News

Oracle’s new database security tool is free — for six months

The company is looking to address security threats posed by AI models.

By Maxwell Cooter

Aug 14, 20261 min

Application SecurityOracle DatabaseRelational Databases

Google cuts Gemini 3.7 Flash prices as enterprise AI economics diverge and Pro cadence slows

By Gyana Swain

Aug 14, 20265 mins

Artificial IntelligenceDevelopment ToolsGenerative AI

Unplugged holes in the npm and yarn package managers could let attackers bypass defenses against Shai-Hulud

A researcher at Koi Security says the two key platforms have not plugged the vulnerabilities enabling the worm attacks, and ‘the JavaScript ecosystem deserves better.’

By Howard Solomon

Jan 26, 2026 4 mins

Development Tools GitHub JavaScript

Descope introduces Agentic Identity Hub 2.0 for managing AI agents

Update to no-code identity platform allows developers and security teams to manage authorization, access control, credentials, and policies for AI agents and MCP servers.

By Paul Krill

Jan 26, 2026 2 mins

Application Security Generative AI Identity and Access Management

Kotlin-based Ktor 3.4 boosts HTTP client handling

Update to the Kotlin-backed framework brings duplex streaming to the OkHttp client engine and the ability to cancel in-flight HTTP requests when the client disconnects.

By Paul Krill

Jan 26, 2026 2 mins

Kotlin Libraries and Frameworks Programming Languages

Zero-trust data governance needed to protect AI models from slop

Gartner recommends new measures to defend against AI-generated data in the enterprise.

By Maxwell Cooter

Jan 26, 2026 2 mins

Artificial Intelligence Data Governance Generative AI

GitHub Copilot SDK allows developers to build Copilot agents into apps

Available in a technical preview, the SDK for Node.js, Python, Go, and .NET provides programmatic access to the agentic power of the Copilot CLI.

By Paul Krill

Jan 23, 2026 2 mins

Golang Microsoft .NET Python

Go developers meh on AI coding tools – survey

Most Go developers are using AI-powered development tools, but their satisfaction has been hindered by quality concerns, according to the 2025 Go Developer Survey.

By Paul Krill

Jan 23, 2026 3 mins

Golang Programming Languages Software Development

JetBrains IDEs integrate OpenAI Codex

OpenAI’s most advanced agentic coding model is natively integrated into JetBrains AI chat in the 2025.3 version of IntelliJ, PyCharm, WebStorm, Rider, and others.

By Paul Krill

Jan 22, 2026 2 mins

Artificial Intelligence Development Tools Generative AI

Rust 1.93 updates bundled musl library to boost networking

New Rust release brings major improvements to musl’s DNS resolver and tweaks the standard library to aid global allocators.

By Paul Krill

Jan 22, 2026 2 mins

Programming Languages Rust Software Development

MuleSoft gains Agent Scanners to rein in enterprise AI chaos

The new Agent Scanners feature automatically detects and catalogs AI agents across platforms like Copilot, Vertex AI, Bedrock, and Agentforce — giving CIOs long‑missing visibility into fragmented, shadow AI deployments.

By Anirban Ghoshal

Jan 22, 2026 4 mins

Artificial Intelligence Development Tools Software Development

jQuery 4.0.0 JavaScript library features trusted types

The first major update in nearly 10 years, jQuery 4.0.0 follows a long development cycle and several pre-releases.

By Paul Krill

Jan 21, 2026 3 mins

Development Approaches JavaScript Web Development

The platform warns users of on-premises versions to upgrade to the latest versions; SaaS and web versions have been patched.

By Howard Solomon

Jan 21, 2026 6 mins

Access Control Authentication Multifactor Authentication

Three vulnerabilities in Anthropic Git MCP Server could let attackers tamper with LLMs

Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told.

By Howard Solomon

Jan 20, 2026 6 mins

Artificial Intelligence Security Vulnerabilities

ClickHouse buys Langfuse as data platforms race to own the AI feedback loop

Analysts say the acquisition positions ClickHouse to help enterprises run AI more reliably and transparently by pairing high‑performance analytics with native LLM observability tools.

By Anirban Ghoshal

Jan 19, 2026 4 mins

Artificial Intelligence Data Management Databases

Astro web framework maker merges with Cloudflare

The merger with Cloudflare follows the release of Astro 6 beta, which features development server updates to improve Astro’s stability on all runtimes.

By Paul Krill

Jan 16, 2026 2 mins

Development Approaches Software Development Web Development

Visual Studio Code adds agent development extension

The Copilot Studio extension lets developers use any VS Code-compatible AI assistant to develop AI agents, then sync with Copilot Studio for testing and iteration.

By Paul Krill

Jan 16, 2026 2 mins

Development Tools Integrated Development Environments Visual Studio Code

Google tests BigQuery feature to generate SQL queries from English

The ability to write parts of SQL queries in natural language will help developers speed up their work, analysts say.

