Skip to content
Today
Sign in

language

Rust

Rust is a systems programming language emphasizing memory safety and performance without a garbage collector, used in OS, browsers, and security software.

Sign in to follow

Known aliases

  • rust-lang
  • Rust language
  • Rust project

Relationships

No evidence-backed relationships are recorded.

Current stories

build1 publisherOne report

Burn 0.22.0 strips backend generics from user code to cut recompile time 6.2x

Burn 0.22.0 takes backend generics out of user code, with a benchmark showing model edits recompiling 6.2x faster than in version 0.21. Its API now sits near the planned 1.0 form, so this is the release Rust ML teams should port to and test.

Publishers:dev.to

Reality

Evidence40
Adoption
Insufficient
Hype gap+25
Incentives
Insufficient
Confidence45
security9 publishersConfirmed

Google gives vetted defenders a Gemini 4 Argon build without cyber guardrails

Google will give vetted defenders and its own teams a Gemini 4 Argon build with no cyber guardrails, saying the model finds and patches critical flaws unaided. Wiz is the first named outside user, and the bug-finding evidence published so far comes from Google's own internal tests.

Publishers:blockchain.newsdeepmind.googlehelpnetsecurity.comhindustantimes.comscworld.comsecurityaffairs.comsecurityweek.comthecyberexpress.comthehackernews.com

Perspective Coverage

9 publishers
Builder
Builder 39%
Operator
Operator 39%
Investor
Investor 22%

Reality

Evidence50
Adoption25
Hype gap+35
Incentives75
Confidence60
security3 publishersConfirmed

China-nexus UAT-11587 runs its Antino backdoor through Outlook and OneDrive

Cisco Talos links China-nexus UAT-11587 to 16 affected or targeted institutions in eight Asian countries, via a backdoor run through Microsoft 365. Its commands move through Outlook and OneDrive via Microsoft Graph, so defenders have no command server to block.

Publishers:blog.talosintelligence.comsecurityaffairs.comthehackernews.com

Perspective Coverage

3 publishers
Builder
Builder 32%
Operator
Operator 63%
Investor
Investor 5%

Reality

Evidence62
Adoption30
Hype gap+8
Incentives
Insufficient
Confidence65
build1 publisherOne report

37signals now treats hand-written code as a bug to trace back to its agents

37signals has made hand-written code an exception handled like a Sentry bug and is rebuilding HEY as six native apps on a Rust backend. DHH's line counts come from his own slides, so the policy and the rebuild are what an engineering lead can actually judge.

Publishers:dev.to

Reality

Evidence35
Adoption20
Hype gap+45
Incentives50
Confidence40
build1 publisherOne report

Cargo's own yank warning steered builds to the poisoned arrayref 0.3.10

Malicious arrayref 0.3.10 was downloaded 2,285 times from crates.io in the 86 minutes before Rust's security response team deleted it on August 20. Lockfiles still pinned to 0.3.9 kept most builds away from its unsandboxed build-script payload.

Publishers:dev.to

Reality

Evidence62
Adoption18
Hype gap+8
Incentives
Insufficient
Confidence60
build1 publisherOne report

Asserting a minimum response time catches a login that stopped hashing passwords

Rust check runner probatum added a min_ms floor in v0.12.0 that fails a login check when its 336 ms Argon2 verification is swapped for a string compare. The floor holds only if it is set from a measured baseline, with room between the healthy path and the broken one.

Publishers:dev.to

Reality

Evidence40
Adoption
Insufficient
Hype gap+10
Incentives55
Confidence45
security6 publishersConfirmed

A backdoor that fires at cargo build: the arrayref poisoning puts your build boxes in scope

Malicious versions of three Rust crates ran code at compile time on August 20. Wiz says the infrastructure overlaps with DPRK operations, so the campaign should be treated as live.

Publishers:bleepingcomputer.comscworld.comsecurityweek.comstepsecurity.iothehackernews.comwiz.io

Perspective Coverage

6 publishers
Builder
Builder 45%
Operator
Operator 48%
Investor
Investor 7%

Reality

Evidence80
Adoption30
Hype gap+25
Incentives55
Confidence75

Earlier coverage

  1. Apache Iceberg's Rust REST client reaches 13 of 25 catalog operations in a seven-catalog test

    Build · September 25, 2026 · 1 publisherOne report

  2. GitHub landed 800,000 lines of Rust in the Copilot runtime across 128 pull requests

    Build · September 16, 2026 · 2 publishersConfirmed

  3. Turso retired its $1,000 bug bounty after LLM reports outran one maintainer's reading speed

    Build · September 24, 2026 · 1 publisherOne report

  4. Huang answers the junior developer question with a four-year degree clock

    Build · September 23, 2026 · 1 publisherOne report

  5. Garage's compatibility page marks versioning, Object Lock and encryption Missing

    Build · September 22, 2026 · 1 publisherOne report

  6. Turborepo puts Rust, Python and Go tasks in the same graph behind experimental flags

    Product · September 22, 2026 · 1 publisherOne report

  7. Bun's million-line Rust port ran $165,000 through Anthropic's API meter

    Invest · September 22, 2026 · 1 publisherOne report

  8. Bun's 535,496-line Zig codebase was rewritten in Rust and validated against TypeScript tests

    Build · September 22, 2026 · 1 publisherOne report

  9. cxcap intent audit finds 3 currency-rounding touchpoints, while separate focus on money.py hotspot exposes 42 files in demo repo

