Vercel adds Geist Serif, a display face in the Geist family
The first release is Regular only, with 894 glyphs, four dot shapes, and a variable font planned from Thin to Black.
4
Vendor
Vercel
- Mentions · 7d1
- Mentions · 30d11
- All mentions25
- First seenAug 26, 2026
- Last mentioned15h ago
Timeline
25 articles · newest firstVercel open-sources durable-harness for coding agents
The captured page is only a cookie banner, so how durable-harness works is not stated.
22
tsc-ts: TypeScript written in TypeScript
Vercel Labs published tsc-ts, a TypeScript compiler written in TypeScript.
6
Jev is Vercel’s fastest-adopted AI model ever
Vercel says Typesafe AI’s Jev reached 35% of paid teams in two weeks, its fastest model adoption.
48
Critical Next.js Vulnerabilities Allow Hackers to Execute Malicious Code Remotely
Next.js patches two unauthenticated remote-code-execution flaws and a denial-of-service bug in 15.5.28 and 16.4.1.
76
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js 16.4.1 and 15.5.28 patch two critical unauthenticated RCE bugs and a Server Actions denial of service.
74
Critical Next.js SVG Image Processing Vulnerability Could Enable Remote Code Execution
Vercel patched unauthenticated Next.js remote code execution in SVG image optimization, with no active exploitation reported.
82
Security researcher claims to they found KVM guest-host escape flaw
Researcher claims a KVM guest-to-host escape zero-day; Vercel confirmed it, but no details are public.
72
Decision AI Models Explained: TypeSafe Jev vs Fastino GLiDE, GLiNER2.5-Decide and Open-Source Competitors
TypeSafe's Jev and rivals return calibrated choices and scores instead of text, at much lower cost and latency.
48
I got targeted: Trying to get your credentials via a git post-checkout hook
A fake client shared a Dropbox git repo whose post-checkout hook fetched and executed a remote binary.
51
Next.js ImageResponse Vulnerability Lets Remote Attackers Execute Code Through SVG Content
Unauthenticated attackers can execute code on Next.js 16.2.0–16.3.5 servers via crafted SVG in ImageResponse.
76
Threat Actors Use Google Ads To Target Ledger Users
Attackers used malicious Google ads to phish Ledger users for cryptocurrency recovery phrases.
71
Opus 5.5 is good at explainer videos
Launchvideo uses Claude Opus 5.5 in a serverless agent to render explainer MP4s from a URL or prompt.
26
HEIF Heist
Hacktron's HEIF Heist research reveals RCE and heap-leak vulnerabilities in libheif/libde265 HEIF/AVIF decoders, affecting Meta, OpenAI, GitHub Enterprise, Discourse, and Next.js.
82
TypeSafe AI Releases Jev: A System One Model That Returns Typed, Calibrated Decisions Instead of Text
TypeSafe AI launched Jev, a transformer-based 'System One' model API returning typed, calibrated decisions with probabilities, claiming 193x faster and 445x cheaper than LLMs.
48
[AINews] Here are 6 Clones of Jev in 2 days
Jev's non-generative decision model launch drew 36M views and six open clones in two days, positioning discriminative models as fast complements to LLMs.
50
A new kind of AI model from a ChatGPT inventor is thrilling developers
TypeSafe AI, founded by ex-OpenAI RLHF inventor Diogo Almeida, released Jev, a non-LLM transformer outputting calibrated probabilities for cheap software automation.
58
OpenAI's new Agents API gives developers the infrastructure behind Codex and ChatGPT
OpenAI released its Agents API in public beta, exposing the infrastructure behind Codex and ChatGPT for building long-running cloud agents.
70
Introducing the Agents API
OpenAI launched the Agents API in public beta, exposing the Codex agent harness, managed sandboxes, and multi-agent orchestration to developers.
73
Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists
Next.js 16.4.0-canary.13 Image Optimizer retains a DNS rebinding TOCTOU SSRF in fetchExternalImage() allowing requests to private network resources.
30
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors exploit CVE-2026-82329, a default-config authentication bypass in JFrog Artifactory, to mint administrator tokens days after patch release.
80
PRs NOT Welcome: How Top AI Open Source Projects Are Managing Thousands of Contributors
Top AI open source projects like Vercel, Astro, Flue, and tldraw are restricting external PRs and using agent-based software factories to triage, fix, and review contributions.
32
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel patches two critical Next.js unauthenticated RCE flaws: a libheif AVIF heap overflow (CVSS 9.5) and a Windows path traversal (CVE-2026-75604).
68
Lovable CTO: The Future of SaaS Is Apps That Agents Can Use
Lovable pivots from app building to exposing app functions as agent-callable capabilities via hosted MCP servers, raising a $400M Series C at a $13.3B valuation.
55
US Finance Under Phishing Pressure: What the SOC Data Reveals?
ANY.RUN SOC telemetry shows escalating phishing campaigns against US finance, including Vercel-hosted RMM attacks abusing legitimate services.
42
Related CVEs
by mentions- CVE-2026-96889<1%7.8Use-After-Free in librsvg SVG Parsing via Nested XIncludes and Duplicate Entities
- CVE-2026-8232914%9.8Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
- CVE-2026-756042%9.0Unauthenticated RCE in Next.js on Windows-hosted servers
- CVE-2026-19118<1%7.7Race Condition RCE in GitHub Enterprise Server
Appears with
- Vercelorganization · 11
- Next.jsproduct · 7
- Jevai model · 5
- OpenAIvendor · 5
- sharpproduct · 4
- Jevproduct · 3
- Typesafe AIorganization · 3
- Typesafe AIvendor · 3
- Cloudflarevendor · 3
- Codexai model · 2
- ChatGPTproduct · 2
- Hacktronorganization · 2
- libheifproduct · 2
- OpenAIorganization · 2
- Anthropicvendor · 2
- Agents APIproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.