By Anirban Ghoshal

Jan 16, 2026 4 mins

Big Data Natural Language Processing SQL

Google Vertex AI security permissions could amplify insider threats

A new way to escalate privileges inside Google’s Vertex AI highlights a broader problem: Enterprises have a level of trust in AI offerings that needs to be fundamentally reexamined.

By Evan Schuman

Jan 16, 2026 5 mins

Artificial Intelligence Generative AI Identity and Access Management

MongoDB releases mongot source code to boost RAG and AI workloads

By releasing the code behind its search and vector engine under the SSPL, MongoDB is giving self‑managed users new visibility and control, helping developers build more reliable, production‑grade RAG systems.

By Anirban Ghoshal

Jan 16, 2026 4 mins

Artificial Intelligence Data Management Databases

PHP language still relevant, advocate insists

Perforce Zend official compared PHP with Python and Java in a blog post, stressing the continued importance of the ‘silent workhorse of the modern web.’

By Paul Krill

Jan 16, 2026 3 mins

Java PHP Python

Possible software supply chain attack through AWS CodeBuild service blunted

Researchers at Wiz, who discovered the hole, said it could have led to compromised AWS GitHub repositories.

By Howard Solomon

Jan 15, 2026 5 mins

Development Tools GitHub Security

Gleam update shines on external types

Type-safe language for the Erlang VM and JavaScript runtimes now supports external annotations for external types.

By Paul Krill

Jan 15, 2026 2 mins

JavaScript Programming Languages TypeScript

From typos to takeovers: Inside the industrialization of npm supply chain attacks

A dramatic spike in npm-focused intrusions shows how attackers have shifted from opportunistic typosquatting to systematic, credential-driven supply chain compromises — exploiting CI systems, maintainers, and deep weaknesses in modern DevOps pipeline

By Shweta Sharma

Jan 15, 2026 6 mins

Development Tools Security Software Development

Compose Multiplatform brings auto-resizing to interop views

Update of Kotlin-based UI framework enables native interop elements on desktop and iOS to adapt their layout to their content.

By Paul Krill

Jan 14, 2026 3 mins

Kotlin Libraries and Frameworks Programming Languages

Output from vibe coding tools prone to critical security flaws, study finds

Vibe code needs careful debugging to avoid introducing vulnerabilities, says Tenzai.

By John E. Dunn

Jan 14, 2026 5 mins

Artificial Intelligence Development Tools Vulnerabilities

Chinese AI firm trains state-of-the-art model entirely on Huawei chips

Zhipu’s GLM-Image demonstrates viability of domestic alternatives amid US export restrictions

By Gyana Swain

Jan 14, 2026 4 mins

Artificial Intelligence Generative AI

Anthropic expands Claude Code beyond developer tasks with Cowork

Analysts predict that the new assistant will gain traction in knowledge-driven roles, particularly in environments where clear guardrails and governance can be established.

By Anirban Ghoshal

Jan 14, 2026 3 mins

Artificial Intelligence Development Tools Generative AI

Java 27 gets its first feature

JDK 27, due in September, kicks off with a post-quantum hybrid key exchange proposal to bolster the security of network communications.

By Paul Krill

Jan 13, 2026 2 mins

Java Programming Languages Software Development

Google’s Universal Commerce Protocol aims to simplify life for shopping bots… and devs

Agentic AI is struggling with the complexity and variety of real-world commerce, so Google and others are helping enterprises standardize interactions with online shopping bots.

By Maxwell Cooter

Jan 13, 2026 4 mins

APIs Artificial Intelligence Software Development

Oracle unveils Java development plans for 2026

OpenJDK project teams will focus work on features such as value types, code reflection, AOT compilation, and structured concurrency in the coming year.

By Paul Krill

Jan 12, 2026 3 mins

Java Programming Languages Software Development

AI is causing developers to abandon Stack Overflow

Many are also tired of being treated like idiots by other users.

By Mikael Markander

Jan 12, 2026 2 mins

Artificial Intelligence Generative AI Software Development

Postman snaps up Fern to reduce developer friction around API documentation and SDKs

By acquiring Fern, Postman is aiming to bridge developer experience gaps that hinder API adoption and drive up integration and support costs for enterprises, analysts say.

By Anirban Ghoshal

Jan 12, 2026 3 mins

APIs Software Development

Visual Studio Code adds support for agent skills

An experimental feature in VS Code 1.108, Agent Skills are folders of instructions, scripts, and resources that GitHub Copilot can load for specialized tasks.

By Paul Krill

Jan 9, 2026 3 mins

Development Tools Integrated Development Environments Visual Studio Code

Snowflake to acquire Observe to boost observability in AIops

The acquisition could position Snowflake as a control plane for production AI, giving CIOs visibility across data, models, and infrastructure without the pricing shock of traditional observability stacks, analysts say.

