News
Broadcom Aims to Better Secure Spring Applications in the AI Era
Broadcom today released a raft of updates to the open source Spring framework for building Java applications to primarily address a wave of vulnerabilities discovered by researchers using artificial intelligence (AI) tools ...
IronWorm Malware Shares Shai-Hulud Traits, Takes Threat to ‘Next Level’
Jeff Burt | | ebpf, IronWorm, jfrog, malware, Miasma, OX Security, Rust programming language, Shai-Hulud worm, software developers, software supply chain attacks, TeamPCPOpen source software developers continue to come under attack, with the latest threat being a custom malware that shares many of the attributes of the notorious Shai-Hulud self-propagating worm but comes with ...
Allstacks Extends Reach of Software Engineering Intelligence Platform to AI Agents
Allstacks this week added a shared workspace capability to its software engineering intelligence platform that makes it simpler for product and software engineering teams to create specifications for artificial intelligence (AI) agents ...
Harness Acquires Codecov to Identify Untested Code
Harness this week acquired Codecov, a provider of a platform that analyzes the percentage of a codebase that has been tested, from Sentry. Brad Rydzewski, a senior vice president and general manager ...
GitHub Copilot Gets Its Own App — and Agents Are the Reason Why
GitHub debuts the Copilot app at Microsoft Build 2026 — an agent-native desktop experience for managing parallel AI agents, canvases, sandboxes, and code review ...
Survey Surfaces Pervasive Adoption of AI Across SDLC
Tricentis survey reveals 68% of orgs use AI in software delivery, but 60% admit to shipping untested code, leading to massive financial and security risks ...
Microsoft Brings AI Agents Directly Into the Windows Terminal
Microsoft's Intelligent Terminal 0.1 brings native AI agent integration to the Windows Terminal. Here's what DevOps engineers need to know ...
Shai-Hulud Clone ‘Miasma’ Compromises 32 Red Hat npm Packages
Jeff Burt | | Aikido Security, CI/CD (Continuous Integration/Continuous Deployment), Cloud Security, credential security, GitHub Actions, leaked secrets, npm malware, Orca Security, Shai-Hulud worm, TeamPCP, WizThe threat group behind the notorious Mini Shai-Hulud worm last month put the complete source code for the malware into a GitHub repository, essentially open sourcing the threat so that other bad ...
xAI Opens Grok Build 0.1 to Developers via API
xAI's Grok Build 0.1 is now available in public beta via the xAI API — a fast, purpose-built coding model for agentic workflows, debugging, and MCP support ...
IBM, Red Hat Launch Project Lightwell to Secure Open Source Software from Frontier Models
Jeff Burt | | AI (Artificial Intelligence), AI security risks, AI vulnerability detection, Anthropic Mythos Preview, frontier AI models, Google Cloud, microsoft, open source software security, OpenAI, Project Glasswing, Project Lightwell, red hatIBM and Red Hat are bringing together what they’ve learned from frontier AI models and 20,000 engineers to launch Project Lightwell, a $5 billion initiative aimed at helping enterprises better secure their ...
Attackers Can Exploit a Claude Code RCE Flaw to Take Command of System
Jeff Burt | | agentic AI, AI (Artificial Intelligence), AI security risks, Anthropic Claude Code, automated parsers, deeplinkA dangerous vulnerability found in Anthropic’s popular Claude Code developer model could have allowed bad actors to grab control of a victim’s system by luring them into clicking on a crafted malicious ...
1Password Allies With OpenAI to Secure Codex AI Coding Tool
Mike Vizard | | AI coding tools, credential security, devsecops, just-in-time credentials, MCP Server, Model Context Protocol, secrets management, Software Supply ChainDevSecOps teams can now manage coding agents as a tenant rather than another vault where secrets might be stored, ensuring credentials are never exposed to an AI agent or LLM as plain ...
