FakeGit Targets AI Coding Agents with Malicious GitHub Repos
Threat actors continue to find new ways to incorporate AI into schemes aimed at luring developers into downloading malware from fake repositories. The latest example involves almost 7,600 malicious GitHub repositories that are being used to distribute a loader and an information-stealer. The FakeGit campaign is nothing new, with Oleg Zaytsev, lead security researcher with […]
OpenAI’s Codex Context Cut Puts Enterprise AI Coding Workflows on Notice
OpenAI quietly trimmed the default input context window for GPT-5.6 inside its Codex CLI, dropping it from 372,000 tokens to 272,000 tokens. That’s a 27% cut, and developers noticed fast. The change surfaced in a GitHub pull request to the Codex CLI, and within days, developers on Reddit and X were asking why OpenAI shrunk […]
VS Code 1.129 Moves Agent Sessions Out of the Editor Window
Microsoft has released Visual Studio Code 1.129, and the headline change isn’t a new feature so much as a new foundation. The update introduces the agent host, a dedicated process that runs AI coding agents like Copilot, Claude, and Codex outside the editor itself, using a new open protocol called the Agent Host Protocol (AHP). […]
Security Risks from AI Coding Agents Expand Beyond the Sandbox: Pillar
AI coding assistants have become an essential part of developers’ work, automating many of the repetitive tasks – think boilerplate coding and scaffolding – that in the past ate up a lot of their time. More jobs can now get done faster. That said, such agents also represent a significant security risk, making developers – […]
Signed, Attested, and Malicious: The Software Supply Chain Has a Deepfake Problem
A developer pulls a package from a reliable repo. It is signed, has provenance, and has been scanned. And then…it contains malware. That is no longer hypothetical. When the Miasma worm tore through the @redhat-cloud-services npm namespace in June, its malicious releases carried real SLSA provenance, because they were built in Red Hat’s own GitHub […]
Harness Extends DevOps Reach to the Realm of AI Agents
Harness today extended the reach of its core continuous integration/continuous delivery (CI/CD) platform to enable DevOps teams to build and deploy artificial intelligence (AI) agents. At the core of that capability are five additions to the Harness portfolio, including an AI Asset Catalog that automatically discovers every agent, skill, and plugin that exists within repositories […]
AI Moved the Bottleneck From Writing Code to Understanding and Trusting It
AI coding boosts velocity, but without stronger review, governance and codebase visibility, teams risk higher costs, security gaps and production failures. TL;DR
xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos
xAI has published the full source code for Grok Build, its terminal-based AI coding agent, on GitHub under an Apache 2.0 license. The release lands three days after a security researcher showed the tool quietly shipping entire developer repositories — SSH keys and password databases included — to a Google Cloud bucket xAI controls. The […]
AI-Generated Code Is Cheap But the Context Infrastructure Behind It Is Not
The cost curve for generating code with AI has moved in one direction, and it has moved fast. What used to require a senior engineer’s full attention for an afternoon can now be scaffolded in minutes, and the price per token for the models doing it keeps falling. By the metric that dominated every early […]
Why You Need AI Agent Security Validation in Software Testing
Engineering teams have been racing for the last two years to deploy AI agents that can find bugs faster than any QA team ever could. Autonomous testing agents can crawl through codebases, identify vulnerabilities, and generate test coverage reports while developers finally get to take a breath. The irony is that while development teams enjoy […]
SmartBear Tightens Integration Between AI Coding and Testing Tools
SmartBear this week revealed it is narrowing the divide between coding and testing by integrating its platform with artificial intelligence (AI) coding tools. Sheryl Koenigsberg, senior vice president of product marketing at SmartBear, said integrations with AI coding tools from Anthropic, Atlassian, GitHub, and Amazon Web Services (AWS) will make it simpler for application developers […]
Anaconda Doesn’t Want to Be Just the Python Company Anymore
The question is no longer whether Anaconda wants to be more than the Python company. It is how much of the AI development stack DeSanto ultimately intends to own.
Atlassian Extends AI Reach of Jira Into Agentic Engineering Workflows
Atlassian today extended the scope of tasks that artificial intelligence (AI) can automate directly from its Jira project management software, including assigning work to an AI coding agent. Initially, Jira integration with AI coding tools includes Claude Code from Anthropic, Cursor, and GitHub Copilot, with support for Codex from OpenAI forthcoming. Software engineering teams can […]
‘HalluSquatting’ Compromises AI Coding Agents to Install Malware, Create Botnets
Hallucinations have been an ongoing problem since OpenAI first introduced its ChatGPT chatbot in November 2022, highlighting generative AI’s tendency to generate plausible but false or misleading information and its inability to just say “I don’t know.” They can lead to embarrassing or uncomfortable moments. However, security researchers in Israel have found that the large […]
IBM Bob Gets Multi-Agent Muscle and a Cost Dashboard for Enterprise Coding
IBM Bob adds multi-agent coordination, cost analytics, and modernization workflows for IBM Z, IBM i, and Java as AI governance takes center stage.
GhostApproval Flaw Featuring Decades-Old Feature Found in Six AI Coding Tools
A security flaw found in six popular AI coding agents can let attackers abuse a decades-old feature in Unix to trick an AI agent into giving them control of a developer’s system. Researchers with Google-owned Wiz said the vulnerability, dubbed “GhostApproval,” relies on symbolic links – or symlinks – a file system feature that has […]
Multi-Model AI Debate: The New Way to Design Software Systems
How agentic workflows can automate architecture debates, compare tradeoffs and produce stronger software designs
Shadow Mode Continuous Integration: The Missing Test Layer for AI Agents
Autonomous agents require CI/CD pipelines that evaluate behavior, not just artifacts. Containerized shadow mode gives platform teams a practical control point: Run the agent in an isolated Docker environment, replay realistic workflows, capture structured traces and evaluate behavior against statistical and policy baselines.
From Alerts to Intelligence: Building a Production Self-Healing System for Port-Down Failures
Big, distributed computing systems seldom have visible failures. Most of them start without any bang, frequently with a health-check disconnection, a failed TCP connection or a service port that is no longer listening. Such signals are not too big when considered in isolation. However, in the scenario where systems are running with several hundreds of […]
Self-Healing Infrastructure With Cognitive Automation: How LLMs and Ansible Transform Middleware Reliability
Infrastructure reliability has always been central to enterprise success, yet traditional automation methods often fall short in handling complex, dynamic environments. With the rise of large language models (LLMs), a new paradigm of cognitive automation is emerging — where intelligent agents help infrastructure not only detect failures but also recommend or implement remediations in real-time. […]
Why AI-Driven Devops is Exposing the Limits of Traditional Toolchains and What Comes Next for Engineering Teams in 2026
The future belongs to adaptive systems that can learn, adjust and self-correct in real-time. Teams that invest in observability, modularity and AI-aware governance today will be positioned to thrive in this new operational reality.
GitHub Copilot Bills Hit $800: Visual Studio’s June Update Adds Real-Time Usage Alerts and MCP Trust Checks
Visual Studio’s June update adds real-time Copilot usage alerts and MCP server trust checks, responding to billing and agent security concerns.
Former GitHub CEO Unveils Distributed Git Network Built for AI Coding Agents
As AI coding agents become a larger part of software development, a new startup founded by former GitHub CEO Thomas Dohmke is introducing infrastructure built to address the growing pressure on centralized Git hosting. The new company, Entire, has launched a preview of a distributed Git network that allows developers to mirror GitHub repositories across […]