Weekly news | 2025-09-17

news

• Dev snared in crypto phishing net, 18 npm packages compromised
• Bulletproof Host Stark Industries Evades EU Sanctions
• Reshaped is now open-source
• AirPods Live Translation Blocked for EU Users With EU Apple Accounts
• Geedge & MESA Leak: Analyzing the Great Firewall’s Largest Document Leak
• macOS Tahoe is certified Unix 03 and the reason behind
• PayPal to support Ethereum and Bitcoin
• Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
• Wasm 3.0 Completed
• AI:
  • Qwen3-Next
  • Introducing upgrades to Codex
  • Addendum to GPT-5 system card: GPT-5-Codex

• AWS:
  • Athena single sign-on support for drivers
  • Backup selective backup of ACLs and ObjectTags in S3 backups
  • Bedrock synchronous inference with Marengo Embed 2.7
  • CloudFront
    • ECDSA support for signed URLs
    • support for IPv6 origins
  • CloudTrail MCP Server for enhanced security analysis
  • CloudWatch Network Monitoring flow visibility between Regions
  • CloudWatch Observability Access Manager VPC Endpoints
  • Config resource tags for IAM Policies
  • Connect agents manually assign themselves Tasks, Emails, and Chats
  • Direct Connect 4-byte Autonomous System numbers for Virtual interfaces
  • EC2
    • M4 and M4 Pro Mac instances | GA
    • New EFA metrics
  • ECS
    • enhances task definition editing in the Console with Q Developer
    • Service Connect adds support for cross-account workloads
  • HealthImaging OIDC authentication for DICOMweb APIs
  • IoT SiteWise retraining of anomaly detection models
  • IVS private ingest via interface VPC endpoints
  • LocalStack VS Code integration
  • Managed Microsoft AD LDAPS and Smart Card with AWS Private CA
  • Managed Service for Prometheus collector logs now available in CloudWatch Logs
  • Neptune Analytics graph store in NetworkX
  • Q in Connect selecting LLMs directly in Connect Web UI
  • RDS Proxy support of end-to-end IAM authentication
  • S3 Expands File Size and Archive Scanning Limits | Malware Protection
  • SageMaker HyperPod Managed Tiered Checkpointing
  • SageMaker notebooks now support P6-B200 instance type
  • SageMaker Unified Studio
    • improved AI assistance
    • remote connection from VS Code
    • Custom Blueprints | GA
  • WAF free WAF Vended Logs based on request volume
  • For a full list of AWS announcements, be sure to keep an eye on AWS’s What’s New Feed page.

tooling

• ghtkn: A CLI to create short-lived (8 hours) GitHub App User Access Token for secure local development
• StateGraph: Terraform without the state file bottleneck
• Awesome-Nano-Banana-images: A curated collection of fun and creative examples generated with Nano Banana
• Small Transfers: a payment platform that lets you bill as little as 0.000001 USD per request. You provide the service, we charge your customers, you get paid. Easy.
• Jetzig Web Framework: web framework written in Zig
• FFglitch: FFmpeg fork for glitch art
• OCI Registry Explorer
• mago: a toolchain for PHP that aims to provide a set of tools to help developers write better code
• Models of European metro stations
• pass: Unix password manager
• GNU Midnight Commander
• Murex: An intuitive and content aware shell for a modern command line

blogs

• The challenge of maintaining curl
• Behind The Scenes of Bun Install
• Claude’s memory architecture is the opposite of ChatGPT’s
• Hashed sorting is typically faster than hash tables
• Many Hard Leetcode Problems are Easy Constraint Problems
• How we cut AWS bandwidth costs 95% with dm-cache: fast local SSD caching for network storage
• How to Use Claude Code Subagents to Parallelize Development
• Java 25’s new CPU-Time Profiler
• You're a Slow Thinker. Now what?
• React Won by Default – And It's Killing Frontend Innovation
• How to self-host a web font from Google Fonts
• Boring Work Needs Tension
• How Container Filesystem Works: Building a Docker-like Container From Scratch
• Learn x86-64 assembly by writing a GUI from scratch