Latest Articles
Microsoft’s New Testing Agent Tackles the Trust Gap in AI-Generated Code
AI coding assistants write code fast. Whether that code can be trusted is a separate question, and it's becoming a more urgent one. Surveys this year put average developer trust in AI-generated ...
‘Flooding Dropper’ Is Hitting npm With a Tidal Wave of Malicious Packages
Jeff Burt | | Flooding Dropper, linux, macOS, malicious npm packages, Microsoft Windows, naming conventions, open source threats, OpenSourceMalware, sonatypeThreat researchers at Sonatype are warning developers of an expanding campaign that is generating a wide range of npm accounts and dropping small numbers of malicious packages from each one, essentially flooding ...
HackerOne Extends Platform Reach to Remediate Source Code Vulnerabilities
HackerOne has added a remediation capability to its H1 Platform that reduces the amount of time required to remediate validated vulnerabilities and other weaknesses affecting specific lines of source code. Nidhi Aggarwal, ...
Why Reliability Guardrails Are Needed in Every AI Coding Pipeline
Kolton Andrus | | ai, AI agents, chaos engineering, CI/CD, reliability, site reliability engineeringWe’re in the middle of a reliability reckoning. Thanks to AI, companies are shipping code much faster than before. But if there’s anything to learn from the surge in high-profile outages over ...
Meta Launches AI Coding Agent to Challenge OpenAI and Anthropic
In an effort to catch up with OpenAI and Anthropic in one of AI's fastest-growing markets, Meta has launched its first AI coding agent, Muse Code, alongside an updated coding-focused AI model ...
AWS Extends DevSecOps Reach to AI Coding Tools from Anthropic and OpenAI
Amazon Web Services (AWS) this week at the Black Hat USA conference revealed it is working with both Anthropic and OpenAI to integrate their respective coding tools with a service it has ...
Sandbox Testing for API-Heavy Systems: What Changes When You Don’t Own the Dependency
Sandbox testing works well when your team controls both sides of the integration. You define the service, you define the mock, you know exactly what the sandbox should return. That setup holds ...
AWS Adds Agentic Workspace to Kiro AI Coding Tool
Amazon Web Services (AWS) this week added an open source workspace for its Kiro artificial intelligence (AI) coding tool that enables application developers to asynchronously assign tasks to an AI agent that ...
RapidFort Extends Open Source Software Security Reach to Runtime Environments
RapidFort today at the Black Hat USA conference announced it has extended its ability to secure open source software to the runtimes that DevOps teams deploy in production environments. Michael Wood, chief ...
From API Integration to Agent Governance: What Backend Teams Need to Know About MCP
Many MCP projects begin with an existing API and a simple request: expose one backend capability to an LLM client. The quickest route is to wrap an endpoint as a tool and ...
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Jeff Burt | | Aikido Security, AWS, credential theft, GitHub Actions, HashiCorp Terraform, npm malware, Shai-Hulud worm, supply chain attackResearchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ...
AI is Coding Us Into a Corner
Charlie Gero | | AI coding tools, AI dependency, AI hallucinations, AI patching, AI-generated code, application security, code review, code vulnerabilities, developer productivity, developer trust, frontier models, future software maintenance, Human Oversight, junior developers, secure coding, software engineering skills, software security, technical debtAI-powered patching and coding is putting us on a track towards a deepening dependency on future frontier models. The modern tools we use today to fix yesterday’s coding problems are quietly creating ...
