Features
US District Court Decision in AI’s Favor Worries Open-Source Developers
A federal appeals court handed GitHub, Microsoft, and OpenAI an important win in the first major appellate ruling over how AI coding tools can use open-source code. As we all know, all ...
Splunk Open Sources Token Meter Tool for Application Developers
Mike Vizard | | agent monitoring, agentic AI, AI budgets, AI coding agents, AI cost management, AI costs, AI Development, AI FinOps, AI observability, Claude Code, Codex, coding assistants, Cursor, developer productivity, developer tools, devops, Kiro, MCP, Model Context Protocol, model costs, OpenCode, Pi, Splunk, token consumption, Token Meter, token usageSplunk’s open-source Token Meter gives developers real-time visibility into AI coding agent activity, token consumption and estimated costs across tools including Claude Code, Codex and Cursor ...
Anthropic Adds a Coordinator to Claude Projects for Running AI Work in Parallel
Tom Smith | | agentic AI, AI agents, AI coding agents, AI Development, AI project management, AI workflows, Anthropic, autonomous coding, Claude Code, Claude Projects, cloud development, code review, coding automation, developer productivity, developer tools, devops, Git branches, human-in-the-loop, multi-agent orchestration, parallel development, platform engineering, pull requests, software development, software engineeringAnthropic’s redesigned Claude Projects coordinates parallel Claude Code sessions, delegates work across branches and brings the results back through familiar pull-request review workflows ...
StackHawk Delivers Wingman to Fix Vulnerabilities as Developers Write Code
StackHawk this week launched Wingman, an artificial intelligence (AI) tool that makes it possible for application developers to automatically fix vulnerability issues as code is being written. Wingman is designed to install ...
Harness Previews Revamped Platform for the Agentic Engineering Era
Harness today previewed a revamped user interface for its platform for managing software deployments that makes it simpler for software engineers to manage teams of artificial intelligence (AI) agents using a forthcoming ...
Splunk Preps Second Open Source LLM for Telemetry Data
Splunk is gearing up to make an artificial intelligence (AI) model for analyzing log data available on Hugging Face under an open source license. Additionally, Splunk at its .conf26 conference this week ...
Factory Raises $200M as It Builds Agents Across the Software Lifecycle
Jaime Hampton | | AI agents, AI coding, AI Software Engineering, devops, factory, generative AI, software developmentEnterprise coding agent startup Factory announced it has raised $200 million at a $5 billion valuation, more than tripling its valuation from its last funding round five months ago. Founded in 2023, ...
LocalStack Acquires WonderTwin AI to Gain SaaS App Emulation Platform
LocalStack this week revealed it has acquired WonderTwin AI, a provider of an emulator of software-as-a-service (SaaS) applications that is used to build custom applications for those platforms. Colin Neagle, vice president ...
Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence
Tom Smith | | AI security, critical patch updates, enterprise applications, enterprise Java, FIPS 140-3, harvest now decrypt later, Helidon 27, Java 27, Java security, JavaFX 27, JDK 11, JDK 17, JDK 21, JDK 25, JDK 27, JDK 8, ML-KEM, OpenJDK, Oracle Java, Oracle Jipher, post-quantum cryptography, quantum security, TLS 1.3, virtual threadsJava 27 strengthens enterprise security with monthly critical patch updates and post-quantum TLS 1.3 support, helping organizations prepare for AI-driven threats and future quantum risks ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
More JFrog Artifactory Bugs Are Under Attack, and All Three Have Patches
Tom Smith | | administrative tokens, artifact repositories, authentication bypass, build pipeline security, CI/CD security, CVE-2026-42016, CVE-2026-42018, CVE-2026-82329, Cybersecurity, devsecops, Groovy plugins, JFrog Artifactory, patch management, privilege escalation, Repository Security, Rust backdoors, Software Supply Chain, vulnerability management, web shellsAttackers are actively exploiting three JFrog Artifactory flaws, exposing how slow patching can turn artifact repositories into software supply chain attack paths ...
GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing
Tom Smith | | access control, API security, CI/CD security, credential theft, CVE-2026-85706, CVE-2026-87719, CVSS 10.0, Cybersecurity, devops security, devsecops, gitlab, GitLab Duo, GitLab security, GraphQL security, patch management, Repository Security, self-managed GitLab, Software Supply Chain, vulnerability managementGitLab patches two critical flaws, including a CVSS 10.0 unauthenticated file-read vulnerability, putting self-managed instances under urgent pressure to upgrade ...
