congrats, you vibe-coded your own software. you’re also the head of security now yesterday, Railway was breached and thousands of vibe-coders (and companies) spent the day rotating every API key / password / token they had stored on there then had to audit their entire tech stack and assess their exposure (i.e. maybe they weren’t exposed directly, but vendor A they use was) same day, PHP (the language behind ~70% of websites) patched two bugs that could let a stranger take over your server without a password if you are building your own software, all of that is on you: > you need to stay up to date on the latest cybersecurity news > you need to routinely audit and update your tech stack > you need to spring into action to reduce exposure on days like yesterday > you’re responsible and liable for your (and your customers’) data or rather than vibe-coding your own storefront, you could pay shopify $39/mo and let 7,600 experts handle payments, fraud, PCI compliance, and all of the above for you rather than vibe-coding your own newsletter platform, you could pay @beehiiv $49/mo and let 130 specialists handle deliverability, security, uptime, and everything else AI made it easier to build your own software… but it also made it easier to break into it. there will be many more p0 exploits like yesterday moving forward SaaS isn’t invulnerable, but at least those companies are staffed with senior engineering teams and security experts who handle issues like this for a living

As a builder in the AI video space, I was terrified about how much markup API providers charge for simply routing the models. Higgsfield API adds a 40% markup even with its maximum advertised discount. Fal adds 100%. Runway adds 414% (Seedance 2 480p) I might be hated by the industry, but : 
 Today, we’re launching Sume API, the first image & video model provider with 0% markup. For example with Seedance 2.5 1080p • 50% cheaper than fal • 50% cheaper than higgsfield api (29% even with biggest discount) • 28.02% cheaper than kie ai The routing infrastructure layer is never the moat. We believe that APIs should be commoditized, and the moats will be built at the application layer. Check the pricing comparisons below, and see how the broken industry is saved.

Today we're launching cve.now 🚨 Yesterday was a rough day for security. php2shell, LiteLLM, Railway... How are we supposed to stay on top of all of this? cve.now aggregates 4 vulnerability sources into one free feed and uses AI to explain each one in plain English. No login. cve.now

In 2025, we published a bold proposal to use fusion reactors for gold production. And now we’ve done it: Mercury transmuted into stable gold, using fusion neutrons, at 10x the record set by CERN in 2025. We’ve reduced alchemy to a series of difficult but tractable engineering problems.

Palantir CEO Alex Karp’s secret to staying physically fit enough to run Palantir: “Copy the Norwegians.” “Run like a snail—run at the pace you walk at, get a band, stay in Zone 1.” “Do that as much as possible and over a long period of time, you will transform your health.”

Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26. Vercel WAF rules are live for every project and block known exploit patterns. vercel.com/kb/bulletin/node-…