Hacker NewsThursday, February 12

CVE-2026-20841 is a high-severity remote code execution vulnerability in Windows Notepad App that allows unauthorized attackers to execute code over a network due to improper neutralization of special elements used in commands. The vulnerability affects Windows Notepad versions 11.0.0 before 11.2510 and has been published by Microsoft Corporation with a CVSS score of 8.8.

Claude Code version 2.1.20 replaced detailed file paths and search patterns with useless summary lines like "Read 3 files" and "Searched for 1 pattern." Users complained and requested the old behavior back or a toggle option, but Anthropic's response was to use verbose mode instead, which dumps excessive debug output. Despite multiple user complaints asking for a simple config flag, Anthropic continues modifying verbose mode rather than reverting the change, forcing users to pin to older versions.

Entire announced a $60 million seed round to build a new developer platform for AI agent collaboration. They launched an open-source CLI tool called Checkpoints that captures agent context and reasoning in Git commits, addressing the problem of lost context when AI agents generate code at scale.

On January 14, 2026, global telnet traffic dropped 65% in one hour due to apparent backbone filtering by a Tier 1 provider. Six days later, CVE-2026-24061 was disclosed - a critical telnet vulnerability allowing unauthenticated root access. The timing suggests advance notification may have prompted preemptive infrastructure-level filtering.

Caltech's Division of Physics, Mathematics and Astronomy presents an online edition of The Feynman Lectures on Physics by Feynman, Leighton, and Sands. This free digital version allows anyone with internet access to read high-quality copies of Feynman's legendary physics lectures, designed for easy reading on any device with scalable text, figures and equations.

Researchers built an automated scanning pipeline and discovered 287 Chrome extensions with 37.4 million total installations that secretly exfiltrate users' browsing history. The data is collected by companies like Similarweb and other data brokers who then sell it to corporations for profiling and targeted advertising, putting users at risk of corporate espionage and credential harvesting.

Rad-Therapy II is a port of Half-Life 2 to the Quake engine that supports deathmatch and other modes but is not playable from start to finish. It requires both hl2 and hl2dm directories to function and runs through FTE with the -halflife2 command. The project is open source under ISC License but requires original Valve assets.

Qwen-Image-2.0 is a new foundational image generation model that unifies image generation and editing capabilities. Key features include professional typography rendering with 1k-token instruction support for creating infographics and presentations, native 2K resolution for detailed realistic scenes, improved text rendering in multiple calligraphic styles, and a lighter architecture for faster inference. The model demonstrated superior performance in blind testing on AI Arena for both text-to-image and image-to-image tasks, successfully merging previous separate generation and editing tracks into one unified model.

GLM-5 is a new AI model with 744B parameters designed for complex systems engineering and long-term tasks. It significantly outperforms previous versions on reasoning, coding, and agent benchmarks, ranking #1 among open-source models on several tests. The model can generate office documents and is available through multiple platforms including Z.ai, with weights released under MIT license for local deployment.

The link provided appears to be for a FOSDEM 2026 conference presentation about the Fluorite game engine built with Flutter, but without access to the actual content of the page, I cannot provide a meaningful summary of what the presentation covers or its specific details.