AWS Emulator: Open-source tool for testing AWS apps locally, built by autonomous AI agents 2026-11-12 at 11:30 By Anamarija Pogorelec Amazon Web Services has released AWS Emulator, a free tool that simulates AWS services on a developer’s laptop, a development server or in a continuous integration (CI) pipeline. The company says autonomous AI agents wrote […]
.NET 11 security changes target the software supply chain 2026-11-12 at 10:23 By Anamarija Pogorelec Microsoft has released .NET 11, a Standard Term Support (STS) release that will receive two years of support. .NET 10 is still the Long Term Support (LTS) option. The release covers C# 15, ASP.NET Core, .NET MAUI, and Windows development. […]
.NET 11 security changes target the software supply chain Read More »
PyPI makes release attestations easier to find with new security tab 2026-11-09 at 15:23 By Anamarija Pogorelec The Python Package Index (PyPI) has added a security tab to its project pages, giving developers a place to check where individual release files came from. How PyPI shows where release files came from The Security tab shows […]
PyPI makes release attestations easier to find with new security tab Read More »
99% of repository access tokens never expire 2026-11-06 at 07:30 By Anamarija Pogorelec Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State […]
99% of repository access tokens never expire Read More »
AI coding agents are installing MCP servers that will never be patched 2026-11-03 at 07:45 By Mirko Zorz When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository […]
AI coding agents are installing MCP servers that will never be patched Read More »
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work 2026-11-02 at 09:09 By Anamarija Pogorelec Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for […]
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work Read More »
GitHub’s npm package firewall can block brand-new versions before they install 2026-10-28 at 19:09 By Mirko Zorz GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. […]
GitHub’s npm package firewall can block brand-new versions before they install Read More »
AI slop is piling up highest on the biggest open-source projects 2026-10-26 at 08:30 By Mirko Zorz The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close […]
AI slop is piling up highest on the biggest open-source projects Read More »
Anthropic finds 94 cases where open-source projects drop security controls without warning 2026-10-22 at 12:10 By Anamarija Pogorelec Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and […]
AI coding boom exposes cracks in cloud development 2026-10-22 at 07:30 By Anamarija Pogorelec Developers are encountering bugs, testing delays and disruptions in shared cloud environments as AI increases the volume of code they produce, according to LocalStack’s 2026 State of AI in Cloud Development report. More code adds to the testing workload Sixty-five percent […]
AI coding boom exposes cracks in cloud development Read More »
Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier 2026-10-21 at 06:42 By Anamarija Pogorelec Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units. Google also announced TPU support in the vLLM and SGLang serving engines, the TorchTitan training framework, […]
Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier Read More »
AI-generated changes create review bottlenecks in software delivery 2026-10-15 at 07:30 By Anamarija Pogorelec 83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD in 2026 report. Adoption exceeds that of containerisation and orchestration, infrastructure as code, GitOps […]
AI-generated changes create review bottlenecks in software delivery Read More »
What makes some open source updates so difficult? 2026-10-12 at 07:00 By Anamarija Pogorelec Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of an open […]
What makes some open source updates so difficult? Read More »
Apple tightens macOS disk access as AI agents become more powerful 2026-10-05 at 11:11 By Anamarija Pogorelec Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous. Users will need to take explicit action to grant apps this permission. The company […]
Apple tightens macOS disk access as AI agents become more powerful Read More »
North Korea’s job interview scam runs both ways 2026-09-21 at 15:27 By Zeljka Zorz Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive opportunities to compromise their devices and accounts and, ultimately, publish malware. The warning came last week from the Rust Project’s crates.io team […]
North Korea’s job interview scam runs both ways Read More »
Microsoft’s Project Zenith puts large AI models directly on developer PCs 2026-09-08 at 07:30 By Anamarija Pogorelec Microsoft’s Project Zenith is a ready-to-code Windows 11 experience for developer-class PCs capable of running AI models with more than 30 billion parameters locally without relying on metered cloud tokens. Designed for systems with at least 64 GB […]
Microsoft’s Project Zenith puts large AI models directly on developer PCs Read More »
CISA review makes the case for eliminating vulnerability classes 2026-09-01 at 18:23 By Zeljka Zorz For years, the security industry has treated vulnerabilities as an endless queue of individual fixes. A recent CISA review argues that this is precisely why attackers keep winning. The solution to this problem, they believe, is eliminating entire categories of […]
CISA review makes the case for eliminating vulnerability classes Read More »
Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) 2026-08-26 at 13:59 By Zeljka Zorz Attackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability in the Gitea Git platform, CISA confirmed on Tuesday by adding the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The KEV entry does not contain or point to details […]
Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) Read More »
Google’s $10,000 refund test shows why AI agents need zero trust 2026-08-18 at 14:49 By Anamarija Pogorelec Google’s open-source autonomous Customer Support & Returns Agent, built using the Agent Development Kit (ADK) and Gemini, demonstrates how developers can apply zero-trust security principles to AI agents that interact with sensitive systems and take real-world actions. The […]
Google’s $10,000 refund test shows why AI agents need zero trust Read More »
Microsoft shortens NuGet API key lifetime to improve supply chain security 2026-08-04 at 11:30 By Anamarija Pogorelec Microsoft is reducing the lifetime of new NuGet.org API keys from 365 days to 30 days starting August 17, 2026, to improve the security of NuGet, its package repository for .NET developers. API keys created before August 17 […]
Microsoft shortens NuGet API key lifetime to improve supply chain security Read More »