Gruselige Security

Beflügelt

FEEDBACK UND RÜCKBLICK * KubeCon + CloudNativeCon Europe | LF Events [https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/] * Microdexed - musikandmore.net [https://www.musikandmore.net/Marke/microdexed/] * pi.dev [https://shittycodingagent.ai/] * Paperless NGX [https://docs.paperless-ngx.com/#screenshots] * Brother ADS-1800W Compact and Portable Document Scanner with Wi-Fi [https://amzn.eu/d/07mPNWyq] * Behringer WING Compact [https://www.thomann.de/de/behringer_wing_compact.htm] NEWS HARDWARE * Our first hands-on look at Apple’s MacBook Neo [https://www.theverge.com/tech/888712/macbook-neo-laptop-iphone-chip-apple-event-photos-price-features?ueid=af57ec3cc3cd7cfbf38a3686cfda3f34&bxid=60ca3d441abeb364a77c1155] * DJI’s Osmo Pocket 4 camera is better at capturing slo-mo footage and photos [https://www.theverge.com/tech/912381/dji-osmo-pocket-4-camera-stabilizied-gimbal-4k-slow-motion] * Mac Pro [https://9to5mac.com/2026/03/26/apple-discontinues-the-mac-pro/] SOFTWARE * Introducing EmDash — the spiritual successor to WordPress that solves plugin security [https://blog.cloudflare.com/emdash-wordpress/] * ONLYOFFICE suspends Nextcloud partnership for forking its project without permission [https://www.neowin.net/news/onlyoffice-suspends-nextcloud-partnership-over-unapproved-euro-office-fork/] * GH Stack [https://github.github.com/gh-stack/] SECURITY * Claude Code Source Leak Megathread [https://www.reddit.com/r/ClaudeAI/comments/1s9d9j9/claude_code_source_leak_megathread/] * Openclaw CVEs and Security Vulnerabilities - OpenCVE [https://app.opencve.io/cve/?vendor=openclaw] * Online age-verification tools spread across U.S. for child safety, but adults are being surveilled [https://www.cnbc.com/2026/03/08/social-media-child-safety-internet-ai-surveillance.html] * Trivy Compromised by "TeamPCP" | Wiz Blog [https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack] * Security Update: Suspected Supply Chain Incident | liteLLM [https://docs.litellm.ai/blog/security-update-march-2026] * axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity [https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan] * Zero-Day erlaubt Codeausführung in WindChill und FlexPLM [https://www.heise.de/news/Zero-Day-erlaubt-Codeausfuehrung-in-WindChill-und-FlexPLM-11220521.html] * Vercel April 2026 security incident | Vercel Knowledge Base [https://vercel.com/kb/bulletin/vercel-april-2026-security-incident] AI * OpenAI schließt Video-KI Sora völlig überraschend [https://www.heise.de/news/OpenAI-schliesst-Video-KI-Sora-voellig-ueberraschend-11223320.html] * Introducing Claude Design by Anthropic Labs [https://www.anthropic.com/news/claude-design-anthropic-labs] * Claude Mythos von Anthropic: Eine KI, von der jeder Hacker träumt [https://www.faz.net/aktuell/wirtschaft/unternehmen/claude-mythos-von-anthropic-eine-ki-von-der-jeder-hacker-traeumt-200718701.html] CODE DER WOCHE * fatedier/frp [https://github.com/fatedier/frp] NO-CODE DER WOCHE * Cybernation [https://cybernation.fm/]

