Study finds AI coding agent setups mostly rely on context files, few use enforcing checks

Many teams adopting AI coding agents begin by writing AGENTS.md files that describe conventions, architecture, and test commands. A study of 2,853 software repositories found 90.6% contained such context files, while only 0.9 to 3.2% included hooks that run checks during an agent's editing process. The article argues that instructions alone cannot guarantee behaviour, since a context file may tell an agent to run tests without ensuring they actually run. It frames maturity around which feedback loops a team can close, such as a type checker blocking a faulty change and returning feedback. The piece is the fifteenth chapter of a series proposing a maturity model for AI-assisted development.

Uttarakhand chopper crash: State saw many crashes and close calls last year

Two Critical PHP Remote Code Execution Flaws Patched, Attacks Already Observed

On October 21, 2026, the PHP project released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which Amazon Threat Intelligence has named PHP2Shell. Both carry a CVSS v4.0 score of 9.2 and can be reached without authentication. The flaws are memory-safety bugs in PHP itself, one caused by memory exhaustion handling and the other by stale global state in persistent workers, so they affect any web-serving PHP setup such as PH-FPM, Apache mod_php and FrankenPHP. Older branches receive no upstream updates, though PHP published backports for 7.4, 8.0 and 8.1, and some distributions ship their own fixes with different version numbers. Amazon reported exploitation attempts on its honeypot network four days before disclosure and broader attempts afterward, and it remains unclear whether those attempts would succeed against real systems.

Penetration Testing Helps Websites Find Security Weaknesses Before Attackers Do

A website's login systems, databases, APIs, and input forms each carry potential security risks if not properly designed or maintained. Penetration testing, an authorised assessment, lets organisations see how an attacker might approach their site and uncover weaknesses in advance. Unlike a basic scan, it checks whether identified weaknesses can actually affect the application, with the aim of fixing risks rather than causing damage. Testers typically examine authentication, input validation, access controls, file uploads, and API data exposure. Regular testing is especially valuable when a website adds major features, changes infrastructure, or integrates external services.

UK Insurers Detected 51,700 Fraudulent Motor Claims Worth £576m in 2024

The Association of British Insurers reported that UK insurers caught 51,700 fraudulent motor claims worth £576m in 2024. Motor claims made up 53% of all detected fraudulent general insurance claims by number. Detected fraud across general insurance totalled £1.16bn over 98,400 claims, with exaggerated loss the most common type at £466m. These figures cover only frauds insurers identified, so the undetected share remains unknown. The article focuses on how the structure and history of claim documents such as repair estimates and police reports can signal whether a file was altered after issue.

CJI Surya Kant Says Bar Bodies Stopped Supreme Court From Reappointing Retired Judges

Chief Justice of India Surya Kant made the remarks while sitting on a bench that also included Justices Joymalya Bagchi and V Mohana. The bench was hearing a matter concerning the seniority of judicial officers in Rajasthan. According to the Chief Justice, objections raised by bar bodies had prevented the apex court from reappointing retired judges. The observations were recorded during the course of those proceedings.

ULA Secures Major NASA Contract as Vulcan Nears Return to Flight

United Launch Alliance had a strong week, highlighted by a significant new contract from NASA. The company's Vulcan rocket is reportedly approaching its return to flight. The source article is a weekly launch industry roundup that also covers other developments, including Cowboy Space and Themis. The available text provides limited detail beyond these two points. Further specifics about the contract value or the Vulcan schedule are not included in the excerpt.

Open-Source FastAPI Tool Scores Resumes Against Job Descriptions for ATS Filters

A developer has released a backend API that evaluates how well a resume aligns with a specific job description, addressing the common practice of automated screening by applicant tracking systems. The service parses uploaded PDF resumes, matches keywords against the job posting to produce a score, and offers tailored suggestions for improvement. It supports role-based access for job seekers and recruiters, and recruiters can submit batches of resumes that are processed in the background through a Celery and Redis queue. The stack uses FastAPI, MySQL, Docker Compose, and an automated GitHub Actions pipeline that deploys to AWS EC2. The author has asked the community whether a more accurate match score or more detailed improvement suggestions would be more valuable to users.

Kerala Man Attacks Wife With Iron Rod at Post Office, Then Dies by Suicide, Police Say

A man reportedly attacked his wife with an iron rod inside a post office in Kerala, according to police. The incident took place around 9:30 am as the woman, identified as Sreeja, arrived to open the office for the day. Following the assault, the man shot himself dead. The available details come from police, and the article provides no further information on the motive or the wife's condition.

Maine Data Center Backlash Emerges as Key Issue in Senate Race

Sen. Susan Collins, a Republican, was interrupted during a final midterm debate by an audience member who voiced fears that AI data centers are harming the climate and water supply. Collins responded by linking the critic to her Democratic challenger, Troy Jackson. The concerns reflect growing unease over the rapid expansion of resource-intensive data centers in Maine. Opposition to the facilities has become one of the most contentious issues in the state's campaigns just days before voters go to the polls. Maine also drew national attention in April over the controversy surrounding these projects.

New iOS App Shows Hours Lost to Scrolling on Instagram and TikTok

A new iOS app called Oh My Hours aims to help users cut back on screen time. It divides each day into hour-long blocks. It then displays which of those blocks were spent on apps like Instagram and TikTok. The approach is designed to make wasted time visible to users. The article describes the app's method but does not report further details on its results or reception.

Jemimah Rodrigues shares life update on anniversary of her famous World Cup knock against Australia

Jemimah Rodrigues marked the anniversary of her memorable World Cup innings against Australia with a personal update. The article notes that Rodrigues injured her hamstring on August 3 while playing for English franchise Southern Brave in The Hundred. The injury came during her stint in the competition, a tournament in which she has been featuring for the franchise. The report centres on her reflections and the update she chose to share publicly. Further details of the update are limited in the available text.

Anonymous family donates $50 million to expand access to lifesaving medicines

Up to 15 inches of snow forecast prompts weather alert in Alaska

Forecasters have projected as much as 15 inches of snowfall for parts of Alaska, prompting authorities to issue an alert. The forecast signals potentially hazardous travel and winter conditions across affected areas. Residents are being urged to prepare for the heavy accumulation. Officials are monitoring the storm's progress as it develops.

Anthropic hacked to deliver remote access trojan to Claude developer laptops

Article URL: https://doublepulsar.com/anthropic-hacked-to-deliver-remote-access-trojan-to-claude-developer-laptops-worldwide-1148a92baae2 Comments URL: https://news.ycombinator.com/item?id=50302187 Points: 17 # Comments: 3

PIL puts Saurav Das's roots under scrutiny

Glacial outburst in Bhutan: Chances of flooding reducing, Assam official says

Musk's Ties to Texas Republicans Run Deeper Than the Midterms, Report Says

As Election Day nears, scrutiny is falling on Elon Musk's long-standing relationships with Republican leaders in Texas. The article indicates these connections extend well beyond the current midterm campaign cycle. The source article provided is brief, so specific details about the individuals, dealings, or timelines involved are not available in this summary. The reporting frames the issue as one of ongoing political and personal ties rather than a single election-related episode.

Binance hacked: Will you lose your Bitcoins?

Punjab cop arrested after testing positive for drugs during anti-narcotics protest

A police officer named Sehajpreet Singh has been arrested in Mansa after testing positive for drug consumption. Residents found him in an unsteady state at ITI Chowk, which prompted them to protest against him. A dope test by police confirmed drug use, though no narcotics were recovered from his person. The episode has also stirred unrest in Budhlada, where accusations have been directed at local officials.