SaaS, herramientas digitales y desarrollo.
Hours after WordPress released patches for two critical vulnerabilities, attackers began mass-exploiting them. The chain of flaws allows unauthenticated remote code execution (RCE), affecting sites running WordPress 6.9 and 6.8. Tens of thousands of exploitation attempts and hundreds of fraudulent admin accounts have been observed.
Cloudflare has deployed emergency rules in its WAF to protect all customers — including free users — against two critical WordPress vulnerabilities: an SQL injection (CVE-2026-60137) and an unauthenticated remote code execution (CVE-2026-63030). The rules are active but do not replace updating to patched versions.
Vercel has announced an optimization to its CDN that allows reusing immutable static files across deployments, reducing requests, bytes transferred, and improving overall load time. This improvement, available automatically for compatible frameworks, represents a significant advance in web deployment efficiency.
Beehiiv has unveiled two new features: an AI Copilot that helps publishers grow and analyze audiences, and a subscriber chat system. These tools aim to transform newsletters into interactive communities, marking a before and after in the industry.
1Password has launched an integration with Claude that allows the AI assistant to log into websites using the user's passwords without the model seeing them. The feature, first available on Mac, promises greater security by delegating repetitive tasks, but experts warn about residual risks once authenticated.
The mantra 'SaaS is dead' echoes through the tech ecosystem, but data shows a more nuanced reality. The market is repricing software, shifting value from tools that help a human work to software that does the work itself. In 2026, traditional SaaS faces its biggest transformation since the cloud.
The RPCS3 emulator has made 75% of PlayStation 3 games playable on PC, a crucial advance for preserving the PS3 library ahead of the PlayStation Store closure. This technical and community achievement contrasts with Sony's and some developers' stance on emulation.
Microsoft fixed a vulnerability in Secure Boot that had been active for over a decade. ESET researchers discovered that eleven old bootloaders were still considered trusted, allowing attackers to execute malicious code before the operating system loaded. The update revokes those certificates, closing a critical gap.
A coordinated attack compromised multiple AsyncAPI npm packages, allowing attackers to inject malicious code into the software supply chain. The incident underscores the fragility of open-source dependencies and the need for stricter security measures.
Microsoft has released TypeScript 7.0, a complete rewrite of the compiler in Go that multiplies performance by up to 12 times. This change enables multithreaded processing with shared memory, drastically reducing compilation times and transforming the developer experience.
An ESET investigation reveals that Secure Boot, Microsoft's standard for protecting Windows and Linux boot processes, has been vulnerable for 13 of its 14 years of existence. Eleven defective shims (boot images), signed by Microsoft and never revoked, allow attackers to install persistent malicious firmware.
The FTC and five US states reached an agreement with John Deere that forces the manufacturer to share the software and tools necessary for independent repairs. It is the biggest victory of the 'right to repair' movement in the country and sets a precedent against software lock-in in agricultural machinery.