News

Metabase SQLi exploit grants attackers total access

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

By Taryn Plumb

Aug 11, 20265 mins

DatabasesVulnerabilitiesZero-Day Vulnerabilities

Airtable joins Evernote, Brightcove, WeTransfer and AOL in Bending Spoons portfolio

By Maxwell Cooter

Aug 7, 20262 mins

No Code and Low CodeSoftware Development

Microsoft previews C++ code editing tools for GitHub Copilot

Public preview of Microsoft’s C++ tools for the AI coding assistant are available in Visual Studio 2026 Insiders.

By Paul Krill

Dec 22, 2025 2 mins

C++ Generative AI Programming Languages

Snowflake software update caused 13-hour outage across 10 regions

Cloud data platform’s backward-incompatible database schema change left customers unable to query data or ingest files

By Gyana Swain

Dec 19, 2025 5 mins

Analytics Cloud Storage Data Warehousing

AI-assisted coding creates more problems – report

Citing issues with logic, correctness, and security, a new report recommends specific guardrails for AI-generated code.

By Paul Krill

Dec 19, 2025 4 mins

App Testing Application Security Development Tools

React2Shell is the Log4j moment for front end development

Attackers are exploiting a Flight protocol validation failure that allows them to execute arbitrary code without authentication.

By Taryn Plumb

Dec 18, 2025 6 mins

Development Approaches React Web Development

Python type checker ty now in beta

The Rust-based type checker from Astral banks on ‘extremely fast’ live updates, with a stable release projected for 2026.

By Paul Krill

Dec 18, 2025 2 mins

Development Tools Python Rust

JetBrains releases Kotlin 2.3.0

Now generally available, latest update to the Kotlin language includes a checker for unused return values and a host of other experimental features.

By Paul Krill

Dec 18, 2025 3 mins

Java JavaScript Kotlin

Microsoft deprecates IntelliCode for Visual Studio Code

Microsoft recommends that C# developers use GitHub Copilot Chat for code suggestions and inline completions instead.

By Paul Krill

Dec 16, 2025 2 mins

C# Generative AI Microsoft .NET

Azul acquires enterprise Java middleware provider Payara

Move viewed by Azul as boost in Java battle against Oracle.

By Paul Krill

Dec 16, 2025 2 mins

Java Programming Languages Software Development

Nvidia bets on open infrastructure for the agentic AI era with Nemotron 3

The company is positioning its new offerings as a business-ready way for enterprises to build domain-specific agents without first needing to create foundation models.

By Taryn Plumb

Dec 15, 2025 7 mins

Artificial Intelligence Development Tools Generative AI

Visual Studio Code adds multi-agent orchestration

With Visual Studio Code 1.107, developers can use GitHub Copilot and custom agents together and delegate work across local, background, and cloud agents.

By Paul Krill

Dec 12, 2025 3 mins

Development Tools Integrated Development Environments Visual Studio Code

OpenAI launches GPT-5.2 as it battles Google’s Gemini 3 for AI model supremacy

The new version performs ‘at or above a human expert level,’ the AI giant claims.

By John E. Dunn

Dec 12, 2025 5 mins

Artificial Intelligence Generative AI

Rust 1.92 touts deny-by-default never type lints

In addition to ongoing work to stabilize the never type, unwind tables are now emitted by default and some lint warnings have been disabled.

By Paul Krill

Dec 12, 2025 2 mins

Programming Languages Rust Software Development

JetBrains discontinues Fleet IDE

While it will no longer support the Fleet IDE, JetBrains said it will continue to evolve the agentic AI workflows and environment developed for Fleet.

By Paul Krill

Dec 11, 2025 2 mins

Artificial Intelligence Development Tools Generative AI

AI vendors move to tackle the hidden cost of inefficient enterprise code

As inefficient code increases enterprises’ expenditure, vendors are looking at different ways to optimize code — from shrinking model sizes to shifting from basic code generation to full-fledged code evolution.

By Anirban Ghoshal

Dec 11, 2025 4 mins

Artificial Intelligence Development Tools Generative AI

It’s everyone but Meta in a new AI standards group

Report indicates that Mark Zuckerberg has other plans: to pull an open source U-turn and make Meta’s best AI models proprietary.

By Paul Barker

Dec 10, 2025 5 mins

Artificial Intelligence Open Source Technology Industry

Did your npm pipeline break today? Check your ‘classic’ tokens

A spate of supply chain attacks forces GitHub’s npm to revoke ‘classic’ tokens. Despite this, larger worries about developer account security remain.

