Features
Malicious NPM Package Gets Downloaded 50K Times Before Discovery
A malicious package downloaded approximately 50,000 times from a node package manager (npm) is providing an object lesson for adopting more DevSecOps best practices. Security researchers from Tenable discovered a “ambar-src” package ...
Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover
Jeff Burt | | AI API Security, AI coding risks, AI coding tools, AI developer tools, Anthropic Claude Code, Check Point, MCP protocol, Palo Alto Unit 42Three critical vulnerabilities found in Anthropic’s Claude Code agentic AI developer tool could be exploited simply by cloning and opening an untrusted project and lead to system takeover, stolen API keys, and ...
Claude Code Remote Control Keeps Your Agent Local and Puts it in Your Pocket
Tom Smith | | AI coding agents, AI developer workflows, Anthropic AI coding, DevOps AI tooling, local vs cloud AI agents, local-first AI development, remote AI supervision, secure AI code executionClaude Code Remote Control lets developers run AI coding agents locally while supervising them from any browser or phone. Anthropic’s local-first approach contrasts with cloud agents and reshapes how teams govern AI-driven ...
Cursor Cloud Agents Get Their Own Computers — and 35% of Internal PRs to Prove It
Tom Smith | | agent-driven development, AI code review, AI coding agents, autonomous software development, CI/CD and AI agents, cloud-based AI development, Cursor cloud agents, devops automation, self-verifying AI code, software engineering automationCursor’s new cloud AI coding agents can build, test, and verify software autonomously using real UI interaction. With 35% of production PRs generated by agents, software delivery is shifting from code authoring ...
Arm Aims to Foster Software Engineering Ecosystem
A CoreCollective initiative was launched today, encouraging software developers that build tools and applications that run on Arm processors to work more collaboratively. Created by Arm in collaboration with Linaro, a provider ...
A Blog Post About COBOL Just Cost IBM $30 Billion. Here’s What Actually Happened.
Tom Smith | | accenture, AI disruption, AI-assisted code analysis, Anthropic, application discovery, AWS, behavioral equivalence validation, Claude Code, COBOL modernization, COBOL to Java, Cognizant, data migration, dependency mapping, Enterprise software, IBM stock drop, IBM Z, legacy application transformation, legacy systems, mainframe modernization, market volatility, microsoft, OpenAI, systems integrators, Wall Street overreaction, watsonx Code Assistant for ZA single Anthropic blog post wiped billions off IBM’s market value—but the AI-driven COBOL modernization it described has existed for years. This is a case study in how AI hype, not fundamentals, ...
AWS Extends Agentic AI Capabilities of Kiro Developer Tool to Improve Code Quality
Amazon Web Services (AWS) has added two additional capabilities to its Kiro artificial intelligence (AI) coding tool that promise to make it simpler to both create higher quality software in the first ...
Harness Makes Registry for Integrating Artifacts into DevOps Workflows Available
Harness today made generally available an Artifact Registry it has added to its portfolio of DevOps tools and platforms. At the same time, Harness also revealed it has added a Dependency Firewall ...
Claude Code Security Finds the Bugs That Static Analysis Can’t — and Wall Street Noticed
Claude Code Security scans code like a human researcher, not a rule engine. Anthropic found 500+ decade-old bugs — and cybersecurity stocks felt it ...
Five Great DevOps Job Opportunities
Mike Vizard | | DevOps architect jobs, DevOps careers, DevOps integration specialist, DevOps job market, devops jobs, high paying DevOps roles, senior DevOps engineer jobsBrowse our weekly DevOps jobs report highlighting high-paying DevOps roles from leading companies including Pax8, JPMorgan Chase, Major League Baseball and more. Explore current opportunities and insights into the DevOps job market ...
Survey: Adoption of AI Software Testing Slowed by Trust Issues
A new global survey from Leapwork underscores a growing tension in software development: while AI is widely viewed as essential to the future of testing, many teams remain hesitant to rely on it for ...
AWS Just Turned “Deploy to AWS” Into a Five-Word Prompt
AWS Agent Plugins give coding agents the skills to architect, estimate costs, and deploy to AWS. Type "deploy to AWS" and the agent handles the rest ...
