Features
OpenAI Cuts Off Cursor’s Model Access After SpaceX Acquisition
OpenAI is ending Cursor’s direct access to its AI models after Elon Musk’s SpaceX acquired its parent company, Anysphere. This is the next move in the increasingly bitter conflict between Elon Musk ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Broadcom Launches Trusted Artifact Service for Spring Framework
Mike Vizard | | AI coding, Apache Tomcat, application security, Bitnami Secure Images, Broadcom, container security, dependency security, devsecops, java, kubernetes, node.js, open source security, open source vulnerabilities, patch management, Python, SBoM, secure software development, software artifacts, Software Supply Chain Security, Spring framework, Spring Security, Tanzu, TrueSource Trusted Artifacts, VMware explore, vulnerability managementBroadcom launches TrueSource Trusted Artifacts to provide hardened Spring dependencies, secure open source packages and automated vulnerability remediation ...
VS Code 1.135 Gives AI Coding Agents a Second Opinion
Tom Smith | | Agent Host, Agent Host Protocol, agentic development, AHP, AI code review, AI coding agents, AI pair programming, AI verification, Claude agents, Copilot agents, developer tools, GitHub Copilot, microsoft, platform engineering, Rubber Duck, token usage, Visual Studio Code, VS Code 1.135VS Code 1.135 adds Rubber Duck AI review, persistent agent sessions, Agent Host infrastructure and clearer token usage as Microsoft builds a more agentic IDE ...
A Simple Website Summary Just Exposed the Limits of AI Coding Guardrails
Tom Smith | | agentic AI security, AI agent security, AI coding assistants, AI guardrails, AI security, Anthropic, Auto Mode, Claude Code, Claude Opus 5, devops security, indirect prompt injection, Johann Rehberger, network egress, platform engineering, prompt injection, Python module shadowing, RCE, remote code execution, sandboxing, struct.pyClaude Code’s Auto Mode was bypassed in an attack chain that turned a routine webpage summary into remote code execution, highlighting the limits of AI agent guardrails ...
GitHub Tightens Copilot’s Billing and Governance Rules Ahead of a Busy Fall
Tom Smith | | AI cost management, AI Governance, Balanced review, chat data retention, Copilot billing, Copilot Business, Copilot Chat, Copilot cloud agent, Copilot code review, Copilot Enterprise, developer tools, GitHub AI Credits, GitHub Copilot, GitHub Mobile, Lite review, platform engineering, token-based billing, usage based billingGitHub Copilot is tightening enterprise controls with upfront seat billing, longer chat retention and a Balanced code review default ...
Cybersecurity Researchers Uncover Flaw in Google AI Coding Tool
Cybersecurity researchers from Pillar Security this week revealed how a prompt injection inserted into a GitHub repository was used to gain Editor-level access to an internal Google Cloud project using a flaw ...
Sonar AI Agent Discovers Vulnerabilities Hidden in Business Logic Workflows
Sonar today made available an artificial intelligence (AI) agent designed to discover vulnerabilities and business logic flaws that pose the greatest risk to an organization should they be exploited. The SonarQube Hunter ...
Harness Unfurls Source Code Repository Alternative to GitHub
Harness today launched a code repository service that is specifically designed for DevOps teams that are relying on artificial intelligence (AI) agents to generate code. Martin Reynolds, Field CTO for Harness, said ...
Tricentis Preps Wave of Additional AI Testing Capabilities
Tricentis is providing early access to multiple artificial intelligence (AI) capabilities that it is gearing up to roll out later this year via a Tricentis Transform initiative, including an autonomous AI agent, ...
The AI Agent Race Is On. But Are We Watching the Right Race?
Claude Code, OpenAI Codex, GitHub Copilot, Cursor and a growing field of challengers are competing to define the future of software development. A new Techstrong special report examines who is ahead, how ...
Report Shines Spotlight on 91 Vulnerabilities Fixed in Latest Update to Spring Framework
Mike Vizard | | AI cybersecurity, AI vulnerabilities, application security, Broadcom, CVEs, devsecops, Java security, open source security, open source vulnerabilities, patch management, security automation, software components, Software Supply Chain, sonatype, Spring framework, Spring vulnerabilities, technical debt, virtual patching, vulnerability managementSonatype says 91 Spring vulnerabilities affecting more than 209,000 software components highlight how AI is accelerating vulnerability discovery and creating a new patching challenge for DevSecOps teams ...
