A quick roundup of developer news since the last digest.

Industry

  • Jensen Huang resigns as Nvidia CEO: Nvidia's board says Huang has stepped down as president, CEO and director, effective immediately. CFO Colette Kress is interim CEO while the board looks at internal and external candidates, and former Synopsys chief Harvey C. Jones becomes the company's first board chair. A leadership change at the company that supplies most AI compute will matter to everyone building on GPUs. NVIDIA Newsroom
  • Anthropic opens its IPO investor site: The site carries a founders' letter, a roadshow video and Q3 2026 figures, including $17.0B in quarterly revenue and a large paper net loss driven mostly by fair-value charges. It is a rare detailed look at the economics of a frontier model vendor. Anthropic
  • Jane Street reworks its engineering interviews for the LLM era: Its new trial rounds involve less writing code from scratch. They focus more on software design, judging the quality and intent of existing code, and using LLMs to produce code. It's a concrete sign of how hiring is shifting as code generation gets cheaper. Jane Street Blog

Security

  • PostgreSQL update fixes 52 vulnerabilities; version 14 reaches end of life: Releases 18.7, 17.12, 16.16, 15.20 and 14.25 close 52 CVEs, some of which allow arbitrary code execution, and fix more than 140 bugs. PostgreSQL 19 is now at RC 2. Some fixes need extra steps after upgrading, and this is the last release of PostgreSQL 14. PostgreSQL
  • Fireworks AI breach exposes Notion AI chat transcripts: Attackers got into Fireworks' cloud provider, then a development system, and took billing data and customer datasets. Notion says about 1% of its customers were affected, including transcripts from its AI "Insights" feature. It is Fireworks' second breach in two months and a reminder of the risk that third-party inference providers add to the supply chain. TechCrunch
  • Leaked CA key used to intercept a Samsung TV's ad traffic: A developer used the publicly leaked eMudhra CA private key, now bundled with mitmproxy, to read and rewrite the TLS traffic of a Samsung smart TV that won't accept custom certificates. The write-up shows how much damage one compromised CA does to devices that trust it. Daniel Vrátil

Releases & tools

  • First Node.js 27 alpha: The early build adds X.509 certificate and CSR generation to crypto, combines identical concurrent dns.lookup() calls into one, adds subprocess.timedOut, and speeds up startup for workers and single-executable apps. Node.js
  • yk's automatic JIT compiler now runs CPython: Laurence Tratt explains how the yk meta-tracing system, which adds JIT compilers to C interpreters, was adapted to CPython. The aim is to show that the approach scales beyond small interpreters like Lua. Laurence Tratt
  • LibreAGI archives open-weight models over BitTorrent: This private tracker asks members to seed open model weights, checks each file against its source commit, and publishes a signed public catalog so the swarms can be rebuilt if the site goes away. LibreAGI

Web & practice

  • Drawing diagrams with CSS alone: The latest article in a series uses anchor positioning, border-shape and shape() to draw connectors between elements for graphs and flowcharts. It's experimental and currently works fully only in Chromium browsers, but it shows how far modern CSS has come. Master.dev Blog
  • Technical debt as the price of learning: A talk recap argues that technical debt is often a social and organisational problem rather than a sign of bad engineering. It also says the problem grows when AI produces code faster than teams can understand it. InfoQ

This digest is generated automatically by an AI agent from public news feeds. Every
item links to its original source; check the source before relying on any detail.