Features
North Korea Expands the Reach of PolinRider Supply Chain Attack Campaign
Jeff Burt | | AI supply chain attacks, APT37, Chrome Store, Contagious Interview, devops, devsecops, Famous Chollima, Go modules, Lazarus Group, malicious npm packages, North Korea, package registry malware, Packagist, PolinRider, Rescana, Socket, supply chainThe North Korean-sponsored threat groups behind the long-running fake interview scams targeting developers are expanding the PolinRider supply chain campaign that has escalated over the past several months. Reports from cybersecurity vendors ...
Pentagon Campaign Seeks Engineers for Defense AI and Software Modernization
The Pentagon has announced the launch of War Force, a recruiting campaign for software engineers whose work would support multiple defense AI and modernization projects. The campaign is being run in partnership ...
‘GitLost’ Flaw Lets Attackers Trick GitHub AI Agent Into Leaking Private Repos
Jeff Burt | | Acalvio, agentic AI guardrails, AI security, Anthropic Claude, Forcepoint, GitHub Agentic Workflows, indirect prompt injection, LLM, Markdown, Microsoft Copilot, Noma Security, private repository, public repositoryNoma researchers again show how easy it is to manipulate AI agents with malicious commands via indirect prompt injection attacks ...
Block Details Builderbot Framework for Orchestrating AI Agents Across SDLC
The software engineers at Block have developed an orchestration layer they are using to manage artificial intelligence (AI) agents that have been trained to automate multiple tasks across their software development lifecycle ...
Novee Uncovers Cordyceps: The Latest Threat to CI/CD Pipelines
Jeff Burt | | AI coding agents, apache, CI/CD security, Cloudflare, code repositories, Cordyceps, GitHub Actions, google, microsoft, Novee, npm malware, PyPi, Python, supply chain attacks, WizA newly discovered supply chain security flaw is once again putting a spotlight on inherent weaknesses in CI/CD pipelines and the growing interest among cyberthreat actors to exploit them. Security researchers with ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Mistral Releases Leanstral 1.5, an Open Model That Solved 587 of 672 Putnam Math Problems
Mistral's open Leanstral 1.5 model solved 587 of 672 Putnam math problems and is already finding real bugs in open-source code ...
Z.ai Debuts ZCode to Compete With GitHub Copilot, Cursor and Anthropic
Chinese AI developer Z.ai has introduced ZCode, a desktop application that automates software development tasks, positioning the platform to compete with established coding platforms from Anthropic, GitHub and Cursor. The company built ...
Lightrun Adds Ability to Assess Impact Pull Request Will Have in Production
Lightrun is providing early access to an ability to verify whether a pull request (PR) will actually run in a production environment as part of its artificial intelligence (AI) platform for automating ...
Ornith Models Automate Agentic Coding With Self-Scaffolding
Ornith, a new family of open source LLM models from the DeepReinforce research collective, takes a novel approach to executing coding and debugging tasks: It generates an architectural framework to give the ...
Anthropic Adds Enterprise Gateway to Simplify Claude Code Access on AWS and Google Cloud
Tom Smith | | AI coding tools, AI Governance, cost control, Enterprise AI, Google Workspace, identity management, OTLP, policy enforcement, self-hosted gateway, single sign-on, spend caps, spend management, SSO, telemetry, usage trackingAnthropic's new Claude apps gateway brings SSO, central policy, and spend caps to Claude Code on Amazon Bedrock and Google Cloud ...
OpenAI Expands Into Developer Hardware With Codex Micro Keyboard
OpenAI is preparing to launch its first branded hardware product, but rather than entering the crowded consumer device market, the company is starting with a tool designed specifically for software developers. The ...
