News
LocalStack Acquires WonderTwin AI to Gain SaaS App Emulation Platform
LocalStack this week revealed it has acquired WonderTwin AI, a provider of an emulator of software-as-a-service (SaaS) applications that is used to build custom applications for those platforms. Colin Neagle, vice president ...
Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence
Tom Smith | | AI security, critical patch updates, enterprise applications, enterprise Java, FIPS 140-3, harvest now decrypt later, Helidon 27, Java 27, Java security, JavaFX 27, JDK 11, JDK 17, JDK 21, JDK 25, JDK 27, JDK 8, ML-KEM, OpenJDK, Oracle Java, Oracle Jipher, post-quantum cryptography, quantum security, TLS 1.3, virtual threadsJava 27 strengthens enterprise security with monthly critical patch updates and post-quantum TLS 1.3 support, helping organizations prepare for AI-driven threats and future quantum risks ...
More JFrog Artifactory Bugs Are Under Attack, and All Three Have Patches
Tom Smith | | administrative tokens, artifact repositories, authentication bypass, build pipeline security, CI/CD security, CVE-2026-42016, CVE-2026-42018, CVE-2026-82329, Cybersecurity, devsecops, Groovy plugins, JFrog Artifactory, patch management, privilege escalation, Repository Security, Rust backdoors, Software Supply Chain, vulnerability management, web shellsAttackers are actively exploiting three JFrog Artifactory flaws, exposing how slow patching can turn artifact repositories into software supply chain attack paths ...
GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing
Tom Smith | | access control, API security, CI/CD security, credential theft, CVE-2026-85706, CVE-2026-87719, CVSS 10.0, Cybersecurity, devops security, devsecops, gitlab, GitLab Duo, GitLab security, GraphQL security, patch management, Repository Security, self-managed GitLab, Software Supply Chain, vulnerability managementGitLab patches two critical flaws, including a CVSS 10.0 unauthenticated file-read vulnerability, putting self-managed instances under urgent pressure to upgrade ...
GitHub’s August Outages Show Growth Is Outpacing Infrastructure
Tom Smith | | AI coding agents, capacity planning, CI/CD, cloud infrastructure, developer infrastructure, developer productivity, devops, distributed systems, github, GitHub Actions, GitHub Copilot, GitHub outages, incident response, platform engineering, platform reliability, production resilience, retry storms, service availability, software delivery, Software Supply ChainGitHub's August 2026 report details five outages tied to Actions and Copilot growth outpacing infrastructure. Here's what platform teams should know ...
GitHub Widens the Door on Advanced Security Trials
Tom Smith | | AI coding, application security, CodeQL, Developer Security, devsecops, exposed credentials, GHAS, GitHub Advanced Security, GitHub Code Security, GitHub Enterprise Cloud, GitHub Secret Protection, GitHub security, mid-market security, Repository Security, secret scanning, secure software development, Software Supply Chain Security, vulnerability scanningGitHub raised its self-serve Advanced Security trial cap from 100 to 300 licenses, letting more mid-size Enterprise Cloud orgs test for free ...
Flaw in DeepSeek Harness AI Coding Tool Let Agents Disable Their Sandbox
Jeff Burt | | agentic AI security, AI coding agents, AI sandbox, API Keys, DeepSeek Harness, OX Security, VulnCheckNews of the now-fixed vulnerability comes amid growing concerns that AI vendors do not in have complete control of their autonomous agents ...
GitHub Puts Guardrails on Copilot’s Sandbox Inside JetBrains IDEs
Tom Smith | | AI agents, AI coding agents, AI Governance, Copilot sandbox, Developer Security, developer tools, Enterprise AI, filesystem controls, GitHub Copilot, GitHub Copilot JetBrains, IDE security, JetBrains, managed policies, MCP governance, network controls, OpenTelemetry, platform engineering, sandbox security, software developmentJetBrains IDEs are where a lot of enterprise backend work happens — Java, Kotlin, Spring, big monorepos with a lot to break. So when an AI coding agent starts running shell commands ...
Rust’s First Debugging Survey Shows Most Developers Skip the Debugger Entirely
Tom Smith | | async Rust, dbg macro, developer experience, developer tools, GDB, LLDB, platform engineering, print debugging, runtime debugging, Rust compiler, Rust debugger, Rust debugging, Rust developers, Rust tooling, software debugging, software development, systems programming, ustMost Rust developers don't use a debugger. That's the headline finding from the Rust compiler team's first dedicated debugging survey, and it's worth sitting with for a second. Rust has spent years ...
AI Has Turned Verification Into the New DevOps Bottleneck
Alan Shimel | | AI agents, AI code generation, AI code review, AI coding, AI evaluation, AI in DevOps, CI/CD, continuous delivery, developer experience, developer productivity, devops, devops automation, platform engineering, pull requests, Release engineering, software delivery, software pipelines, The Great UnificationThe next DevOps challenge is not generating more software. It is proving, quickly and repeatedly, that a growing volume of machine-generated change is fit to ship ...
GitHub Quietly Fixes One of Dependabot’s Oldest Headaches
GitHub Dependabot can now authenticate to GitHub-hosted package registries without personal access tokens, reducing credential management and supply chain security risk ...
GitHub’s New Copilot Feature Takes the Guesswork Out of Picking AI Models
Tom Smith | | agentic AI, AI agents, AI coding assistants, AI cost optimization, AI Governance, AI model routing, Code Generation, developer tools, devops, github, GitHub Copilot, model selection, multi-model orchestration, platform engineering, Project HydraFusion, software developmentGitHub’s Project HydraFusion brings multi-model orchestration to Copilot, automatically routing coding tasks across AI models to balance quality, cost and complexity ...
