Spotify’s Portal for Backstage routes routine coding-agent tasks to cheaper models, reducing the amount of frontier-model ...

In late July, Oracle released a mammoth security patch dump with 1,449 patches, in a perhaps unprecedented bad day for ...

TL;DR A recently circulated Log4j finding demonstrates a reproducible bypass of a defense-in-depth deserialization control ...

Static application security testing, or SAST, is most useful when it is close to the way your team actually writes code. That is where Semgrep becomes valuable. It can scan source code quickly, fit ...

Anthropic’s Claude Code running Opus 5 in Auto Mode can be tricked into executing attacker-controlled code simply by asking ...

Too many organisations rely on the same software components, cloud platforms, and technology providers; this creates a ...

MCP server in Compose Hot Reload allows agents to trigger reloads, take screenshots, inspect the semantic tree, simulate text ...

Chinese lab Z.ai has been identified as the company behind Ox Alpha, the anonymous coding model. The model drew millions of ...

Anthropic plans to make MHS available under an open-source license. The AI provider says that the standard will enable agents ...

The Gradle project is launching Agentic Gradle to make its build system easier for AI coding agents to use through official skills, benchmarks, and potential changes to Gradle itself.

Hardened container images reduce CVEs and attack surfaces. Learn how they work, compare vendor approaches and understand ...

Migrations used to be so painful that vendors could get lazy. Now AI does the grunt work, so you can negotiate harder and go after locked-in customers.