Tech news picked on 2026-11-13
- A high school 3 student published an article with the answers used to apply to Security Camp 2026, a Japanese program for training security talent. The author says they completed the Product Security class and wrote the answers on May 11.
- The supply chain attack question covers a case where an npm package maintainer account and token were compromised and malicious code was mixed into a legitimate package. It explains how credentials are stolen from infected environments and spread to other packages.
- As countermeasures, the author proposes code review for workflow changes, read-only permissions by default, pinning to commit hashes, and using short-lived tokens (OIDC). The author also wrote that response procedures for a breach should be set in advance.
- When the author converted the Dockerfile of a Go app to a multi-stage build (a method of separating the build image from the runtime image), Trivy scan alerts went from 50 to 14. The author said the remaining alerts should still be prioritized by checking factors such as whether they are used at runtime.
- This AI model predicts how gene activity changes inside a specific cell, such as a heart muscle cell or an immune cell, when a single DNA letter changes. Earlier models stayed at the level of tissue averages.
- According to DeepMind, it finds nearly twice as many variants that alter gene expression within cells as the previous best model. In the dataset TenK10K of 28 immune cell types, the hit rate for causal variants was 30%, higher than 16% for existing tools, the company said.
- The model takes the cell type or state as a condition together with the DNA sequence. DeepMind explained that by uploading only single-cell RNA data from a few dozen cells, it can be applied to new cell states without retraining.
- For non-commercial research, it can be used right away through the AlphaGenome API, and for commercial research it is offered as a private preview. The paper and the API are public.