Morning Briefing

A supply-chain attack where an attacker acquired 30 WordPress plugins and inserted backdoors across all of them. Major security implications for WordPress site owners—check your plugin list and update immediately.

GitHub's new stacked PR workflow for managing dependent changes. Could streamline review processes for complex refactors and feature branches that build on each other.

The 20-year-old Texan accused of attacking Altman's San Francisco home now faces attempted murder charges. Also allegedly planned to kill everyone inside the OpenAI office building.

A personal account of Backblaze silently failing to back up data. Reminder to verify your backups actually work—restore tests matter more than backup status indicators.

Ciphercue analysis shows ransomware claims outpacing security spending by 3x in 2025. The economics of defense aren't keeping up with attack profitability.

Android's new privacy feature strips location metadata from photos before sharing. Long overdue—iOS has had this for years.

Google Search is cracking down on sites that hijack the browser back button. Article:

Entry-level Surface models jump by up to £220 as memory costs surge. Similar hikes hitting US markets—RAM shortage impacting hardware pricing across the board.

Wrangler CLI getting rebuilt with commands for products lacking CLI support. AI agents are a driving factor—CLI-first interfaces matter for automation.

Outlook Lite retirement completes May 25. Mailbox access in the stripped-down Android app ends—time to migrate to full Outlook or alternative clients.

Ireland's PM announced tax cuts to end crisis sparked by US-Israel war on Iran closing Strait of Hormuz. Government could fall over handling of fuel protests.

National Popular Vote Compact now enacted in states worth 222 electoral votes. Needs 270 to take effect—getting closer to bypassing Electoral College.

Tuesday's meeting described as "preparatory," aimed at laying framework for future negotiations. Historic diplomatic opening after decades of no direct contact.

Fascinating case study in formal verification limits—Lean proved correctness, but a bug slipped through. Discussion explores what "correct" actually means. Article:

Jujutsu (jj) version control explained. Discussion covers why it matters for stacked changes and conflict resolution. Article:

Deep dive into DuckDB's architecture. Great for understanding embedded OLAP database design. Article:

Jellyfin client for Nintendo Wii. Beautiful retro hardware meets modern self-hosted streaming. Article:

Speedrunner thought the run was ruined, then immediately set a new world record. Classic Mario 64 speedrunning drama.

Tournament winner had title revoked for "unsportsmanlike" celebration. Player calls ruling a "clear mistake." Esports conduct debates continue.

IBM settled for $17M under Civil Rights Fraud Initiative without admitting liability. Still fighting age discrimination cases. Center outlet focuses on legal mechanics; left outlets frame as DEI rollback; right outlets emphasize government overreach.

Stanford HAI report finds unsafe AI usage practices, widespread anxiety about impacts, China catching up to USA. Center coverage emphasizes data; left outlets highlight societal risks; right outlets question methodology and alarmism.