Spezistrom

Spezistrom FEEDBACK UND RÜCKBLICK * keyruu.de [https://keyruu.de/] * Fuggs [https://fuggs.de/] * A Word on Omarchy [https://xn--gckvb8fzb.com/a-word-on-omarchy/] * DHH Is Way Worse Than I Thought | jakelazaroff.com [https://jakelazaroff.com/words/dhh-is-way-worse-than-i-thought/] NEWS APPS * Creator Studio ist da: Apple vermietet Kreativpaket für 12,99 Euro im Monat [https://www.heise.de/news/Creator-Studio-ist-da-Apple-vermietet-Kreativpaket-fuer-12-99-Euro-im-Monat-11157407.html] * Discord will require a face scan or ID for full access next month [https://www.theverge.com/tech/875309/discord-age-verification-global-roll-out] WEB * Apple to Soon Take Up to 30% Cut From All Patreon Creators in iOS App [https://www.macrumors.com/2026/01/28/patreon-apple-tax/] MNA * Native Instruments meldet Insolvenz an [https://www.heise.de/news/Native-Instruments-meldet-Insolvenz-an-11156491.html] * Native Instruments insolvent: Geschäftsbetrieb soll weiterlaufen [https://www.heise.de/news/Native-Instruments-Stimmen-zur-Insolvenz-11164492.html] * Netflix walks away from its deal to buy Warner Bros. after Paramount came back with a better offer [https://www.theverge.com/streaming/885753/netflix-exit-warner-bros-discovery-deal-paramount?ueid=af57ec3cc3cd7cfbf38a3686cfda3f34&bxid=60ca3d441abeb364a77c1155] HARDWARE * Wolfmix W1 MK3 and WING First Look [https://www.youtube.com/watch?v=MZcNgez60LU] * Motorola News | Motorola's new partnership with GrapheneOS [https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/] SECURITY * Notepad++: Updater-Übernahme durch staatliche Akteure [https://www.heise.de/news/Notepad-Updater-Uebernahme-durch-staatliche-Akteure-11162101.html] * Spying Chrome Extensions: 287 Extensions spying on 37M users [https://qcontinuum.substack.com/p/spying-chrome-extensions-287-extensions-495] * CVE-2026-20841 [https://www.cve.org/CVERecord?id=CVE-2026-20841] AI * GitHub adds Claude and Codex AI coding agents [https://www.theverge.com/news/873665/github-claude-codex-ai-agents?ueid=af57ec3cc3cd7cfbf38a3686cfda3f34&bxid=60ca3d441abeb364a77c1155] * KI-Hype OpenClaw: OpenAI nimmt österreichischen Entwickler unter Vertrag [https://www.heise.de/news/KI-Hype-OpenClaw-OpenAI-nimmt-oesterreichischen-Entwickler-unter-Vertrag-11177214.html] * A Meta AI security researcher said an OpenClaw agent ran amok on her inbox  | TechCrunch [https://techcrunch.com/2026/02/23/a-meta-ai-security-researcher-said-an-openclaw-agent-ran-amok-on-her-inbox/] * Bcachefs creator claims his custom LLM is 'fully conscious' [https://www.theregister.com/2026/02/25/bcachefs_creator_ai/] * How we rebuilt Next.js with AI in one week [https://blog.cloudflare.com/vinext/] * Amazon's vibe-coding tool Kiro reportedly vibed too hard [https://www.theregister.com/2026/02/20/amazon_denies_kiro_agentic_ai_behind_outage/] CODE DER WOCHE * GitHub - anomalyco/opencode: The open source coding agent. [https://github.com/anomalyco/opencode] NO-CODE DER WOCHE * Hähnel ProCube3: a super fast dual charger [https://www.hahnel.ie/blog/post/hahnel-procube3-super-fast-dual-charger/] * Better Offline [https://www.betteroffline.com/]

Scrollen ins Verderben

Doomscrolling * shinyflakes/nix/modules/services/my.nix at main · Keyruu/shinyflakes [https://github.com/Keyruu/shinyflakes/blob/main/nix/modules/services/my.nix] * Lux in Tenebris [https://lux-in-tenebris.de/] * shinyflakes/nix/modules/services/mesh at main · Keyruu/shinyflakes [https://github.com/Keyruu/shinyflakes/tree/main/nix/modules/services/mesh] * Agiles Ehrenamt [https://agiles-ehrenamt.de/] * GitHub - fosrl/pangolin: Identity-aware VPN and proxy for remote access to anything, anywhere. [https://github.com/fosrl/pangolin] * shinyflakes/nix/modules/services/backup.nix at main · Keyruu/shinyflakes [https://github.com/Keyruu/shinyflakes/blob/main/nix/modules/services/backup.nix] * GitHub - restic/restic: Fast, secure, efficient backup program [https://github.com/restic/restic] * GitHub - jimsalterjrs/sanoid: These are policy-driven snapshot management and replication tools which use OpenZFS for underlying next-gen storage. (Btrfs support plans are shelved unless and until btrfs becomes reliable.) [https://github.com/jimsalterjrs/sanoid] * VRS:NSMV - Sacred and Black Neo-Classical Piano [https://vrsnsmv.com/] * Der Grace-Blackwell-KI-Supercomputer auf Ihrem Schreibtisch: NVIDIA DGX Spark [https://www.nvidia.com/de-de/products/workstations/dgx-spark/] * ElevenLabs [https://elevenlabs.io/de] NEWS DEVELOPMENT * CI Runners Suddenly Failing with 403 Forbidden for Maven/Gradle Repositories (ubuntu-latest) · community · Discussion #183607 [https://github.com/orgs/community/discussions/183607] * Tailwind Slashes 75% Workforce as Revenue Drops 80% [https://aidailypost.com/news/tailwind-slashes-75-workforce-revenue-drops-nearly-80] * feat: add llms.txt endpoint for LLM-optimized documentation by quantizor · Pull Request #2388 · tailwindlabs/tailwindcss.com [https://github.com/tailwindlabs/tailwindcss.com/pull/2388] SECURITY * Ubisoft shuts down ‘Rainbow Six Siege’ servers following hack [https://www.theverge.com/news/850551/ubisoft-shuts-down-rainbow-six-siege-servers-following-hack] * Baden-Württemberg: Cyber-Attacke auf "The Länd"-Shop [https://www.tagesschau.de/inland/regional/badenwuerttemberg/swr-cyber-attacke-auf-the-laend-shop-100.html] * Options+ and G HUB macOS Certificate Issue [https://support.logi.com/hc/en-us/articles/37493733117847-Options-and-G-HUB-macOS-Certificate-Issue] * Logitech vergisst Zertifikat: Konfigurations-App Options+ für macOS streikt [https://www.heise.de/news/Logitech-vergisst-Zertifikat-Konfigurations-App-Options-fuer-macOS-streikt-11132480.html] HARDWARE * Punkt’s German-made MC03 smartphone comes to the US this spring [https://www.theverge.com/tech/849740/punkt-mc03-secure-smartphone-made-in-germany] * Clicks Introduces Communicator, a Second Phone Built for Communication, Not Consumption [https://financialpost.com/globe-newswire/clicks-introduces-communicator-a-second-phone-built-for-communication-not-consumption] * Mecha Comet - Modular Linux Handheld Computer powered by Open-Source Software [https://mecha.so/comet] SOFTWARE * Introducing Apple Creator Studio, an inspiring collection of creative apps [https://www.apple.com/newsroom/2026/01/introducing-apple-creator-studio-an-inspiring-collection-of-creative-apps/] THEMA DER WOCHE: DOOM SCROLLING CODE DER WOCHE * GitHub - glanceapp/glance: A self-hosted dashboard that puts all your feeds in one place [https://github.com/glanceapp/glance] NO-CODE DER WOCHE * Stay at the top of AI [https://mammouth.ai/]