By John E. Dunn

Dec 10, 2025 4 mins

Development Tools GitHub Version Control Systems

GitHub Action Secrets aren’t secret anymore: exposed PATs now a direct path into cloud environments

Wiz has found threat actors exploiting GitHub tokens, giving them access to GitHub Action Secrets and, ultimately, cloud environments.

By Taryn Plumb

Dec 9, 2025 6 mins

Cloud Security GitHub Security

Linux Foundation launches Agentic AI Foundation

Backed by AWS, Google, Microsoft, OpenAI, and others, the AAIF kicks off with contributed projects from Anthropic, Block, and OpenAI.

By Paul Krill

Dec 9, 2025 1 min

Artificial Intelligence Generative AI Technology Industry

AWS is still chasing a cohesive enterprise AI story after re:Invent

Even with substantial upgrades across its AI stack, analysts say AWS’s ecosystem remains only half-built: powerful in parts but still lacking the cohesion enterprises are looking for.

By Anirban Ghoshal

Dec 9, 2025 5 mins

Amazon Web Services Devops Software Deployment

IBM to buy Confluent to extend its data and automation portfolio

The deal is described by IBM as a ‘natural fit’ for its hybrid cloud and AI strategy.

By Paul Barker

Dec 8, 2025 6 mins

Artificial Intelligence Data Integration Hybrid Cloud

R language is making a comeback – Tiobe

Tiobe index of programming language popularity index has the R language for statistical computing back in its top 10.

By Paul Krill

Dec 8, 2025 3 mins

Data Science Python R Language

Apache Tika hit by critical vulnerability thought to be patched months ago

The scope of an old PDF parsing flaw has been widened to include more Tika modules.

By John E. Dunn

Dec 8, 2025 3 mins

Application Security Development Tools Vulnerabilities

AWS takes aim at the PoC-to-production gap holding back enterprise AI

While AWS is rolling out new tooling to help enterprises move their agentic AI pilots to production, analysts warn of engineering challenges and governance caveats

By Anirban Ghoshal

Dec 8, 2025 6 mins

Artificial Intelligence Devops Software Deployment

AI in CI/CD pipelines can be tricked into behaving badly

Malicious content in issues or pull requests can trick AI agents in CI/CD workflows into running privileged commands in an attack researchers nicknamed PromptPwnd.

By Shweta Sharma

Dec 5, 2025 4 mins

CI/CD Code Security Devops

‘Futuristic’ Unison functional language debuts

Functional language based on ‘content-addressed code’ promises to simplify distributed programming and eliminate builds and dependency conflicts.

By Paul Krill

Dec 4, 2025 2 mins

Cloud Computing Cloud-Native Programming Languages

OpenAI to acquire AI training tracker Neptune

The experiment tracking platform will no longer be for sale and a hosted version will soon shut down; OpenAI will keep it for internal use.

By Gyana Swain

Dec 4, 2025 4 mins

Artificial Intelligence

Microsoft steers native port of TypeScript to early 2026 release

TypeScript 7.0, which implements the language service and compiler in Go, promises to improve performance, memory usage, and parallelism.

By Paul Krill

Dec 3, 2025 3 mins

Golang JavaScript TypeScript

Developers urged to immediately upgrade React, Next.js

Critical vulnerability in React library should be treated by IT as they did Log4j – as an emergency, warns one expert.

By Howard Solomon

Dec 3, 2025 5 mins

Developer Development Tools Vulnerabilities

Mistral targets lightweight processors with its biggest open model yet

Mistral 3 is huge, and needs processing capacity to match, but its Ministral variants can run on a single GPU, making this multilingual model suitable for edge and device deployments.

By Gyana Swain

Dec 3, 2025 4 mins

Artificial Intelligence

AWS introduces powers for AI-powered Kiro IDE

Kiro powers allow developers to customize Kiro agents for specific workflows by dynamically loading steering files for context and MCP servers for specialized tool access.

By Paul Krill

Dec 3, 2025 2 mins

Artificial Intelligence Development Tools Generative AI

AWS offers new service to make AI models better at work

AWS is trying to position Nova Forge as an infrastructure-first alternative to Microsoft’s IQ vision for enterprise AI by shifting model context into the LLM itself.

By Anirban Ghoshal

Dec 3, 2025 5 mins

Artificial Intelligence Cloud Computing SaaS

Get poetic in prompts and AI will break its guardrails

25 frontier proprietary and open-weight models yielded high attack success rates when prompted in verse, indicating a deeper, underlying problems in their ability to process ambiguity veiled in poetry.

By Taryn Plumb

Dec 2, 2025 7 mins

Artificial Intelligence Generative AI Vulnerabilities

AWS Transform now supports agentic modernization of custom code

But it still has to learn about custom patterns from devs or docs, and needs help to review and tune its output.

