may 25, 2026
6 links from the engineering internet.
linus torvalds plans to start rejecting pointless ai-generated pull requests
torvalds announced in the linux 7.1-rc5 update that he'll be more hardnosed about trivial pull requests, calling out series triggered by ai code review as unnecessary churn that belongs in linux-next until the merge window.
the register reviews openbsd 7.9: secure while linux wrestled critical cves
the review notes openbsd 7.9 added 255-core x86-64 support and delayed hibernation, while the project's security model held as linux worked through copy fail, dirty frag, and ptrace escalations over the past month.
california ab-1856 would exempt most linux distros from age verification law
a pending california bill adds a carve-out for open-source os providers, meaning mainstream linux distributions would not need to verify user age at device setup, though steam os would remain affected due to the bundled proprietary steam client.
lazarus group deploys remotepe, a memory-only rat targeting crypto and finance firms
fox-it details remotepe, a cross-platform rat that runs entirely in memory leaving no filesystem artifacts, uses environmental keying for evasion, and chains with dpapiloader and remotepeloader in multi-stage attacks on defi and financial targets.
ghost cms sql injection flaw hijacks 700+ sites in clickfix campaign
attackers exploited cve-2026-26980 in ghost cms to steal admin api keys and inject javascript showing fake cloudflare captchas, compromising 700+ sites including harvard, oxford, and duckduckgo across at least two competing threat clusters.
pope leo xiv publishes magnifica humanitas, the church's first encyclical on ai
the 245-paragraph document calls for human dignity to be protected in the age of ai and warns against an anti-human vision of technological progress; anthropic co-founder christopher olah was among speakers at its presentation in rome.