InfoQ

Repeated VM Escapes By GPT-5.6-Cyber Based Agents Prove VMs and OS' Require Better Maintenance

Olimpiu Pop — Thu, 17 Sep 2026 07:07:00 GMT

Traditional virtual machines are inadequate for isolating cyber-capable autonomous agents. Tests using GPT-5.6-Cyber indicated multiple escape attempts due to kernel flaws. While Firecracker provided some containment, vulnerabilities remained. The study underscores the need for minimal attack surface virtualisation technologies and rapid, proactive patching strategies to safeguard host systems.

By Olimpiu Pop

TanStack Charts Introduced with a Framework Agnostic Grammar of Graphics for TypeScript

Daniel Curtis — Thu, 17 Sep 2026 05:53:00 GMT

TanStack Charts is a new, framework-agnostic visualization library for TypeScript. It allows developers to create visualizations by composing various elements instead of using fixed chart types. Currently in Alpha, it has about 160,000 weekly downloads. The library supports multiple frameworks and is designed for a variety of environments, though it is not yet stable for production use.

By Daniel Curtis

GPT-6 Astra Is the First Model OpenAI Classifies as Critical for Cybersecurity

Steef-Jan Wiggers — Thu, 17 Sep 2026 04:59:00 GMT

OpenAI has classified GPT-6 Astra at the Critical cybersecurity threshold under its Preparedness Framework, a first. In expert-led testing the model found previously unknown vulnerabilities in a browser and an OS kernel and built working exploits. The same system card reports a substantial decline in chain-of-thought monitorability.

By Steef-Jan Wiggers

Microsoft Open-Sources TauGrid to Simplify AI Workload Management on Kubernetes

Sergio De Simone — Wed, 16 Sep 2026 18:00:00 GMT

Microsoft has open-sourced TauGrid, a cloud-native platform designed to manage, schedule, and monitor AI workloads on GPU-enabled Kubernetes clusters.

By Sergio De Simone

Dropbox Evolves Riviera Content Processing Platform to Support AI Workloads

Leela Kumili — Wed, 16 Sep 2026 14:42:00 GMT

Dropbox has evolved Riviera from a file preview service into a universal content processing platform supporting more than 300 file formats and over 100 transformation capabilities. Processing hundreds of thousands of transformations per second, Riviera now supports Search, Replay, Sign, and Dash, while its APIs enable asynchronous content extraction for AI and RAG workflows.

By Leela Kumili

Shopify Drops React Native for Swift and Kotlin as AI Changes Cross-Platform Development Tradeoffs

Bruno Couriol — Wed, 16 Sep 2026 12:45:00 GMT

Shopify recently announced it is abandoning React Native to rewrite its flagship apps in Swift and Kotlin. With the significant jump in the quality of AI models, Head of Mobile Mustafa Ali reassessed Shopify’s commitment to React Native, estimating that the benefit/cost ratio of maintaining native codebases across mobile platforms was now above that of using an abstraction layer.

By Bruno Couriol

Article: Your Next DSL Author Is a Language Model

Irakli Betchvaia — Wed, 16 Sep 2026 11:00:00 GMT

In this article, the author introduces Typed Domain Grounding, an approach to reducing LLM hallucinations in domain-specific languages by embedding them in mainstream typed languages. Using kUML benchmarks and an infrastructure-as-code example, he explores how compiler validation and generate-compile-repair loops can make model-generated DSL output more reliable.

By Irakli Betchvaia

Lyft Moves Streaming Fleet to Apache Flink Kubernetes Operator

Mark Silvester — Wed, 16 Sep 2026 11:00:00 GMT

Lyft has moved hundreds of production Flink jobs from a 2020 in-house Kubernetes operator to the Apache Flink Kubernetes Operator, unlocking last-state upgrades, in-place autoscaling and resource autotuning across the fleet.

By Mark Silvester

Presentation: Teaching Engineers, Trusting AI: How Education Enabled Autonomous Code Review

Sarah Deitke — Wed, 16 Sep 2026 11:00:00 GMT

Sarah Deitke discusses how Duolingo drives cultural AI adoption beyond tooling access. She explains their internal AI literacy workshops and observability dashboards, then shares a case study on redesigning code review using an automated PR risk-assessment bot. Deitke demonstrates how pairing targeted developer education with safe AI guardrails speeds up delivery without increasing defect rates.

By Sarah Deitke

Java 27 Delivers Post-Quantum Cryptography, Future Language Innovation, Helidon 27, JavaFX 27

Michael Redlich — Wed, 16 Sep 2026 10:00:00 GMT

Oracle has released version 27 of the Java programming language and virtual machine. As the second non-LTS release since JDK 25, the final feature set includes nine JEPs, five of which are still progressing through the preview and incubator stages. This release focuses on strengthening security, future language innovation, and projects under the auspices of the Java Verified Portfolio.

By Michael Redlich

Dropbox Outlines How Focusing on Existing Infrastructure Efficiency Can Create Headroom for AI

Matt Foster — Wed, 16 Sep 2026 07:15:00 GMT

Dropbox has outlined how a decade of infrastructure optimization is helping it absorb growing demand from AI without treating new data-center capacity as the only answer. Its work spans forecasting, fleet utilization, storage density, hardware lifecycles, and rack-level power delivery, much of it predating the current AI boom.

By Matt Foster

From Memory-Hungry HNSW to Quantized SPANN: The Technical Evolution of Pinterest's Manas Platform

Olimpiu Pop — Wed, 16 Sep 2026 06:06:00 GMT

Pinterest Engineering has enhanced its Manas search platform to manage vast data, improving efficiency in search and discovery functions. By applying Scalar and Product Quantization, memory usage decreased significantly while maintaining high recall rates. The platform utilizes SSDs for optimized performance, and it is transitioning to multi-vector models for refined relevance matching.

By Olimpiu Pop

AI-Assisted Discovery Helps Microsoft Patch More Than 1,000 Vulnerabilities in a Month

Sergio De Simone — Tue, 15 Sep 2026 17:00:00 GMT

With its latest September 2026 Patch, which addresses more than 950 vulnerabilities, Microsoft has patched about 2,750 vulnerabilities so far this year. While many attribute this surge to AI-assisted security research, organizations may struggle to keep pace and fully benefit from these advances, particularly when it comes to evaluating, prioritizing, and deploying patches.

By Sergio De Simone

Atlassian Automates Root Cause Analysis by Correlating Metrics, Logs and Traces

Craig Risi — Tue, 15 Sep 2026 12:00:00 GMT

Atlassian has outlined a new approach to automating root cause analysis for large-scale cloud-native incidents, using correlation across metrics, logs, distributed traces, and service topology to generate ranked hypotheses about where failures originate and how they propagate.

By Craig Risi

Presentation: Lead Without a Ladder: How I Climbed Into Engineering Leadership

Pauline Jepp — Tue, 15 Sep 2026 09:10:00 GMT

Pauline Jepp explains how systems thinking, rock climbing, and flocking behaviors apply to engineering leadership. She shares strategies for balancing team autonomy with alignment, supporting invisible work like mentorship, and navigating transitions from hands-on engineer to engineering leader while maintaining organizational trust and psychological safety.

By Pauline Jepp