KnowBite KnowBite

Engineering Leadership

Engineering Leadership knowledge cards on KnowBite — curated from specialist publications, updated throughout the day.

  1. PHP Patches Two Critical RCE Flaws That Were Already Under Attack

    PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code execution. Amazon recorded an exploitation attempt four days before the patches shipped, and operators spent the day working out whether they ran PHP, where to get the package, and how to tell it had landed. By Steef-Jan Wiggers

    InfoQ · 2026-10-25T18:07:00Z

  3. PyTorch Conference 2026: Google and Meta Open-Source TorchTPU for Native PyTorch on TPUs

    Google and Meta open-sourced TorchTPU, a native PyTorch backend for Google's TPUs, at PyTorch Conference North America 2026, and Meta said it plans to move larger LLM workloads onto TPUs with it. AWS released TorchNeuron for Trainium the same week, while developers questioned TPU availability and where vendor lock-in now sits. By Andrew Hoblitzell

    InfoQ · 2026-10-25T18:00:00Z

  5. Google ML Drift Accelerates On-Device AI Inference Across Diverse GPUs

    Google has released ML Drift, an open-source, cross-platform GPU compute engine designed for on-device AI and machine learning inference. Licensed under Apache 2.0, it abstracts the complexities of different GPU hardware and low-level APIs, supporting OpenGL ES, OpenCL, Metal, and WebGPU. By Sergio De Simone

    InfoQ · 2026-10-25T17:00:00Z

  7. PingCAP Breach Exposes Customer Records and Source Code

    PingCAP recently confirmed unauthorized access to its internal systems and the theft of source code and customer-related data. The attacker, cyber extortion group FulcrumSec, claimed to have stolen 10.6 TB of data, including TiDB Cloud control-plane records, customer SQL statements, API keys, connection logs, billing information, internal documents, and 413 private source-code repositories. By Renato Losio

    InfoQ · 2026-10-25T06:27:00Z

  10. Long live the engineering manager

    Org charts flatten. Dependencies don’t. The post Long live the engineering manager appeared first on LeadDev .

    LeadDev · 2026-10-19T07:27:42Z

  11. Google’s Data Agent Kit Hits GA, Splitting Agent Guardrails Between Skills and IAM

    Google has made Data Agent Kit generally available, a free set of MCP tools and 37 open-source skills that connect coding agents to more than fifteen Google Data Cloud services. Two kinds of guardrail ship with it, and practitioners need to tell them apart: one is a skill asking the agent to stop, the other an IAM deny policy that refuses the call. By Steef-Jan Wiggers

    InfoQ · 2026-10-24T08:34:00Z

  13. Cloudflare Reclaims 100 TB of RAM by Optimizing Consistent Hashing

    Cloudflare recently documented how it reduced the memory footprint of its internal load-balancing service by more than 100 TB by optimizing the Rust implementation of consistent hashing in pingora-ketama. The changes compacted hash-ring entries and used statistical analysis of hash distribution and collision rates to reduce the number of hashes per backend by about 90%. By Renato Losio

    InfoQ · 2026-10-24T08:10:00Z

  15. CSIRO Uses Serverless Architecture to Query 100x More Genomic Variants on AWS

    CSIRO has developed Serverless Beacon, a serverless architecture for querying genomic variants without copying VCF files into a central database. The system combines Amazon S3, Lambda, Athena and DynamoDB, using metadata indexes and HTTP byte range requests to query compressed genomic regions. Tests reported 1.52 second average latency for 10,000 base pair queries. By Leela Kumili

    InfoQ · 2026-10-23T14:30:00Z

  17. AWS Introduces Lambda Web Functions for Node.js Applications

    AWS recently introduced Lambda Web Functions, allowing developers to run Node.js web applications using frameworks such as Express and Hono directly on Lambda, with support for concurrent requests and response streaming. By Renato Losio

    InfoQ · 2026-10-23T12:49:00Z

  18. Your tests can’t catch a poisoned model

    The AI security threat engineering leaders aren’t talking about. The post Your tests can’t catch a poisoned model appeared first on LeadDev .