Gruselige Security

News und React2Shell FEEDBACK UND RÜCKBLICK * Caddy - The Ultimate Server with Automatic HTTPS [https://caddyserver.com/] * corazawaf/coraza-caddy: OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities [https://github.com/corazawaf/coraza-caddy] * shinyflakes/nix/hosts/prime/modules/caddy.nix at main · Keyruu/shinyflakes [https://github.com/Keyruu/shinyflakes/blob/main/nix/hosts/prime/modules/caddy.nix] * Migadu Email [https://migadu.com/] * IKEA MITTZON Laptoptisch mit Rollen - schwarz 66x50 cm [https://www.ikea.com/de/de/p/mittzon-laptoptisch-mit-rollen-schwarz-00515594/] * Panorama CS12 [https://nektartech.com/products/panorama-cs12/] * Syncthing [https://syncthing.net/] * Der Grace-Blackwell-KI-Supercomputer auf Ihrem Schreibtisch: NVIDIA DGX Spark [https://www.nvidia.com/de-de/products/workstations/dgx-spark/] NEWS WEB * Ingress NGINX Retirement: What You Need to Know [https://www.kubernetes.dev/blog/2025/11/12/ingress-nginx-retirement/] * Cloudflare outage on November 18, 2025 [https://blog.cloudflare.com/18-november-2025-outage/] * Mozilla Names New CEO, Firefox To Evolve Into A "Modern AI Browser" [https://www.phoronix.com/news/Mozilla-New-CEO-AI] * Zig turns its back on GitHub: Frustration over Actions and Microsoft's AI course [https://www.heise.de/en/news/Zig-turns-its-back-on-GitHub-Frustration-over-Actions-and-Microsoft-s-AI-course-11100039.html] * Update to GitHub Actions pricing - GitHub Changelog [https://github.blog/changelog/2025-12-16-coming-soon-simpler-pricing-and-a-better-experience-for-github-actions/] * React2Shell (CVE-2025-55182) [https://react2shell.com/] APPS * Apple gibt die Gewinner:innen der App Store Awards 2025 bekannt [https://www.apple.com/de/newsroom/2025/12/apple-unveils-the-winners-of-the-2025-app-store-awards/] MNA * Crucial is shutting down — because Micron wants to sell its RAM and SSDs to AI companies instead [https://www.theverge.com/news/837594/crucial-ram-ssd-micron-ai] * Bad Dye Job [https://daringfireball.net/2025/12/bad_dye_job] * Netflix to acquire Warner Bros [https://about.netflix.com/en/news/netflix-to-acquire-warner-bros] * Roomba Maker Declares Bankruptcy, but Tries to Ease ‘Bricking’ Fears [https://www.wsj.com/business/roomba-maker-declares-bankruptcy-but-tries-to-ease-bricking-fears-fe73dff2] * Bento Sunset [https://bento.me/bento-sunset] * Kafka in Blue: IBM Buys Confluent [https://www.heise.de/en/news/Kafka-in-Blue-IBM-Buys-Confluent-11110059.html] AI * Adobe Makes Creativity Accessible for Everyone with Adobe Photoshop, Adobe Express and Adobe Acrobat in ChatGPT [https://news.adobe.com/news/2025/12/adobe-photoshop-express-acrobat-chatgpt] * Neu: GPT-5.2-Codex [https://openai.com/de-DE/index/introducing-gpt-5-2-codex/] * Spotify gibt dir mit neuem Feature den Algorithmus in deine Hand – fast. [https://www.delamar.de/news/spotify-prompted-playlists-v3-84362/] CODE DER WOCHE * Carbon Design System [https://carbondesignsystem.com/] * schollz/croc: Easily and securely send things from one computer to another :package: [https://github.com/schollz/croc] NO-CODE DER WOCHE * Gruselkabinett - Titania Medien GmbH [https://titania-medien.de/hoerspiele/gruselkabinett] * Terraria [https://store.steampowered.com/app/105600/Terraria/]

