‘GitLost’ Flaw Lets Attackers Trick GitHub AI Agent Into Leaking Private Repos
Noma researchers again show how easy it is to manipulate AI agents with malicious commands via indirect prompt injection attacks.
Block Details Builderbot Framework for Orchestrating AI Agents Across SDLC
The software engineers at Block have developed an orchestration layer they are using to manage artificial intelligence (AI) agents that have been trained to automate multiple tasks across their software development lifecycle (SDLC). Based on goose, an open source agent framework the company developed and contributed to the Agentic AI Foundation (AAIF), the Builderbot orchestration […]
Beyond Automation: Building Accountability for AI Agents
The conversation around AI agents has evolved remarkably quickly. Not long ago, most organisations were still experimenting with prototypes and controlled use cases, trying to understand where these systems might fit within existing operations. Today, that conversation has changed. Agents are increasingly being deployed into production environments where they can write code, interact with customers, […]
The Next DevOps Bottleneck: When AI Generates More Software Than Organizations Can Manage
The organizations that benefit most from AI will probably not be the ones generating the largest amount of code. They will be the ones who build systems capable of managing software at scale.
Novee Uncovers Cordyceps: The Latest Threat to CI/CD Pipelines
A newly discovered supply chain security flaw is once again putting a spotlight on inherent weaknesses in CI/CD pipelines and the growing interest among cyberthreat actors to exploit them. Security researchers with Novee, an AI penetration testing platform provider, wrote about Cordyceps, an exploitable pattern in the open source supply chain that can allow attackers […]
Mistral Releases Leanstral 1.5, an Open Model That Solved 587 of 672 Putnam Math Problems
Mistral’s open Leanstral 1.5 model solved 587 of 672 Putnam math problems and is already finding real bugs in open-source code.
Z.ai Debuts ZCode to Compete With GitHub Copilot, Cursor and Anthropic
Chinese AI developer Z.ai has introduced ZCode, a desktop application that automates software development tasks, positioning the platform to compete with established coding platforms from Anthropic, GitHub and Cursor. The company built ZCode, which it calls an Agentic Development Environment, around its recently released GLM-5.2 LLM. Rather than functioning as a traditional coding assistant that […]
Lightrun Adds Ability to Assess Impact Pull Request Will Have in Production
Lightrun is providing early access to an ability to verify whether a pull request (PR) will actually run in a production environment as part of its artificial intelligence (AI) platform for automating site reliability engineering (SRE) workflows. Company CTO Leonid Blouvshtein said the Runtime Aware PR Verifier enables DevOps teams to assess the impact a […]
Reliability Comes From the System, Not the Agent
One of the most common questions executives ask right now sounds straightforward: is the agent reliable enough yet? It feels like the right place to start, but the framing quietly points people in the wrong direction because it assumes something about reliability that has rarely been true in complex systems. When people ask whether an […]
Ornith Models Automate Agentic Coding With Self-Scaffolding
Ornith, a new family of open source LLM models from the DeepReinforce research collective, takes a novel approach to executing coding and debugging tasks: It generates an architectural framework to give the user’s harness a structured instruction set – a scaffold – to create an agent to complete the job. Available in a set of […]
Anthropic Adds Enterprise Gateway to Simplify Claude Code Access on AWS and Google Cloud
Anthropic’s new Claude apps gateway brings SSO, central policy, and spend caps to Claude Code on Amazon Bedrock and Google Cloud.
OpenAI Expands Into Developer Hardware With Codex Micro Keyboard
OpenAI is preparing to launch its first branded hardware product, but rather than entering the crowded consumer device market, the company is starting with a tool designed specifically for software developers. The company has scheduled a July 15 unveiling for Codex Micro, a compact input device created in partnership with keyboard manufacturer Work Louder. OpenAI […]
Mozilla Shows the Danger of Indirect Prompt Injections in AI Coding Agents
A clean GitHub repository that contains no malicious code can launch an attack and fully compromise a developer’s systems by using indirect prompt injections to trick AI-powered coding agents like Anthropic’s Claude Code into taking steps that hand control to attackers and expose a wide range of secrets. In a proof-of-concept (PoC) attack, Mozilla 0DIN […]
Harness Adds Autonomous AI Agents to Automate DevOps Workflows
Harness today is providing DevOps teams with an ability to build and deploy autonomous artificial intelligence (AI) agents that automate the delivery of code to production environments. Trevor Stuart, a senior vice president and general manager at Harness, said the Autonomous Worker Agents eliminate the need for fixed scripts with custom AI agents or ones […]
AI Coding Costs Could Exceed Developer Salaries, Gartner Warns
Enterprises rapidly adopting AI coding assistants may eventually face an unexpected financial reality: the AI tools could cost more than the developers using them. According to new research from Gartner, spending on AI coding agents is on track to surpass the average software developer’s salary by 2028, driven by the rapid growth of LLM token […]
Survey: More AI Code Running in Production Environments with Caveats
A global survey of 309 software engineering leaders, published today, finds 81% of organizations have to some degree reworked development and release processes to accommodate code generated using artificial intelligence (AI) coding tools. However, only 45% said their organization is running any of that code in production environments. Conducted by Dimensional Research on behalf of […]
The DevOps Practice Most Teams Skip When Adopting AI Agents
Code generation got fast. The competitive advantage is now in the Second and Third Ways. If you don’t have instruction files in your repo, start there. If you do, monitor how often they’re updated.
How to Automate API Testing in CI/CD Pipelines
Automating API tests and plugging them directly into your CI/CD pipeline is no longer a complex undertaking reserved for large engineering teams.
Your AI Testing Framework Might Be Passing Tests It Should Be Failing
Engineering teams are not evaluating whether AI belongs in their testing workflows anymore, but are discovering, sometimes painfully, that the architectural decisions they made when integrating it are the ones that will determine whether it improves their release confidence or quietly erodes it.
Attackers Exploit SimpleHelp Flaw to Steal Info from AI Coding Assistants, Clouds
Threat actors are exploiting a known security flaw in the SimpleHelp remote monitoring and management (RMM) software to drop two previously unknown pieces of malware that can compromise a broad range of systems and steal massive amounts of sensitive data. Researchers with Blackpoint Cyber’s Adversary Pursuit Group said they detected an intrusion in which the […]
Survey Surfaces Rise in IT Incidents Attributable to AI Coding Tools
A survey of 406 IT decision makers at organizations with more than 250 employees in North America finds 93% have experienced at least one infrastructure incident caused by reliance on artificial intelligence (AI) tooling. Conducted by Panterra Group on behalf of Spacelift, a provider of a platform for automating the management of infrastructure-as-code (IaC), the […]
How AI Is Transforming DevOps and Cloud Engineering
While AI is often associated with chatbots or generative models, one of its most significant impacts is happening behind the scenes — within DevOps and cloud engineering.
Akrites: The Latest Attempt to Protect Open-Source From AI Attacks Has Arrived
Akrites, a new Linux Foundation initiative backed by many of the world’s largest tech and financial firms, is the industry’s latest attempt to get ahead of AI‑accelerated software supply chain risks by hardening critical open source projects before attackers can exploit them. On June 25, the Linux Foundation unveiled Akrites, a coordinated industry program designed […]