Tech news, August 31, 2026
Monday: 21 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
9 pieces.
- Test Replay now redacts sensitive network data before upload
Test Replay automatically redacts sensitive values from captured network logs before that data reaches Cypress Cloud.
- Update on Security at METR
Please note that this post focuses on incidents where external actors attempted to gain unauthorized access to METR’s systems, not AI agents hacking in our evaluations.
- DSF member of the month - Benjamin Balder Bach
For August 2026, we welcome Benjamin Balder Bach as our DSF member of the month!
- Introducing the Gradle Security Subscription
The Gradle Security Subscription is available today.
- Remix 3 Release Candidate
Remix 3 RC is available now.
- CoreBreak proves agent guardrails need to live outside the agent
At Black Hat 2026, CoreBreak exposed the same structural flaw across AWS, Google, and Vercel.
- Announcing Istio 1.31.0
We are pleased to announce the release of Istio 1.31.
- Istio 1.31.0 Change Notes
Traffic Management Improved logging when a Gateway API CRD installed in the cluster is below the minimum version required by this Istio version.
- Program management in July–August 2026
It's been fun since the last update.
Security Desk
3 pieces.
- Tenable Joins White House-Led Project Watershed to Bolster U.S. Water Systems Cybersecurity
Tenable® Holdings, Inc.
- EncryptedSharedPreferences is Dead: Here’s What You Should Use Instead
Android application developers often store sensitive data to disk, relying on physical device security and process isolation to prevent attackers from obtaining that data.
- Password spraying campaign targets AWS root user accounts across 150+ organizations
Datadog Security Research observed a password spraying campaign attempting to authenticate as the AWS root user across more than 150 organizations.
Technical Guides
5 pieces.
- How to document your design system: best practices & tools
A developer’s view of design system documentation: what belongs in it, how to keep it in sync with code, and where each tool fits.
- Component testing: a practical guide for frontend developers
Learn how to test UI components in isolation with confidence.
- Extracting AI rules from an existing codebase
How Laravel Boost uses an agent skill to find existing project conventions and record the useful ones as scoped rules.
- Optimize EKS operations with agents: Reduce MTTR with AWS DevOps Agent and a Kubernetes Operator
Introduction Running workloads on Amazon Elastic Kubernetes Service (Amazon EKS) can involve managing failures like OOMKilled or IP exhaustion.
- 3 ways to optimize Firebase Remote Config fetch usage
Reduce network fetches, battery consumption and usage costs
Columns
3 pieces.
- Agency and Agents
From the Hugging Face Incident to Twilight Factories
- Agentic Skill Decay
Agents can finish the task without teaching you anything.
- Cancelation Terminology
A short note explaining the difference between synchronous cancelation, asynchronous cancelation, and graceful shutdown.
Research
1 piece.