By Anirban Ghoshal

Dec 2, 2025 5 mins

Application Life Cycle Management Artificial Intelligence Software Development

AWS unveils Frontier AI agents for software development

AWS Frontier agents work independently on specialized tasks, with the first three agents focused on autonomous coding, application security, and devops.

By Paul Krill

Dec 2, 2025 3 mins

Amazon Web Services Artificial Intelligence Generative AI

Qdrant vector database adds tiered multitenancy

Tiered multitenancy allows users to combine small and large tenants in a single collection and promote growing tenants to dedicated shards.

By Paul Krill

Dec 1, 2025 3 mins

Artificial Intelligence Databases Generative AI

Contagious Interview attackers go ‘full stack’ to fool you

The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a development and delivery pipeline to drop malware.

By Shweta Sharma

Dec 1, 2025 4 mins

Code Security Security Security Practices

AWS launches Flexible Training Plans for inference endpoints in SageMaker AI

The option to reserve instances and GPUs for inference endpoints may help enterprises address scaling bottlenecks for AI workloads, analysts say.

By Anirban Ghoshal

Nov 28, 2025 3 mins

Amazon Web Services Cloud Computing IaaS

Security researchers caution app developers about risks in using Google Antigravity

The tool for creating agents has vulnerabilities, say experts; Google says it will post known issues publicly as it works to address them.

By Howard Solomon

Nov 27, 2025 8 mins

Artificial Intelligence Development Tools Vulnerabilities

OpenAI admits data breach after analytics partner hit by phishing attack

Mixpanel warns of phishing attacks after criminals steal email addresses and organization IDs from some customer profiles.

By John E. Dunn

Nov 27, 2025 5 mins

APIs Cyberattacks Data Breach

Google updates Gemini API for Gemini 3

The Gemini API improvements include simpler controls over thinking, more granular control over multimodal vision processing, and ‘thought signatures’ to improve function calling and image generation.

By Paul Krill

Nov 26, 2025 3 mins

APIs Development Tools Generative AI

Kotlin introduces checker for unused return values

Kotlin 2.3.0, now available in a release candidate, also brings Java 25 support and improvements for Swift interop, context-sensitive resolution, Kotlin/Wasm, and Kotlin/JS.

By Paul Krill

Nov 25, 2025 3 mins

Kotlin Programming Languages Software Development

Developers left large cache of credentials exposed on code generation websites

The discovery by a security company reveals widespread insecure use of online tools in enterprises.

By John E. Dunn

Nov 25, 2025 5 mins

Developer Development Tools Roles

Anthropic’s Claude Opus 4.5 pricing cut signals a shift in the enterprise AI market

Two-thirds price reduction and enhanced capabilities target software development and compliance teams as competition intensifies.

By Gyana Swain

Nov 25, 2025 6 mins

Artificial Intelligence Development Tools Generative AI

Microsoft’s Fara-7B brings AI agents to the PC with on-device automation

The model can interpret on-screen visuals, automate tasks directly on the device, and give enterprises a more affordable alternative to cloud-dependent AI agents.

By Prasanth Aby Thomas

Nov 25, 2025 3 mins

Artificial Intelligence Development Tools Generative AI

Snowflake to acquire Select Star to enhance its Horizon Catalog

The enhancements in Horizon Catalog would allow enterprises to build context for AI-driven applications and autonomous agents from data stored outside Snowflake.

By Anirban Ghoshal

Nov 25, 2025 4 mins

Analytics Artificial Intelligence Data Warehousing

Anthropic releases Claude Opus 4.5

Updated AI model for coding, agents, and computer use is meaningfully better at everyday tasks like deep research and working with slides and spreadsheets, Anthropic said.

By Paul Krill

Nov 24, 2025 2 mins

Artificial Intelligence Generative AI Software Development

New Shai-Hulud worm spreading through npm, GitHub

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, say researchers.

By Howard Solomon

Nov 24, 2025 7 mins

GitHub Version Control Systems Vulnerabilities

Angular v21 debuts Signal Forms, stabilizes MCP server

Signal Forms is an experimental library that allows developers to manage form state by building on Angular’s reactive signals system.

By Paul Krill

Nov 24, 2025 3 mins

Generative AI TypeScript Web Development

AWS open-sources Agent SOPs to simplify AI agent development

The new markdown-based format aims to provide structured, natural language workflows for AI agents, addressing unpredictability and maintenance issues seen in earlier approaches.

By Anirban Ghoshal

Nov 24, 2025 3 mins

Artificial Intelligence Open Source Software Development