Hey there, here's your monthly roundup of tech reads,
job offers, and community threads.
Programs must be written for people to read, and only
incidentally for machines to execute.
Harold Abelson
Something to read 📖
The OpenAI Attack That Hit Hugging Face — Full
Timeline
Simon Willison lays out, blow-by-blow, how an OpenAI
agent misconfiguration turned into an accidental
attack against Hugging Face infrastructure. It's less
a hack than a cautionary tale: an autonomous system
probing endpoints it was never meant to touch, with
nobody catching it until real damage was done. As
agentic tooling gets pushed into production
everywhere, this is the incident report everyone
building "autonomous" pipelines should read twice.
Shai-Hulud Strikes Again: npm Worm Hits keyv and
400+ Packages — JFrog Security Research
The self-propagating Shai-Hulud worm is back for a
third wave, riding a fake keyv 6.0 release to infect
400+ npm packages and harvest credentials from CI
systems, cloud providers, and password managers.
JFrog's advice: switch to npm v12, pnpm, or vlt, all
of which block install scripts by default. Supply-
chain security keeps losing to "just npm install it."
'Code Was Never the Hard Part' Is an Insult to All
Programmers — blog.senko.net
A sharp rebuttal to the popular AI-era talking point
that "writing code was always the easy part." The
author argues this rewrites history to flatter
chatbots, erasing decades of genuinely hard-won craft.
Blunt, a little angry, and exactly the pushback
that's been missing from the AI-productivity
discourse.
Amazon Cracks Down on 'CPU Waste' as Agentic AI
Crunch Intensifies — Tom's Hardware
AWS engineers say they're now waiting days instead of
hours to spin up their own EC2 instances, as internal
CPU capacity gets squeezed by agentic AI workloads.
Amazon disputes the "crackdown" framing, but the
story is stark: the company selling everyone else
elastic cloud capacity is rationing it internally.
The Window of Critique for AI Is Closing Fast —
Dr. Leon Furze
As AI matures, Furze argues, the chance to scrutinize
how it actually works keeps shrinking — just as
telecoms and electricity became "invisible" once
they worked reliably, better product design is
quietly hiding AI's inner mechanics behind
convenient interfaces. His call: stay fussy about the
technology for as long as possible.
Agentic Code Quality — Addy Osmani
Addy Osmani's case that code quality in the agentic
era isn't about the model — it's about the
constraints and guardrails teams put around it. A
pragmatic counterpoint to both AI-maximalist hype and
doom-and-gloom skepticism, aimed at teams actually
shipping agent-written code today.
Some job offers 🧐
|
bsport is looking for a
Senior Security Engineer (Hybrid, Barcelona)
|
Apply
|
|
The intelligent platform behind boutique
fitness and wellness studios — bsport
is the world's leading boutique fitness
management platform.
|
|
Parallel is looking for a
Senior AI Full Stack Engineer (Hybrid,
Barcelona)
|
Apply
|
|
Parallel is a no-code platform that
automates AML/KYC workflows and other
end-to-end legal processes. We work with
leaders in the legal, fintech and investment
sectors, helping them solve their regulatory
compliance challenges.
|
|
Check24 is looking for a
Senior PHP Developer (Hybrid, Madrid)
|
Apply
|
|
Somos el comparador de precios online más
grande de Alemania. Empresa digital con 20
años de experiencia en la comparación de más
de 70 categorías diferentes, desde seguros
hasta ofertas de viajes, y que cuenta con
más de 20 millones de clientes.
|
|
Orbio AI is looking for a
AI Governance Engineer (Hybrid, Madrid/Barcelona)
|
Apply
|
|
We're one of the fastest-growing AI-native
startups in Spain. We build AI workers
deployed across large enterprises worldwide,
transforming hiring, onboarding, and
employee experience at scale.
|
Seen on the net 🌐
|
cloudflare/computer
"Give your agent a computer." Cloudflare's
virtual filesystem inside a Durable Object,
giving AI agents pluggable execution surfaces —
containers, isolates, JS runtimes — to actually
do things, not just call APIs. 7.3k stars.
|
|
rivet-dev/rivet
Actor-based primitives for stateful workloads,
purpose-built for AI agents, collaborative
apps, and durable execution. Less flashy than
the agent-of-the-week repos, but solving a real
infrastructure gap. 5.5k stars.
|
|
pgrust
An independent Rust reimplementation of
PostgreSQL, wire- and SQL-compatible, passing
all 46,066 tests in Postgres' own regression
suite while claiming 18.5% faster performance
than ClickHouse. Not production-ready — 4.3k
stars and the most audacious "rewrite the
database" project in a while.
|
|
claude-code-security-review
A GitHub Action that runs Claude over your pull
request diffs for semantic security review —
SQL injection, hardcoded secrets, auth bugs —
instead of pattern-matching like traditional
SAST tools. 5.8k stars. AI reviewing AI-written
code might be the most 2026 sentence we'll
write all year.
|
|
Dokploy
Open-source, self-hosted alternative to Vercel,
Netlify, and Heroku for deploying apps and
databases. 36.5k stars and one of the
most-adopted "own your PaaS" projects as teams
get nervous about platform lock-in and surprise
bills.
|
|
authentik
"The authentication glue you need": a flexible,
self-hostable identity provider supporting
SAML, OAuth2/OIDC, LDAP, and RADIUS, scaling
from home labs to production clusters. 24.5k
stars and the default answer to "what's a good
self-hosted SSO."
|
Some events to attend 📍
DevNetwork [API + Cloud + AI] Hackathon
The nation's largest challenge-driven API +
Cloud + AI hackathon, open for remote
participation the full three weeks with an
in-person finale in Santa Clara. $40,500 in
prizes up for grabs.
Online + Santa Clara (Free entry)
|
17 Aug–3 Sep
More
|
TechBBQ 2026
Nordic tech and startup festival bringing
together founders, investors and engineers at
Copenhagen's Bella Center for two days of
talks and networking.
Copenhagen, Denmark
|
26–27 Aug
More
|
IFA 2026
One of the world's largest consumer tech and
innovation trade shows: five days of product
launches and hands-on demos from 1,900+
brands.
Berlin, Germany
|
4–8 Sep
More
|
European Microsoft Fabric + SQL Community
Conference
Europe's largest community conference for
Microsoft Fabric, SQL Server, Azure SQL and
Power BI, with 120+ sessions on data
engineering and AI-powered analytics.
Barcelona, Spain
|
28 Sep–1 Oct
More
|
Generative AI Communication for Technical
Professionals
Free live IEEE training on using generative
AI responsibly for engineering and technical
communication — prompt design, evaluating AI
output, and spotting hallucinations.
Online (Free)
|
30 Sep
More
|
Something to laugh (or not) 😂
We would love to know your feedback about this
newsletter. Help us filling this short 👉survey👈.
|
|