By Anirban Ghoshal

Jan 9, 2026 3 mins

Artificial Intelligence Software Development

Microsoft open-sources XAML Studio

Forthcoming update of the rapid prototyping tool for WinUI developers, now available on GitHub, adds a new Fluent UI design, folder support, and a live properties panel.

By Paul Krill

Jan 8, 2026 1 min

Development Tools Integrated Development Environments Visual Studio

Databricks says its Instructed Retriever offers better AI answers than RAG in the enterprise

Databricks says Instructed Retriever outperforms RAG and could move AI pilots to production faster, but analysts warn it could expose data, governance, and budget gaps that CIOs can’t ignore.

By Anirban Ghoshal

Jan 8, 2026 5 mins

Artificial Intelligence Generative AI

AI-built Rue language pairs Rust memory safety with ease of use

Developed using Anthropic’s Claude AI model, the new language is intended to provide memory safety without garbage collection while being easier to use than Rust and Zig.

By Paul Krill

Jan 7, 2026 2 mins

Generative AI Programming Languages Rust

Microsoft acquires Osmos to ease data engineering bottlenecks in Fabric

The acquisition could help enterprises push analytics and AI projects into production faster while acting as the missing autonomy layer that connects Fabric’s recent enhancements into a coherent system.

By Anirban Ghoshal

Jan 7, 2026 4 mins

Analytics Artificial Intelligence Data Engineering

AI won’t replace human devs for at least 5 years

Progress towards full AI-driven coding automation continues, but in steps rather than leaps, giving organizations time to prepare, according to a new study.

By Taryn Plumb

Jan 7, 2026 7 mins

Artificial Intelligence Developer Roles

Automated data poisoning proposed as a solution for AI theft threat

For hackers, the stolen data would be useless, but authorized users would have a secret key that filters out the fake information.

By Howard Solomon

Jan 7, 2026 6 mins

Artificial Intelligence Data Privacy Privacy

Ruby 4.0.0 introduces ZJIT compiler, Ruby Box isolation

Ruby Box is an experimental feature that provides separate spaces in a Ruby process to isolate application code, libraries, and monkey patches.

By Paul Krill

Jan 6, 2026 3 mins

Programming Languages Ruby Software Development

Open WebUI bug turns the ‘free model’ into an enterprise backdoor

The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote code execution on enterprise AI backends.

By Shweta Sharma

Jan 6, 2026 3 mins

Artificial Intelligence Security Vulnerabilities

C# wins Tiobe Programming Language of the Year honors for 2025

C# saw the largest increase in ranking in the index year over year, while Java held steady, C and C++ swapped positions, R and Perl rose, and Go and Ruby faded.

By Paul Krill

Jan 5, 2026 4 mins

C# Java JavaScript

Critical vulnerability in IBM API Connect could allow authentication bypass

Rated 9.8 out of 10 in severity, the flaw could allow a remote attacker to gain unauthorized access to applications.

By Lynn Greiner

Dec 31, 2025 5 mins

Artificial Intelligence Development Tools Security

Nvidia licenses Groq’s inferencing chip tech and hires its leaders

This non-acquisition could help Nvidia diversify its supply chains and address new markets, while limiting antitrust scrutiny.

By Peter Sayer

Dec 30, 2025 4 mins

Artificial Intelligence Generative AI

React2Shell: Anatomy of a max-severity flaw that sent shockwaves through the web

The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default framework trust.

By Shweta Sharma

Dec 29, 2025 6 mins

Development Tools Security Vulnerabilities

High severity flaw in MongoDB could allow memory leakage

The company advises customers to upgrade immediately, or if they can’t, to disable zlib compression.

By Lynn Greiner

Dec 26, 2025 2 mins

Databases NoSQL Databases Vulnerabilities

Microsoft is not rewriting Windows in Rust

But an internal research project is looking at ways to automate the translation of millions of lines of code per month into other languages.

By Peter Sayer

Dec 24, 2025 2 mins

Artificial Intelligence Development Tools Generative AI

Deno adds tool to run NPM and JSR binaries

Latest update to the Node.js rival also brings more granular control over permissions and a faster, experimental type checker.

By Paul Krill

Dec 23, 2025 3 mins

JavaScript TypeScript WebAssembly

Rust vision group seeks enumeration of language design goals

Group’s recommendations to help Rust continue to scale across domains and usage levels center on design goals, extensibility, and the crates.io ecosystem.

By Paul Krill

Dec 23, 2025 3 mins

Programming Languages Rust Software Development

WhatsApp API worked exactly as promised, and stole everything

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing messages and maintaining persistence.

By Shweta Sharma

Dec 23, 2025 4 mins

APIs Security Software Development