Siris Zwilling

EU AI Act FEEDBACK UND RÜCKBLICK * Voyager Navigator [https://www.zsa.io/voyager/navigator] * github.com/renovatebot/renovate [https://github.com/renovatebot/renovate] * Railway [https://railway.com/] * Scaleway [https://www.scaleway.com/en/] * Arc from The Browser Company [https://arc.net/] * github.com/d135-1r43/sn0rt [https://github.com/d135-1r43/sn0rt] * Markus gibt Workshops [https://www.instagram.com/p/DQtjaE1DFyG/] * GitHub - Keyruu/shinyflakes: ✨❄️ My Nix* configurations (nix-darwin, NixOS, neovim) [https://github.com/Keyruu/shinyflakes] NEWS WEB * Die Seitenwende der taz: Das nächste Kapitel [https://taz.de/Die-Seitenwende-der-taz/!6117716/] * xslt.rip [https://xslt.rip/] APPS * Raycast for iOS [https://www.raycast.com/ios?ueid=af57ec3cc3cd7cfbf38a3686cfda3f34] * Introducing Notion 3.0 [https://www.notion.com/blog/introducing-notion-3-0] * Großes Update für Canva, Affinity wird kostenlos [https://www.heise.de/news/Grosses-Update-fuer-Canva-Affinity-wird-kostenlos-10964463.html] HARDWARE * Brillen und Sonnenbrillen von Ray-Ban Meta im Wayfarer-Design (Gen 2) [https://www.meta.com/de/ai-glasses/ray-ban-meta-wayfarer-gen-2/] * Montblanc: Digitales Schreiben [https://www.montblanc.com/de-de/discover/edit/digital-writing-by-montblanc.html] * Roland’s TR-1000 is its first analog drum machine in over 40 years [https://www.theverge.com/tech/789361/rolands-tr-1000-rhythm-creator-analog-drum-machine-808-909] * Logitech’s MX Master 4 adds haptic feedback, mostly just for fun [https://www.theverge.com/news/787339/logitech-mx-master-4-mouse-haptics-specs-features-price] AI * github.com/Tencent-Hunyuan/AutoCodeBenchmark [https://github.com/Tencent-Hunyuan/AutoCodeBenchmark] * OpenAI unveiled ChatGPT Atlas, a browser with built-in AI [https://ux-news.com/openai-has-introduced-chatgpt-atlas-a-web-browser-with-a-built-in-ai-assistant/] * Für eine Milliarde US-Dollar im Jahr: Siri kriegt wohl ein Google-Gemini-Herz [https://www.heise.de/news/Fuer-eine-Milliarde-US-Dollar-im-Jahr-Siri-kriegt-wohl-ein-Google-Gemini-Herz-11067255.html] MNA * Cycle is joining Atlassian - Work Life by Atlassian [https://www.atlassian.com/blog/announcements/cycle-joining-atlassian] DEVELOPMENT * Here’s Java 25, Ready to Perform to the Limit [https://hanno.codes/2025/09/16/heres-java-25] THEMA DER WOCHE: EU AI ACT * Artificial Intelligence Act [https://en.wikipedia.org/wiki/Artificial_Intelligence_Act] CODE DER WOCHE * github.com/alacritty/alacritty [https://github.com/alacritty/alacritty] * Tabby - a terminal for a more modern age [https://tabby.sh/] * GitHub - 9001/copyparty: Portable file server with accelerated resumable uploads, dedup, WebDAV, FTP, TFTP, zeroconf, media indexer, thumbnails++ all in one file, no deps [https://github.com/9001/copyparty/tree/hovudstraum] NO-CODE DER WOCHE * isponsorblocktv [https://github.com/dmunozv04/iSponsorBlockTV]