Valen Replaces C with Rust for FFI & SharePoint RCE & Cursor's Bugbot & Okta AI Agent Management

Languages & Runtimes

• Valen creator drives "Golden Spike" to connect new languages with Rust, positioning Rust as a replacement for C's role as the "universal FFI language" for interoperability across systems. Developer feedback on Reddit and Lobsters praised the ambition while raising concerns about Rust's own type system limitations. Read more

AI Coding Tools

• Cursor launches Bugbot, an AI-powered code review tool that detects hard-to-find logic bugs with low false positive rates. It combines edge models with Cursor's proprietary model; over 50% of detected bugs get fixed by engineers. The tool includes customizable Bugbot Rules for team-specific code patterns and offers a free 14-day trial. Read more

Security

• CVE-2026-65660 (SharePoint RCE) and CVE-2026-67279 + CVE-2026-86060 (MikroTik RouterOS) added to CISA's Known Exploited Vulnerabilities catalog with evidence of active attacks. SharePoint flaw enables remote code execution; RouterOS exploit chain (dubbed MikroTrick) achieves full admin access without credentials by chaining argument injection with session channel creation. Read more
• CVE-2026-100623: Capgo (capgo.app) exposes its legacy membership table through Supabase PostgREST. Insufficient row-level security checks allow authenticated admins to directly insert or update org_users rows to grant admin access to any user, bypassing RBAC role-binding and anti-escalation checks. Read more
• CVE-2026-100676: Stoatchat before 0.15.5 improperly resolves SVG values as local filesystem paths in its media proxy. Attackers can determine file existence via response-time differences, disclose local images, and trigger unbounded I/O (proof-of-concept drives ~4.34 GB of reads) causing DoS. Read more

Dev Tools & IDEs

• Excalidraw Editor plugin for IntelliJ IDEs reaches version 0.2.12 (Sep 19), enabling developers to open, edit, and save embedded Excalidraw diagrams directly within the IDE. Read more