The New Stack

The Formula 1 season opens with the Bahrain Grand Prix, and motorsport coverage in Malaysia is highlighting five key storylines to follow. Fans are looking ahead to how the grid shapes up after pre-season testing, with attention on new driver line-ups, car performance, and how the top teams stack up at the start of the new campaign.

Pro Football Focus has published its 2026 rankings of all 32 NFL offensive lines, evaluating every team's blocking unit ahead of the new season. The full list, from strongest to weakest, is drawing attention from fans debating where their teams landed and which front offices did enough in free agency and the draft to protect their quarterbacks.

OpenAI has launched Dots, a new product the company says matters for developers. The announcement, covered by tech outlets including The New Stack, focuses on why the tool is significant for people building software, suggesting it is aimed at developer workflows rather than general consumers. Details about what Dots actually does and how developers will use it remain limited in early coverage, with commentary so far centered on the launch itself and its potential relevance to OpenAI's developer ecosystem.

Motorsport coverage is examining how Formula 1 team-mates stack up against each other in qualifying for the 2026 season. Under the new regulations, each driver can be compared to their team-mate in full qualifying trim up to 30 times, giving fans and analysts a far more detailed picture of intra-team performance than in previous seasons.

A new vulnerability entry, EUVD-2026-89331, documents a stack-based buffer overflow in the web management interface of TOTOLINK N150RT (NTR150) routers running firmware V3.4.0-B20201030. The flaw is reachable through the /boafrm/formFilter route, which handles access-control and URL filter functions. No severity score has been assigned yet. Security teams are being urged to check whether their devices run the affected firmware.

Model Context Protocol, or MCP, is being framed as the standard that lets AI agents plug into a company's APIs and tools. But commentary from The New Stack stresses that the protocol only provides access — it does not govern what an agent should or should not see once connected. That means questions of permissions, filtering and data exposure still fall on developers and platform owners rather than on MCP itself.

A coaching writer is prompting readers to examine whether their packed schedules and constant goal-chasing reflect real personal growth or merely busyness. The piece argues that a full calendar, new courses and stacked goals can look like progress from the outside while masking a lack of honest self-assessment, and it invites readers to tell the difference.

A new vulnerability entry, EUVD-2026-89195, was updated on 29 September 2026 affecting Eclipse Foundation's NetX Duo. Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before checking that the message is long enough to contain them, a classic parsing flaw that could expose embedded devices to attacks. No severity score has been assigned yet.

A medium-severity vulnerability, EUVD-2026-89199, has been catalogued in Eclipse Foundation's NetX Duo embedded network stack. Rated 6.0 out of 10 under CVSS v3.1, the flaw lies in the FTP component, where passive data connections are not bound to the authenticated control peer, potentially allowing session mixing. The entry was updated on 29 September 2026 via the EU vulnerability database maintained by ENISA.