Blog — Page 49
Engineering notes, case studies, and lessons from the field.
Critical Langflow RCE CVE-2026-33017 Exploited Within 20 Hours — CISA Orders Federal Patch by April 8
A critical unauthenticated remote code execution vulnerability in Langflow's AI workflow builder was weaponized within 20 hours of public disclosure. CISA added CVE-2026-33017 to its Known Exploited Vulnerabilities catalog and mandated federal remediation by April 8, 2026.
Microsoft 365 E7 Is Now Transactable — Copilot, Agent 365, and Entra in One $99/User Bundle
Microsoft's new top-tier enterprise SKU bundles M365 E5, Microsoft 365 Copilot, Agent 365, and Entra Suite into a single $99/user/month package now available in CSP channels. It creates a new pricing ceiling above E5 and bets everything on the agentic enterprise.
CVE-2026-33105: Microsoft Patches CVSS 10.0 Auth Bypass in Azure Kubernetes Service
An unauthenticated attacker with network access can escalate privileges and seize control of AKS containerized workloads. Microsoft pushed the patch via Azure Update Manager. A second CVSS 10.0 flaw in Azure AI Foundry dropped the same week.
Microsoft Commits $10 Billion to Japan AI Infrastructure — Sakura Internet Surges 20%
Microsoft announced a four-year, $10 billion investment in Japan's AI and cybersecurity infrastructure, partnering with SoftBank and Sakura Internet. The deal includes training one million workers by 2030 and builds on a prior $2.9B commitment made in April 2024.
Arcee AI's Trinity-Large-Thinking Is Now the Strongest Open Reasoning Model Built Outside China
Arcee AI released a 399B sparse MoE reasoning model under Apache 2.0 that ranks second only to Opus 4.6 on PinchBench while costing 96% less. It's the most capable fully-open US-built model ever shipped.
Google Releases Gemma 4 Under Apache 2.0 — The Most Capable Open Models It Has Ever Shipped
Google DeepMind dropped Gemma 4 with four model sizes, a 256K context window, native vision and audio, and full Apache 2.0 licensing — no MAU caps, no restrictions. The 31B dense model ranks third on the open-model AI Arena leaderboard.
Red Hat Launches RHEL Extended Life Cycle Premium — 14 Years of Support for Enterprise Linux
Red Hat announced a new standalone RHEL subscription giving regulated industries a guaranteed 14-year major-release lifecycle and six years of extended minor-release maintenance. It targets finance, healthcare, and government teams caught in perpetual upgrade cycles.
Kubernetes v1.36 Sneak Peek: HPA Scale-to-Zero, In-Place Pod Resize, and Ephemeral Image Tokens
The Kubernetes project published its v1.36 sneak peek targeting an April 22 release. Thirty-six enhancements graduate, led by HPA scale-to-zero enabled by default, in-place pod resize at the pod level, and short-lived image pull tokens replacing static secrets.
Dorsey and Sequoia Say AI Ends Middle Management — Here's the Blueprint They Published
Jack Dorsey and Sequoia's Roelof Botha co-authored an essay arguing that corporate hierarchy exists only to route information — a job AI now does better. Published weeks after Block cut 4,000 roles, it reads less like a thought piece and more like an operating model.
Page 49 of 61 · 549 articles