Our new podcast is live! The theme of the show is taboo health — from death and grief to period poops and pelvic floor troubles. If a topic can be difficult to talk about, we want to dive into it head first. Naturally, we launched with a gastroenterologist who has done 60,000+ procedures in his career and seen all there is to see. Episodes 2 and 3 are two of the world’s leading hydration researchers with competing opinions on what matters and what doesn’t. And we’ve got an incredible roster to come, including the world’s leading fart researcher (yes, for real), cancer survivors and oncologists, a famous pelvic floor therapist, people navigating IBS, and more. Recording these conversations has been one of the most fun, meaningful things I’ve gotten to do in my career. There’s as much laughter as there are gold nuggets of practical health tips. I’m excited to share with you… This is Dying of Embarrassment.

Warhound, the brain child of Ben Lamm and Palmer Luckey, emerges from stealth to genetically engineer dogs for military and law enforcement. spr.ly/6011BHZNMF

New PFP 👀

Quest Diagnostics has been hacked. Patient data was exposed. They serve roughly half of U.S. hospitals and physicians. Investigation ongoing.

Today's Boom announcements in 90 seconds

If you're deploying on Railway, someone could be stealing from you right now. Here's what happened a prompt that could help you. • Yesterday, Railway said a hacker got its customers' API keys. • Jeremy Tocy, a founder, had his AI accounts drained. • @wickedguro, another founder, had to shut down his SaaS for hours. • @ABrakhane, CTO of Gateway X, spent 6 hours rotating 106 API keys he had with Railway. Railway either doesn't know the full extent of what happened or won't tell us. Adam used this prompt to get a tool that made changing his API keys easier: "Railway had a security incident. Research it for me. Look at my Railway environment and list every API key. Make me a tool that tells me which keys I need to reset, gives me a link to reset each one, and gives me a copy button for the command that updates Railway with the new keys."

Today Boom unveils our first completed supersonic turbine core, a 2GW Superfactory, and—one more thing—the world's most advanced all-digital foundry to cast single crystal turbine blades and vanes

💥 Introducing Warp Sciences, a new company applying AI and robotics to help the world develop new medicines faster. We’ve raised a $215M Series A led by @lightspeedvp to bring frontier AI out of the browser and into the lab, and build scientific capacity here in America. I co-founded Warp with my long-time friend @dpatil, FAIR co-founder @manohar_paluri, and drug hunter Sol Reisberg. The early team is full of incredible people like @bkspears9, who helped achieve Q>1 fusion at LLNL.

🚨 BREAKING: Node.js just dropped its OWN security bombshell. 4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers. → 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity. → REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely. → TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions. → Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to. → THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates. → RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches. → PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers. PHP AND Node.js both facing major security disclosures on the SAME DAY. If you run a website or application, TODAY is the day to check your servers. And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated. Don't be the last one to patch.

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

What a lede from @TheEconomist

From @TheAthletic: Kimi Antonelli is on the verge of Formula 1 history and could become F1's youngest champion on Sunday in just his second season. But first, he’ll hand-wash his car. nyti.ms/4yZMwZn

I now live my life expecting to thrive for hundreds of years, if not more.

in case i haven’t been clear yes we are scaling beyond what i expected over here and it is exceptionally difficult & has taken over my entire life for 2 years i am grateful would be inauthentic to say it hasn’t been hellish at times onwards & upwards