News
GitHub Hit by Widespread Outage, Halting Work for Global Developers
Jon Swartz | | AI coding, Anthropic, API, cloudbees, Cursor, Downdetector, error rates, github, GitHub Actions, GitHub Copilot, GitHub outages, microsoft, Microsoft Teams, OpenAI, SAML, service monitoring forums, Social media, Team SyncA major technical outage struck GitHub on Monday morning, disrupting workflows for millions of developers worldwide for several hours as critical services, automated testing pipelines, and artificial intelligence (AI) coding tools suffered ...
Dynatrace Acquires Arize as AI Agents Deepen the Observability Challenge
Dynatrace announced Thursday it has agreed to acquire AI observability company Arize in a $915 million cash and stock transaction. Rick McConnell, CEO of Dynatrace, said the company expects demand for AI ...
GitHub Copilot’s Latest Update Bets on Model Choice, Not Model Loyalty
Tom Smith | | Agent Plugins 1.0, AI agents, AI coding tools, Claude model switching, Copilot CLI, Copilot Memory, Copilot updates, developer tools, devops, GitHub Copilot, GitHub Copilot models, Kimi K3, MAI-Code-1.1-Flash, Ollama, platform engineering, VS Code 1.133GitHub’s latest Copilot updates add Kimi K3, MAI-Code-1.1-Flash, Agent Plugins 1.0, model switching, CLI improvements, and local Ollama support ...
Microsoft Decouples AI Agents From the VS Code Editor in Latest Release
Microsoft has shipped Visual Studio Code 1.133, and the headline change is architectural rather than cosmetic: AI agent sessions now run in a dedicated background process rather than within the editor's extension ...
LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK
Jeff Burt | | AI infrastructure, AI supply chain attacks, AI-driven CI/CD pipelines, Aqua Security Trivy, CloudSEK, code repositories, FBI, information stealing, LiteLLM, malware, Mini Shai-Hulud, PyPi, TeamPCPThe massive supply-chain attack that compromised LiteLLM in the spring affected more than 2,500 companies and exposed about 434,000 CI/CD pipelines, with victims ranging from top-tier IT and AI companies to cybersecurity ...
Anthropic Makes Claude Code’s Auto Mode the Default, Betting Automation Beats Manual Review
Tom Smith | | agent permissions, agentic coding, AI code generation, AI coding agents, AI Governance, AI guardrails, AI permissions, AI safety, AI security, Anthropic, autonomous coding agents, Claude Code, Claude Code auto mode, Claude Code security, coding automation, developer productivity, developer tools, human engineering the loop, human-in-the-loop, permission fatigue, prompt injection, Pull Request Automation, secure AI agents, software development, software engineeringAnthropic is making Claude Code’s auto mode the default for Pro, Max and Team users, replacing constant permission prompts with classifier-based guardrails designed to catch risky actions without slowing developers down ...
‘Flooding Dropper’ Is Hitting npm With a Tidal Wave of Malicious Packages
Jeff Burt | | Flooding Dropper, linux, macOS, malicious npm packages, Microsoft Windows, naming conventions, open source threats, OpenSourceMalware, sonatypeThreat researchers at Sonatype are warning developers of an expanding campaign that is generating a wide range of npm accounts and dropping small numbers of malicious packages from each one, essentially flooding ...
AWS Adds Agentic Workspace to Kiro AI Coding Tool
Amazon Web Services (AWS) this week added an open source workspace for its Kiro artificial intelligence (AI) coding tool that enables application developers to asynchronously assign tasks to an AI agent that ...
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Jeff Burt | | Aikido Security, AWS, credential theft, GitHub Actions, HashiCorp Terraform, npm malware, Shai-Hulud worm, supply chain attackResearchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ...
N. Korea Group Behind Multiple Open Source Supply-Chain Attacks: Amazon
Jeff Burt | | Amazon, Axios, chalk package, Contagious Interview, generative AI, google, malicious npm packages, microsoft, North Korea, open source libraries, software supply chain attacks, typo-crypto, WizAmazon’s recent report attributing a series of compromises of open source software libraries to a North Korea-backed threat group encapsulates many of the expanding cyber risks increasingly facing developers, from the growing ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Microsoft Confirms Copilot ‘Super App’ Is Coming This Year — and It’s About More Than Convenience
Tom Smith | | Agent 365, agent sprawl, AI agents, AI identity management, autonomous agents, Copilot Chat, Copilot Code, Copilot consolidation, Copilot Cowork, enterprise AI governance, GitHub Copilot, Microsoft 365 Copilot, Microsoft Autopilots, Microsoft Copilot super app, Microsoft Entra Agent ID, One CopilotMicrosoft is combining Copilot Chat, Code, Cowork and Autopilots into one super app, raising new questions about agent governance, identity, licensing and security ...
