News
Survey Surfaces Emerging DevOps Bottlenecks in the AI Coding Era
New Black Duck survey reveals AI coding tools boost developer productivity but create critical bottlenecks in manual reviews, code rework, and security vulnerabilities ...
GitHub Takes Down 73 Microsoft Repos After Miasma Worm Attack
Tom Smith | | AI coding tools, credential harvesting, Cybersecurity, developer environment, GitHub breach, IDE vulnerabilities, Miasma worm, Microsoft Azure, Shai-Hulud malware, Software Supply Chain SecurityGitHub pulled 73 Microsoft repositories offline after the self-replicating Miasma worm weaponized IDEs and AI coding tools to harvest developer credentials ...
Broadcom Aims to Better Secure Spring Applications in the AI Era
Broadcom today released a raft of updates to the open source Spring framework for building Java applications to primarily address a wave of vulnerabilities discovered by researchers using artificial intelligence (AI) tools ...
IronWorm Malware Shares Shai-Hulud Traits, Takes Threat to ‘Next Level’
Jeff Burt | | ebpf, IronWorm, jfrog, malware, Miasma, OX Security, Rust programming language, Shai-Hulud worm, software developers, software supply chain attacks, TeamPCPOpen source software developers continue to come under attack, with the latest threat being a custom malware that shares many of the attributes of the notorious Shai-Hulud self-propagating worm but comes with ...
Allstacks Extends Reach of Software Engineering Intelligence Platform to AI Agents
Allstacks this week added a shared workspace capability to its software engineering intelligence platform that makes it simpler for product and software engineering teams to create specifications for artificial intelligence (AI) agents ...
Harness Acquires Codecov to Identify Untested Code
Harness this week acquired Codecov, a provider of a platform that analyzes the percentage of a codebase that has been tested, from Sentry. Brad Rydzewski, a senior vice president and general manager ...
GitHub Copilot Gets Its Own App — and Agents Are the Reason Why
GitHub debuts the Copilot app at Microsoft Build 2026 — an agent-native desktop experience for managing parallel AI agents, canvases, sandboxes, and code review ...
Survey Surfaces Pervasive Adoption of AI Across SDLC
Tricentis survey reveals 68% of orgs use AI in software delivery, but 60% admit to shipping untested code, leading to massive financial and security risks ...
Microsoft Brings AI Agents Directly Into the Windows Terminal
Microsoft's Intelligent Terminal 0.1 brings native AI agent integration to the Windows Terminal. Here's what DevOps engineers need to know ...
Shai-Hulud Clone ‘Miasma’ Compromises 32 Red Hat npm Packages
Jeff Burt | | Aikido Security, CI/CD (Continuous Integration/Continuous Deployment), Cloud Security, credential security, GitHub Actions, leaked secrets, npm malware, Orca Security, Shai-Hulud worm, TeamPCP, WizThe threat group behind the notorious Mini Shai-Hulud worm last month put the complete source code for the malware into a GitHub repository, essentially open sourcing the threat so that other bad ...
xAI Opens Grok Build 0.1 to Developers via API
xAI's Grok Build 0.1 is now available in public beta via the xAI API — a fast, purpose-built coding model for agentic workflows, debugging, and MCP support ...
IBM, Red Hat Launch Project Lightwell to Secure Open Source Software from Frontier Models
Jeff Burt | | AI (Artificial Intelligence), AI security risks, AI vulnerability detection, Anthropic Mythos Preview, frontier AI models, Google Cloud, microsoft, open source software security, OpenAI, Project Glasswing, Project Lightwell, red hatIBM and Red Hat are bringing together what they’ve learned from frontier AI models and 20,000 engineers to launch Project Lightwell, a $5 billion initiative aimed at helping enterprises better secure their ...
