# Morning Briefing

Tuesday, April 14, 2026
📰 Top Stories

## Someone bought 30 WordPress plugins and planted a backdoor in all of them

Hacker News (1062 pts, 301 comments)
A supply-chain attack where an attacker acquired 30 WordPress plugins and inserted backdoors across all of them. Major security implications for WordPress site owners—check your plugin list and update immediately.
securitywordpress

## GitHub Stacked PRs

Hacker News (799 pts, 434 comments)
GitHub's new stacked PR workflow for managing dependent changes. Could streamline review processes for complex refactors and feature branches that build on each other.
githubdev-tools

## Man suspected of Molotov attack on Sam Altman's home charged with attempted murder

The Register
The 20-year-old Texan accused of attacking Altman's San Francisco home now faces attempted murder charges. Also allegedly planned to kill everyone inside the OpenAI office building.
securityai

## Backblaze has stopped backing up your data

Hacker News (454 pts, 295 comments)
A personal account of Backblaze silently failing to back up data. Reminder to verify your backups actually work—restore tests matter more than backup status indicators.
backupsself-hosting

## Ransomware Is Growing Three Times Faster Than the Spending Meant to Stop It

Hacker News (56 pts, 45 comments)
Ciphercue analysis shows ransomware claims outpacing security spending by 3x in 2025. The economics of defense aren't keeping up with attack profitability.
securityransomware
💻 Tech

## Android now stops you sharing your location in photos

Hacker News (403 pts, 309 comments)
Android's new privacy feature strips location metadata from photos before sharing. Long overdue—iOS has had this for years.
privacyandroid

## A new spam policy for "back button hijacking"

Hacker News (561 pts, 332 comments)
Google Search is cracking down on sites that hijack the browser back button. Article: <https://developers.google.com/search/blog/2026/04/back-button-hijacking>
webseo

## Microsoft raises UK Surface prices as RAM crisis reaches the checkout

The Register
Entry-level Surface models jump by up to £220 as memory costs surge. Similar hikes hitting US markets—RAM shortage impacting hardware pricing across the board.
hardwaremicrosoft

## Cloudflare revamps CLI as agents take over the internet

The Register
Wrangler CLI getting rebuilt with commands for products lacking CLI support. AI agents are a driving factor—CLI-first interfaces matter for automation.
dev-toolscloudflare

## Microsoft sends Outlook Lite to the great inbox in the sky

The Register
Outlook Lite retirement completes May 25. Mailbox access in the stripped-down Android app ends—time to migrate to full Outlook or alternative clients.
microsoftemail
🌍 Wider Lens

## Fuel protests have Ireland's government facing possible no-confidence vote

NPR News
Ireland's PM announced tax cuts to end crisis sparked by US-Israel war on Iran closing Strait of Hormuz. Government could fall over handling of fuel protests.
politicsinternational

## Virginia joins a national effort to ensure only popular vote winners become president

NPR News
National Popular Vote Compact now enacted in states worth 222 electoral votes. Needs 270 to take effect—getting closer to bypassing Electoral College.
politicsus

## Israel and Lebanon set to meet for first direct talks in more than 30 years

NPR News
Tuesday's meeting described as "preparatory," aimed at laying framework for future negotiations. Historic diplomatic opening after decades of no direct contact.
internationaldiplomacy
🔥 HN Deep Reads

## Lean proved this program correct; then I found a bug

Hacker News (310 pts, 145 comments)
Fascinating case study in formal verification limits—Lean proved correctness, but a bug slipped through. Discussion explores what "correct" actually means. Article: <https://kirancodes.me/posts/log-who-watches-the-watchers.html>
formal-methodsverification

## What is jj and why should I care?

Hacker News (236 pts, 144 comments)
Jujutsu (jj) version control explained. Discussion covers why it matters for stacked changes and conflict resolution. Article: <https://steveklabnik.github.io/jujutsu-tutorial/introduction/what-is-jj-and-why-should-i-care.html>
gitversion-control

## Design and implementation of DuckDB internals

Hacker News (157 pts, 11 comments)
Deep dive into DuckDB's architecture. Great for understanding embedded OLAP database design. Article: <https://duckdb.org/library/design-and-implementation-of-duckdb-internals/>
databaseduckdb
🎮 Gaming

## WiiFin – Jellyfin Client for Nintendo Wii

Hacker News (202 pts, 91 comments)
Jellyfin client for Nintendo Wii. Beautiful retro hardware meets modern self-hosted streaming. Article: <https://github.com/fabienmillet/WiiFin>
retrojellyfinnintendo

## Just Moments After Declaring Himself 'Cooked,' Speedrunner Breaks Major Mario 64 World Record

Kotaku
Speedrunner thought the run was ruined, then immediately set a new world record. Classic Mario 64 speedrunning drama.
speedrunnintendo

## Pokémon Player Stripped Of His Win For Celebrating Too Much

Kotaku
Tournament winner had title revoked for "unsportsmanlike" celebration. Player calls ruling a "clear mistake." Esports conduct debates continue.
pokemonesports
⚖️ Bias Check

## IBM becomes first company to pay up under Trump administration's diversity blitz

The Register
IBM settled for $17M under Civil Rights Fraud Initiative without admitting liability. Still fighting age discrimination cases. Center outlet focuses on legal mechanics; left outlets frame as DEI rollback; right outlets emphasize government overreach.
policydei

## The votes are in: AI will hurt elections and relationships

The Register
Stanford HAI report finds unsafe AI usage practices, widespread anxiety about impacts, China catching up to USA. Center coverage emphasizes data; left outlets highlight societal risks; right outlets question methodology and alarmism.
aipolicy