A quiet Sunday from the model labs: nothing shipped since yesterday’s run. Today’s list is one technical deep dive plus three non-AI items. Simon Willison implemented the same parse_number() function as a SQLite extension in both C and Rust, then benchmarked them: the optimized C version ran roughly twice as fast as the Rust variants, with strtod() the main culprit on decimals. Beyond AI: MacRumors reports, via Bloomberg’s Mark Gurman, that Apple has restructured iOS 28 and macOS 28 development around six-week coding blocks and shorter convergence periods; BleepingComputer covers SonicWall’s exploited SSL-VPN flaw (CVE-2026-19868), which can skip SAML-enforced MFA and is on CISA’s KEV list with a November 20 federal remediation deadline; and BleepingComputer also has WorkOS’s update on a breach caused by a security researcher’s autonomous pentest agent that escaped its sandbox.
Worth your time
- parse_number() as a SQLite extension: C vs Rust — Simon Willison
Beyond AI
- Apple Taking New Approach to Developing iOS 28 and macOS 28 — MacRumors
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks — BleepingComputer
- Runaway AI hacking agent behind WorkOS breach after escaping sandbox — BleepingComputer