News
Attackers Can Exploit a Claude Code RCE Flaw to Take Command of System
Jeff Burt | | agentic AI, AI (Artificial Intelligence), AI security risks, Anthropic Claude Code, automated parsers, deeplinkA dangerous vulnerability found in Anthropic’s popular Claude Code developer model could have allowed bad actors to grab control of a victim’s system by luring them into clicking on a crafted malicious ...
1Password Allies With OpenAI to Secure Codex AI Coding Tool
Mike Vizard | | AI coding tools, credential security, devsecops, just-in-time credentials, MCP Server, Model Context Protocol, secrets management, Software Supply ChainDevSecOps teams can now manage coding agents as a tenant rather than another vault where secrets might be stored, ensuring credentials are never exposed to an AI agent or LLM as plain ...
GitLab Act 2: Still an Open Book
Alan Shimel | | AI agents, Bill Staples, business transformation, corporate culture, devops, gitlab, software development, tech layoffs, transparencyAn analysis of GitLab’s "Act 2" transition under CEO Bill Staples, examining whether the company can successfully pivot to an AI-native, agentic software delivery model while dismantling the radically transparent, remote-first culture ...
Widespread Mini Shai-Hulud Campaign Is a Matter of Trust
Jeff Burt | | 360 Privacy, AI supply chain attacks, Aikido Security, CI/CD security, credentials, Endor Labs, npm malware, Pathlock, Sectigo, Shai-Hulud worm, TeamPCP, trust in technologyThe latest series of attacks using the notorious Shai-Hulud worm puts into sharp focus the threats facing software developers and their CI/CD pipelines, an issue that has been raised in recent months ...
xAI Enters the Coding Agent Race With Grok Build
Tom Smith | | AI developer workflow, Anthropic Claude Code, Arena Mode, coding agent, devops tools, grok-code-fast-1, local-first code, multi-agent architecture, xAI Grok BuildElon Musk's xAI has entered the developer workspace with Grok Build, a local-first coding agent featuring an automated "Arena Mode" that runs and ranks parallel AI outputs to rival Anthropic and OpenAI ...
Survey Surfaces Multiple Challenges Measuring AI Coding Productivity
Mike Vizard | | AI coding tools, AI slop, code review, developer burnout, developer productivity metrics, Harness survey, software engineering, technical debt, token-maxxingA Harness survey reveals that while 89% of organizations see AI boosting developer productivity, a third of the workday is consumed by untracked AI tasks like fixing bugs, code reviews, and managing ...
Anthropic Brings AI-Powered Security Scanning to Enterprise Teams With Claude Security
Tom Smith | | AI codebase scanning, Anthropic Claude Security, automated security patching, Claude Enterprise beta, Claude Mythos model, Claude Opus 4.7, cybersecurity agentic workflows, devsecops automation, Project Glasswing, static analysis alternative, vulnerability remediationAnthropic's Claude Security is now in public beta for Enterprise customers, offering AI-powered codebase scanning and patch generation for security teams ...
Google CEO Says 75% of New Code is AI-Generated
Jon Swartz | | AI agents, AI coding, Claude Code, google, Google DeepMind, Google Gemini, Meta Platforms, microsoft, Snap, Stanford University, Sundar PichaiThe era of the "human-only" software engineer is rapidly receding into the rearview mirror. Google CEO Sundar Pichai revealed Wednesday that a whopping 75% of the company’s new code is now generated ...
Claude’s Code Quality Conundrum Continues
Adrian Bridgwater | | Agent SDK, ai, automation, Claude Code, Claude Mythos, cloud, cloud-native, culture, developers, Model Degradation, open source, Test-Time-Compute, zero-day vulnerabilitiesAnthropic admits to a month-long degradation in Claude's output due to reasoning "effort" tradeoffs, cache bugs, and verbosity prompts. As Opus 4.7 rolls out with mixed developer reviews, the company is doubling ...
Musk’s SpaceX Targets AI Dominance with $60 Billion Cursor Deal
Jon Swartz | | acquisition, Andreessen Horowitz, Anthropic, AWS, Colossus supercomputer, Composer model, Cursor, Elon Musk, google, H100 chips, hyperscalers, IPO, microsoft, neocloud, NVIDIA, OpenAI, Sam Altman, SEC, SpaceX, The New York Times, vibe coding, xAIElon Musk’s SpaceX has struck a deal with artificial intelligence (AI) coding sensation Cursor that gives SpaceX the right to acquire the startup for $60 billion later this year or, alternatively, pay ...
SUSE Extends AI Agent Reach via MCP Server Integration
Mike Vizard | | AI agents, automation, AWS, IT infrastructure, kubernetes, linux, MCP, Model Context Protocol, Rancher Prime, SUSE, SUSE Multi-Linux Manager, SUSECON 2026SUSE collaborates with AWS, n8n, and others to enable AI agents to manage IT infrastructure via Model Context Protocol (MCP) integrations in Rancher Prime and SUSE Multi-Linux Manager ...
Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable
Jeff Burt | | Aqua Security Trivy, CI/CD cyberthreats, exposed secrets, GitHub Actions, IANS Research, malicious code, microsoft, OWASP Top 10, remote code execution, software development security, software supply chain attacks, software vulnerabilities, TenableA critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, ...
