
Microsoft AI scanner finds long-lived Rust standard library bugs
Two issues affect stable Rust, including a possible freed-memory access; Microsoft calls practical exploitation unlikely.
64 stories, newest first · one card per story

Two issues affect stable Rust, including a possible freed-memory access; Microsoft calls practical exploitation unlikely.
In a matched 100-update run, device-resident bootstrapping cut training from 14,268.295 to 293.075 seconds with equal decoded parameters.
GPUI and egui frameworks are unsuitable defaults for complex desktop applications due to inefficient incremental state updates.

Free Rust and WebGPU SketchUp alternative for woodworking.
The author prompts Claude to explore building a custom SQLite function that parses strings like '-$1,234.56' into numbers, comparing C and Rust implementations on performance and code size.

ZKeys stores half of each encryption passphrase off-site and requires periodic keepalive messages to keep keys unlocked.
A new Rust-based WhatsApp client using egui GUI framework launched on GitHub.

New Rust client opens faster and consumes far less memory than the Electron version.
New Rust-based UI framework Rune enables native GPU rendering for macOS, Windows, Linux and web.
Octomind is an open-source AI tool discussed on Hacker News with 40 points and 32 comments.
OmniDiff is a super fast content-aware Git difftool written in Rust and open sourced.

Enterprise Cloud customers can enforce malware advisories, severity, attestations, new install scripts and a package-age cooldown.
On a stratified Aegis sample of 2,000 statements, it proves 1,054 within a 30-minute budget.
Grid'5000 runs show message complexity poorly predicts latency and that recovery can dominate optimistic paths.
The Hacker News post shows 45 points and five comments; the snippet gives no release or security details.
The author ties the shift to 2017 Cloudbleed and says a November 18, 2025 outage came from unwrap on bad config.
An Alpine edge SBOM check found 29 community and 41 testing packages potentially affected.

The cooldown stays off by default, is only in beta, and will not drop versions already pinned in Cargo.lock.

Teams must set a minimum publish age; the default stays zero, so upgrading Rust alone changes nothing.
The pre-alpha gateway, under MIT or Apache-2.0, lets teams add providers and features without changing a small core.

A Nim loader and PowerShell UAC bypass try to plant the payload as Edge’s dbghelp.dll.
Linux 7.2 was the kernel's second-busiest release, while bugs fixed per release more than doubled since April 2026.
A mistyped phone prompt still led Ultracode to coordinate subagents toward a Rust extension called sparqlite.

Darktrace reports CikaBika, a Rust RAT using Discord for C2, delivered by phishing PDFs and LNK loaders.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views