Guru's Tech Bytes — April 14, 2026

Good morning. This is Guru's Tech Bytes, Ep. 011, for Tuesday, April 14th, 2026. First up, a rather alarming supply chain attack in the WordPress ecosystem. Someone has quietly purchased thirty WordPress plugins and injected backdoors into every single one of them. The compromised plugins were pushing malicious code to live sites through routine updates, and the scale of it is staggering, with hundreds of thousands of installations affected. It's a stark reminder that in open-source, trust is earned — and apparently, also purchased. Second, Google has announced a new spam policy targeting so-called back button hijacking. You know the trick — you click back and somehow end up on a page you never visited. Google will now consider this a spam violation, meaning sites that pull this stunt risk being penalised in search rankings. Honestly, it's about time. Few things on the web are more irritating, and it's refreshing to see Google actually cracking down rather than, well, doing it themselves. And finally, researchers have published work on Introspective Diffusion Language Models, a novel approach that brings diffusion-based generation into the language modelling space. The technique allows models to iteratively refine their outputs rather than generating text in a single left-to-right pass. It's still early days, but the results suggest this could open up interesting new directions for how we think about text generation. That's your daily byte. Have a great day. Until next time. Stories covered Someone bought 30 WordPress plugins and planted a backdoor in all of them — Hacker News A new spam policy for “back button hijacking” — Hacker News Introspective Diffusion Language Models — Hacker News