An engineer was targeted in September with a fake job interview assignment containing malware.
Why it mattersKeep interview code isolated from work devices and review which sensitive systems internal AI tools can access.
AI model hosting startup Fal raised $1.3 billion in a round led by Bessemer Venture Partners. Bloomberg reported that Fal’s valuation reached $16 billion, up from $8 billion in April.
Why it mattersBuilders choosing an inference provider should assess pricing sustainability, as high compute costs keep providers’ gross margins thin.
Apple is enabling Siri AI to act in third-party apps. Developers can build “app skills” that bundle multiple tasks into one action.
Why it mattersProduct developers can use app skills to make workflows involving several tasks accessible through a single Siri AI action.
Vercel CI now supports GitHub repositories without a linked Vercel project. Support is limited to private GitHub repositories.
Why it mattersBuilders can use Vercel CI for a private GitHub repository without creating an empty Vercel project just to connect it.
Eligible accounts signing in to GitHub Desktop 3.6.10 or later can receive short-lived tokens that refresh automatically. The gradual rollout covers github.com and GitHub Enterprise Cloud, excluding GitHub Enterprise Server. Upgrading preserves existing sessions but does not migrate their tokens automatically.
Why it mattersFor developers using GitHub Desktop, these tokens shorten the window for misuse if a token leaks while automatically handling renewal for API requests and Git operations.
Apple will require apps with dating or romantic relationship features to have an 18+ rating. Developers must add content descriptors starting November 16 so age ratings match their apps’ features. Apps must also disclose functionality that shares users’ real-world locations with others.
Why it mattersReview romantic AI interactions and location-sharing features before November 16 to update your App Store disclosures and age rating.
Cloudflare introduced Zero Wire, a public feed on Cloudflare Radar covering critical vulnerabilities. Its briefings explain vulnerabilities, identify who should investigate, and provide recommended actions and supporting links.
Why it mattersProduct engineers can use the briefings to identify which deployments need investigation and find vendor guidance for remediation.
Dependabot updates now work with projects using Python 3.15. Support is available to all github.com users and is coming to GitHub Enterprise Server 3.24.
Why it mattersTeams on github.com can upgrade their products to Python 3.15 while continuing to receive Dependabot updates.
October venture funding reached $59 billion, up 45% from a year earlier, largely driven by DeepSeek’s record $15.9 billion round. Seven companies attracted just over 40% of October’s venture funding.
Why it mattersFounders planning a raise should use comparable funding rounds to set expectations, since a few huge deals account for much of the headline total.
Managed Better Auth can now act as an OAuth 2.1 authorization server for other apps and MCP clients. OAuth provider settings are configured per branch, with each branch using its own issuer.
Why it mattersBuilders can reuse their app's authentication for companion apps and MCP servers, and test OAuth configuration in isolated branches before production.
Meituan’s LongCat 2.5 is available through AI Gateway for visual understanding, coding, and multi-step agent tool use. It accepts text and images and offers a 1M-token context window.
Why it mattersBuilders can use meituan/longcat-2.5 through AI Gateway for agents that need images, code, and extended task histories in context.
42AI has emerged from stealth with $62.5 million in seed funding to develop a model for predicting human decisions. Its claimed 98% accuracy in predicting market trades measures whether trading flows fall within a predicted range, rather than whether individual trades are correct.
Why it mattersBuilders considering this model for gaming, fraud prevention, or cybersecurity would need training on their domain’s rules and context before using it.
Trajectory raised $45 million in a Series A at a $300 million valuation, led by Sequoia. Its platform collects feedback from applications and uses it to retrain open source AI models for specialized tasks.
Why it mattersTeams building specialized AI products can evaluate Trajectory as a way for domain experts to guide model improvements without hiring an internal research team.
Vercel projects can now use vercel.toml with the same configuration properties as vercel.json, plus comments and a flatter structure. Projects must use just one configuration file.
Why it mattersYou can use TOML to document project settings with comments while retaining the configuration options available in vercel.json.
Vercel now checks for blocked npm packages before and during build dependency installation. The protections run automatically on new builds across all plans.
Why it mattersIf a blocked dependency fails your deployment, update it to a safe version, update the lockfile and redeploy.
