Survey Surfaces Pervasive Adoption of AI Across SDLC
Tricentis survey reveals 68% of orgs use AI in software delivery, but 60% admit to shipping untested code, leading to massive financial and security risks.
Microsoft Brings AI Agents Directly Into the Windows Terminal
Microsoft’s Intelligent Terminal 0.1 brings native AI agent integration to the Windows Terminal. Here’s what DevOps engineers need to know.
Shai-Hulud Clone ‘Miasma’ Compromises 32 Red Hat npm Packages
The threat group behind the notorious Mini Shai-Hulud worm last month put the complete source code for the malware into a GitHub repository, essentially open sourcing the threat so that other bad actors can create their own variants. GitHub reportedly took down the repository shortly after it appeared, but the damage was already done, with […]
xAI Opens Grok Build 0.1 to Developers via API
xAI’s Grok Build 0.1 is now available in public beta via the xAI API — a fast, purpose-built coding model for agentic workflows, debugging, and MCP support.
IBM, Red Hat Launch Project Lightwell to Secure Open Source Software from Frontier Models
IBM and Red Hat are bringing together what they’ve learned from frontier AI models and 20,000 engineers to launch Project Lightwell, a $5 billion initiative aimed at helping enterprises better secure their open source software, work that has become more challenging in the age of such models as Anthropic’s Claude Mythos Preview. Mythos and similarly […]
Attackers Can Exploit a Claude Code RCE Flaw to Take Command of System
A dangerous vulnerability found in Anthropic’s popular Claude Code developer model could have allowed bad actors to grab control of a victim’s system by luring them into clicking on a crafted malicious deeplink. Once in, the attacker could exploit the remote code execution (RCE) security flaw to execute arbitrary commands – such as shell commands […]
1Password Allies With OpenAI to Secure Codex AI Coding Tool
DevSecOps teams can now manage coding agents as a tenant rather than another vault where secrets might be stored, ensuring credentials are never exposed to an AI agent or LLM as plain text. The MCP server does not read or return secret values through the MCP channel, allowing Codex to create environments and invoke applications while the values themselves never leave the 1Password vault.
GitLab Act 2: Still an Open Book
An analysis of GitLab’s “Act 2” transition under CEO Bill Staples, examining whether the company can successfully pivot to an AI-native, agentic software delivery model while dismantling the radically transparent, remote-first culture that originally defined its brand and operational success.
Widespread Mini Shai-Hulud Campaign Is a Matter of Trust
The latest series of attacks using the notorious Shai-Hulud worm puts into sharp focus the threats facing software developers and their CI/CD pipelines, an issue that has been raised in recent months as bad actors increasingly turn their attention to DevOps environments. That said, these most recent Shai-Hulud incidents attributed to the TeamPCP group also […]
xAI Enters the Coding Agent Race With Grok Build
Elon Musk’s xAI has entered the developer workspace with Grok Build, a local-first coding agent featuring an automated “Arena Mode” that runs and ranks parallel AI outputs to rival Anthropic and OpenAI
Survey Surfaces Multiple Challenges Measuring AI Coding Productivity
A Harness survey reveals that while 89% of organizations see AI boosting developer productivity, a third of the workday is consumed by untracked AI tasks like fixing bugs, code reviews, and managing cognitive load
Anthropic Brings AI-Powered Security Scanning to Enterprise Teams With Claude Security
Anthropic’s Claude Security is now in public beta for Enterprise customers, offering AI-powered codebase scanning and patch generation for security teams.
Google CEO Says 75% of New Code is AI-Generated
The era of the “human-only” software engineer is rapidly receding into the rearview mirror. Google CEO Sundar Pichai revealed Wednesday that a whopping 75% of the company’s new code is now generated by artificial intelligence (AI), marking a major shift in how the tech giant builds its products. The velocity of this transition has caught […]
Claude’s Code Quality Conundrum Continues
Anthropic admits to a month-long degradation in Claude’s output due to reasoning “effort” tradeoffs, cache bugs, and verbosity prompts. As Opus 4.7 rolls out with mixed developer reviews, the company is doubling down on “frontier safety” with the restricted Mythos model while leaning on high-profile advisors like Rishi Sunak to navigate global AI regulation.
Musk’s SpaceX Targets AI Dominance with $60 Billion Cursor Deal
Elon Musk’s SpaceX has struck a deal with artificial intelligence (AI) coding sensation Cursor that gives SpaceX the right to acquire the startup for $60 billion later this year or, alternatively, pay $10 billion for a collaborative partnership. The announcement, made Tuesday via Musk’s social media platform X, positions the newly formed “SpaceXAI” to challenge […]
SUSE Extends AI Agent Reach via MCP Server Integration
SUSE collaborates with AWS, n8n, and others to enable AI agents to manage IT infrastructure via Model Context Protocol (MCP) integrations in Rancher Prime and SUSE Multi-Linux Manager.
Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable
A critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, according to researchers with cybersecurity firm Tenable. In an advisory issued April 21, Rémy Marot, staff research engineer at Tenable, wrote that “by […]
Eclipse Foundation Unfurls Managed VSX Registry Service
The Eclipse Foundation launches a paid Open VSX Managed Registry to help industry partners sustainably fund the infrastructure behind VS Code extensions.
Grafana Labs Extends Observability Reach Deeper Into AI
Grafana Labs debuts Grafana 13, a specialized AI application observability platform, and an MCP-powered AI agent at GrafanaCON 2026 to streamline telemetry across complex cloud-native environments.
Lightrun: IT is in the Dark Over Coding Assistant Runtime Visibility
Software runs, but sometimes it doesn’t… and that’s often down to a lack of runtime visibility in relation to platform engineering teams being able to trust coding assistants and AI-powered site reliability engineering (SRE) services.
Why Techstrong is Heading to Prague for SUSECON: Sovereignty, Open Infrastructure and the Future of AI
As enterprises worldwide rethink control of the stack in the age of AI, SUSECON lands at the intersection of sovereignty, open infrastructure and the next generation of enterprise platforms.
Waydev Adds Ability to Track How Much AI Code Winds Up in Production
Waydev revamps its engineering intelligence platform to track AI coding tool ROI, helping DevOps teams measure code quality, acceptance rates, and costs.
SmartBear Extends Scope of API Lifecycle Management Ambitions
SmartBear upgrades its API platform with a revamped Swagger Catalog and AI-driven drift detection to secure the modern API lifecycle against rogue, zombie, and misconfigured endpoints.