    LeadDev · 2026-10-13T07:21:26Z

  21. Presentation: Move Fast, Don’t Break Trust: Shipping Constantly with Humans and Beyond

    Suhail Patel discusses how Monzo structures its software engineering organization and technical stack to ship safely hundreds of times a day. He shares insights into opinionated microservice abstractions, tenancy-based staging, static analysis checks, continuous profiling, demonstrating how a strong internal platform enables engineers and LLMs to iterate rapidly without sacrificing reliability. By Suhail Patel

    InfoQ · 2026-10-23T11:00:00Z

  23. Article: Multi-Cloud FinOps: An Engineering Framework for Cross-Cloud Cost Optimization

    Multi-cloud flexibility comes with hidden egress costs driven by service placement and communication patterns. This article applies Backend FinOps to cross-cloud architecture, covering cost visibility through FOCUS, workload placement, synchronization models, and CI/CD-integrated cost governance. A controlled experiment shows architecture changes saved far more than rate negotiation alone. By Vivek Arora

    InfoQ · 2026-10-23T11:00:00Z

  25. Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects

    AI company Anthropic has launched OSS Scanner, a free, opt-in service to find vulnerabilities in open-source projects. Enrolled maintainers receive periodic security reports generated by the company's strongest models, including Claude Mythos. The reports are sent without human review, and project maintainers can choose to validate their findings and decide which proposed fixes to accept. By Matt Saunders

    InfoQ · 2026-10-23T09:00:00Z

  27. NgRx 22: Resource Extensions and Dynamic Deep Signals for Angular

    NgRx 22 adds experimental resource extensions that change Angular's resource behavior, so value() is retained during reloads and no longer throws on errors. It also introduces dynamic deep signals for union types, a SignalStoreFeatureType utility, and ESLint v10 support. Upgrading requires Angular 22 and TypeScript 6.0, and most breaking changes have automated migrations. By Daniel Curtis

    InfoQ · 2026-10-23T08:08:00Z

  29. Study Finds AI-generated Code Fails to Boost Productivity Due to Downstream Bottlenecks

    A recent Harvard study of 718 firms, using the Jellyfish analytics platform, finds that although AI coding assistants and agents increase code volume, this does not translate into a corresponding increase in completed work, partly because AI-generated code increases the workload in later stages of development, particularly code review. By Sergio De Simone

    InfoQ · 2026-10-22T14:00:00Z

  31. Presentation: Actors for Agents: Patterns for Production AI

    Manju Rajashekhar explains how the actor model solves the complex runtime challenges of production AI agents. By treating agents as distributed systems, he discusses state ownership, message passing, write-through state, and supervision boundaries to manage failures, continuations, and mutable execution graphs, moving agentic workflows beyond fragile demos to resilient architecture. By Manju Rajashekhar

    InfoQ · 2026-10-22T11:00:00Z

  33. Vercel Labs Open-Sources fx: A Zig Coding Agent Designed to Be Embedded

    Vercel Labs has released fx, an experimental open-source coding agent written in Zig. It runs as a CLI, a script component, or an embedded library, including a WebAssembly build. Early feedback questioned its model-agnostic claim and a name conflict with an existing tool. Vercel says the project is pre-1.0 and changing quickly. By Daniel Curtis

    InfoQ · 2026-10-22T09:33:00Z

  37. Article: AI Changes the Data Interface, Not the Query Engine

    This article presents a disaster-recovery analytics workflow in which an AI agent generates constrained SQL or Python, DuckDB computes reproducible facts from Parquet, and the agent interprets the results. It explains the determinism split, replayable analysis, and four signals for deciding when an embedded engine is sufficient or a managed lakehouse is justified. By Peihao Yuan

    InfoQ · 2026-10-22T09:00:00Z

  39. Developer Behind the AI-Built Adobe Clones Says They Are “Not Anywhere Close to Ready

    A developer used Claude Opus 5.5 to build open-source replacements for seven Adobe applications, promoted them across Reddit with a projection of roughly 100% parity within a month, then told Hacker News the project was not anywhere close to ready. Its own roadmap puts it at 45% ready for real work and 2,300 to 4,100 agent-hours from full parity. By Steef-Jan Wiggers

    InfoQ · 2026-10-22T07:41:00Z