Blog archive
On 31 August 2026 Google Play stops accepting app updates that target below Android 16 (API level 36). This is a build-and-behaviour change, not a version bump. Here is what actually breaks, a realistic three-week plan
Manu Shukla 
India is still the world's largest app download market, but Q2 2026 was the quarter it started paying: $345 million in consumer spending, up 35% year on year. The ASO levers that matter have changed with it.
Manu Shukla 
CERSAI's CKYCRR 2.0 turns India's 103 crore KYC records into a real-time, API-first registry with Aadhaar masking and OTP consent. Here is what banks, NBFCs and fintechs actually have to build, in what order, and where
Manu Shukla 
Turning code scanning on across a large estate is one afternoon of work and six months of alert triage. A new repository property changes the sequence, and the cost is per active committer, not per repository.
Manu Shukla 
OpenAI removes the Assistants API on 26 August 2026. Threads become Conversations, Runs become Responses, and the tool-call loop becomes your code. Here is the mapping, the hidden cost changes, and a three-week plan.
Manu Shukla 
Google's 7 July 2026 update added a category property and a sale duration section to merchant listing structured data. Most Indian product pages fail on older rules instead. Here are the nine that matter.
Manu Shukla 
RBI's authentication Directions took effect on 1 April 2026 and card issuers must validate cross-border CNP transactions by 1 October 2026. What the three principles require in code, which exemptions survive, and how
Manu Shukla 
Gemini Enterprise now traces an agent call end to end, from the assistant prompt through the orchestration layer to the third-party API. Two new spans, a 30-day retention window and a $0.20 per million span meter decide
Manu Shukla 
Attackers force-pushed 75 of 76 trivy-action tags in March 2026 and stole secrets from every pipeline that ran a scan. Here is the credential isolation architecture that survives a poisoned action, with working YAML.
Manu Shukla 
GitHub closed Spark to new users on 4 August 2026 and gives existing builders until 31 August to export. The export hands you React and TypeScript source that still depends on four managed services you no longer have.
Manu Shukla 
GitHub Enterprise Importer reached general availability for GitLab sources on 3 August 2026, with a gh gl2gh CLI extension. It moves repositories, issues and merge requests. It does not move your pipelines.
Manu Shukla 
Google now bars fake and undisclosed incentivized reviews from review snippet structured data. It sits in the guidelines section, which means manual action. Here is how to audit what you are marking up.
Manu Shukla 
OpenAI's internal red-teamer beat human red-teamers 84% to 13% and broke a live vending-machine agent. GPT-5.6 Sol now fails 0.05% of those attacks. Here is why a hardened model is not a defence plan, and the seven
Manu Shukla 
Imagen 4 shut down on 17 August 2026. generate_images() is gone, the response shape changes and number_of_images no longer exists. What to move to now, the code changes and the per-image cost.
Manu Shukla 
Check Point chained CVE-2025-67644 and CVE-2026-28277 from a metadata filter key to remote code execution on self-hosted LangGraph servers. Here is the version matrix and a 30-minute audit.
Manu Shukla 
Google removes the enable_local opt-out for Shopping campaigns on 31 August 2026, and v25.1 code setting it false will error. Here is the channel scoping, budget split and feed work to do before the date.
Manu Shukla 
N-able's N-central hotfix closes an authentication bypass that was exploited as a zero-day from 31 July 2026. It does not remove the tunnel service the attacker registered on your managed endpoints. Here is the order
Manu Shukla 
Valid provenance signed keyv 6.0.0 on 4 August 2026, and eight malicious releases were still tagged latest 101 minutes later. What attestations prove, and the cooldown config for npm, pnpm, Yarn and Bun.
Manu Shukla 
GoDaddy, Cloudflare and AWS now all register domains over an API, and coding agents can call them. The three purchase contracts differ in ways that decide whether a retry costs you nothing or charges you twice.
Manu Shukla 
Apple's age rating questionnaire now asks whether your app has social media capabilities. From September 2026 you cannot submit an update without answering, and answering yes sets a floor of 13+.
Manu Shukla 
Apple open-sourced the Foundation Models framework utilities in 2026: Skills for just-in-time context, three history-compaction modifiers, and a chat completions client that points LanguageModelSession at any server
Manu Shukla 
From Chrome 153 on 8 September 2026, a new major Chrome lands every two weeks instead of every four. Every milestone-numbered deadline in your backlog needs its calendar date checked again.
Manu Shukla 
The Cyber Jailbreak Severity scale gives AI jailbreaks what CVSS gave software bugs in 2005: a number everyone argues about instead of arguing about words. Here is how to score one, and what your team does at each band.
Manu Shukla 
Push Security tracks 25-plus device-code phishing kits and a 37.5x rise in phishing pages by April 2026. Passkeys do not help. Here are the settings that do, per platform.
Manu Shukla 