Security8 MIN
Inside the npm supply-chain attack that shipped to 40,000 projects
A single compromised maintainer token, a post-install script, and eleven days before anyone noticed. Here is the full timeline.
2026-08-03
root notes — live feed
whoami
Breaches, patches and the infrastructure underneath — in five minutes.
tail -f headlines.log
Most news sites re-package yesterday's press releases. This one doesn't — every post is capped at five minutes, opens with what actually changed, and tells you why it matters before it tells you what happened.
Coverage
Latest analysis
Startups5 MIN
The seed round is getting harder — 2026 data from 900 deals
Median seed size is up, deal count is down 22%. What founders are actually being asked for at first meeting now.
2026-08-03
Gadgets7 MIN
ARM laptops finally beat x86 on battery and compile time
We benchmarked six 2026 machines on the same Rust build. The gap is no longer theoretical.
2026-08-02
World6 MIN
EU AI Act enforcement starts — the four rules that bite first
Transparency obligations are live. If you ship a model or a wrapper into the EU, these are the ones with real fines attached.
2026-08-01
Startups5 MIN
Self-hosting is having a moment — and the bills explain why
Three teams moved off managed cloud this year. Two saved money, one regretted it. The difference was not technical.
2026-07-31