    Build · September 21, 2026 · 1 publisherOne report

  10. Each bind on a recycled GtkListView row leaves another click handler behind

    Build · September 21, 2026 · 1 publisherOne report

  11. Moving rekuiper's metadata catalog into RAM took the disk off its 100k msg/s hot path

    Build · September 21, 2026 · 1 publisherOne report

  12. APT36 hides Operation RapidRust command traffic inside private GitHub repositories

    Security · September 21, 2026 · 1 publisherOne report

  13. Post claims Rust-to-WebAssembly hits 95% of native speed, though basis for the figure is unspecified

    Build · September 20, 2026 · 1 publisherOne report

  14. tenant-invariant denies an agent's tool call when the server cannot resolve the resource owner

    Build · September 20, 2026 · 1 publisherOne report

  15. AI agents ported Bun's 535,496 lines of Zig to Rust, validated by a language-independent test suite

    Build · September 20, 2026 · 1 publisherOne report

  16. The weaker of agent-browser's two safety flags is the one that survives a restart

    Build · September 20, 2026 · 1 publisherOne report

  17. Reviving a 2015 crc32 crate pushed its 17 KiB of lookup tables into build.rs

    Build · September 20, 2026 · 1 publisherOne report

  18. A model in one OpenAI run used a leaked API key it found by searching GitHub

    Build · September 20, 2026 · 1 publisherOne report

  19. A shader language server fetches glslang so the editor's errors match a real compiler

    Build · September 19, 2026 · 1 publisherOne report

  20. mypyc roughly doubles h11's speed once its annotations pass strict mypy

    Build · September 19, 2026 · 1 publisherOne report

  21. A crafted style attribute in Magento's payment-failure reminder executes as PHP

    Build · September 19, 2026 · 1 publisherOne report

  22. A model-checked quorum rule absorbed an LLM oracle's jitter across 1,680 chaos rounds

    Build · September 19, 2026 · 1 publisherOne report

  23. frozndict pays for its O(1) hash by hashing every key and value up front

    Build · September 18, 2026 · 1 publisherOne report

  24. Cloudflare reclaimed more than 100TB of RAM by shrinking one consistent-hashing structure

    Build · September 18, 2026 · 1 publisherOne report

  25. Tencent's BrowserSkill drives a developer's logged-in browser from a shell command

    Build · September 18, 2026 · 1 publisherOne report

  26. Fifty openat calls in one second is the whole ransomware rule in talus-process-monitor

    Build · September 18, 2026 · 1 publisherOne report

  27. Getting 32 random bytes out of a TPM takes a 12-byte hand-marshalled command

    Build · September 17, 2026 · 1 publisherOne report

  28. Nvidia's two-track Rust support puts the safety payoff in the host code

    Build · September 17, 2026 · 1 publisherOne report

  29. Black Duck's Boris Cipot names Microsoft, Google, Amazon and Cloudflare as Rust adopters in production

    Security · September 16, 2026 · 1 publisherOne report

  30. Diffing Tile IR catches the kernel ports that pass tests and are still wrong

    Build · September 16, 2026 · 1 publisherOne report

  31. Rust in front of Django buys 311,000 requests a second on a static JSON endpoint

    Product · September 16, 2026 · 1 publisherOne report

  32. A row-major index over the flat Vec turns COSMIC's workspace strip into a wrapping 5x5 grid

    Build · September 14, 2026 · 1 publisherOne report

  33. A Field Guide to GTK Widgets, Part 3: How Hand-Patched Lists Get the Row Index Wrong, and Where GListModel Fits In

    Build · September 14, 2026 · 1 publisherOne report

  34. A page behind Chrome's WebMCP flag registers three agent tools without an MCP server

    Build · September 14, 2026 · 1 publisherOne report

  35. A compromised TanStack pipeline signed 84 poisoned packages with valid provenance

    Build · September 14, 2026 · 1 publisherOne report

  36. Incremental accumulators keep rekuiper's window memory under 10 MB on one core

    Build · September 13, 2026 · 1 publisherOne report

  37. A Go type checker carries oxlint through Vue's 445 files in 0.9 seconds with type rules on

    Build · September 13, 2026 · 1 publisherOne report

  38. uv's hard links cut a 13-second install of 63 packages to 56 milliseconds

    Build · September 13, 2026 · 1 publisherOne report

  39. NVIDIA routes Rust GPU kernels to PTX through a custom rustc codegen backend

    Build · September 12, 2026 · 1 publisherOne report

  40. A decoy binary's launch path came back from VirusTotal as gsvnywygooow

    Build · September 12, 2026 · 1 publisherOne report