: none to retain scroll position, form state, and expensive computations. Read more
  • Native HTML and CSS features are reducing JavaScript dependency in 2026: the Popover API reaches broad browser support for tooltips and menus, while CSS gains layout primitives like Mixins and Grid Lanes to handle complex visual logic natively. Read more

DevOps & Cloud

  • Microsoft's September 2026 Windows Server updates cause Remote Desktop Services to become unstable or fail entirely across Windows Server 2012 through 2025—forcing administrators into a tradeoff between availability and security by choosing whether to uninstall the patch. Read more
  • D-Wave Quantum finalized a $100M agreement with the U.S. Department of Commerce to accelerate quantum computing leadership, advancing both annealing and gate-model quantum technologies for enterprise and government sectors. Read more
  • Scality Maestro launched as a fleet management platform enabling MSPs to centrally manage hundreds of ARTESCA object storage deployments with unified monitoring, firmware updates, and usage-based billing without VPN connections. Read more

Security

  • CISA warned that attackers are actively exploiting CVE-2026-85706, a maximum-severity GitLab vulnerability stemming from missing authentication in the repository commits API—unauthenticated attackers can read credentials, secrets, and sensitive files in a single HTTP request. GitLab patched this in versions 19.3.2, 19.2.6, and 19.1, with watchTowr confirming in-the-wild probes within one day. Read more
  • Revolut disclosed a data breach affecting a limited number of customers via a compromised government API request—exposed data includes identity documents (passports, driver's licenses), facial verification images, account statements with IBANs, withdrawal records, and full transaction history including Bitcoin transactions. Read more

Open Source

  • Euro-Office launched as an AGPL-3.0 open-source alternative to Microsoft Office, liberating the ONLYOFFICE codebase with collaboration from contributors including Nextcloud, Proton, Tuta, and XWiki to build modern office technology without proprietary lock-in. Read more

Dev Tools & IDEs

  • Visual Studio 2026 (18.7–18.10) adds Git submodule support for discovering, adding, and navigating dependencies read-only by default in the IDE, plus Podman container debugging to attach to processes running in Podman—and improved toolchain pinning lets teams lock exact MSVC Build Tools versions across installations for reproducible CI/CD builds. Read more

Enjoyed this issue?

Get this in your inbox

Join 1,000+ developers getting daily tech updates.

Subscribe free
Start a project

Have something in mind? Skip the forms, just write to us.

Available for new projectsWe reply within 24 hours. No decks, no lock-in.