News

AWS bets that AI agents need an inbox, not another chat window

Pizza Bot is a self-hosted open-source interface for interacting with AI agents asynchronously that AWS hopes to help enterprises manage longer-running agent tasks; analysts say integration and governance requirements could hamper its adoption.

By Anirban Ghoshal

Sep 16, 20266 mins

Amazon Web ServicesIaaSOpen Source

A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove

By Taryn Plumb

Sep 14, 20265 mins

CI/CDDevopsGitLab

Anthropic finds evidence of a fourth AI escaping from containment

By Maxwell Cooter

Sep 11, 20262 mins

Artificial IntelligenceCyberattacksCybercrime

OpenAI launches managed Agents API to simplify enterprise AI agent development

By Anirban Ghoshal

Sep 11, 20265 mins

APIsArtificial IntelligenceGenerative AI

Databricks unveils adaptive AI retrieval model to cut search costs and latency

By Anirban Ghoshal

Sep 9, 20267 mins

Artificial IntelligenceGenerative AI

Databricks’ OpenSharing targets the ‘integration tax’ of enterprise AI

The zero-copy credential model enables cross-platform sharing of AI assets, promising lower overhead, stronger governance, and faster deployment across partners and teams.

By Anirban Ghoshal

Jun 11, 2026 5 mins

Artificial Intelligence Data Management

GitHub finally pulls the plug on automatic install script execution for npm

The change, expected in July, will likely block one of the more common attack vectors; developers are wondering what took GitHub so long, and why other repositories acted so much sooner.

By Evan Schuman

Jun 10, 2026 8 mins

GitHub Version Control Systems Vulnerabilities

EU rules on securing IT products could affect open source software users beginning this week

The EU’s Cyber Resilience Act aims to make hardware and software more secure — but enterprises are still unaware of its implications for open-source software usage.

By Maxwell Cooter

Jun 10, 2026 5 mins

IT Governance IT Leadership Open Source

Enterprises know AI-generated code is vulnerable; they’re shipping it anyway

As AI systems discover and exploit flaws at unprecedented speed, organizations are still deploying software they know contains security weaknesses.

By Taryn Plumb

Jun 9, 2026 6 mins

Artificial Intelligence Software Development

Meet Hades: The malware that lies to AI security agents

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based code analysis systems into overlooking malicious payloads.

By Taryn Plumb

Jun 9, 2026 5 mins

Cybercrime Malware Python

Broadcom beefs up Spring security to protect against AI-enabled attacks

Both the Spring Java community and users buying commercial support from Broadcom Tanzu will benefit, but paid users get extra perks.

By Lynn Greiner

Jun 8, 2026 5 mins

Application Security Java Libraries and Frameworks

Protocol Buffers schemas expose remote code execution risk

Researchers at Cyera found six vulnerabilities in protobuf.js, including a flaw that can turn attacker-controlled schema data into executable code and expose downstream software supply chains.

By Shweta Sharma

Jun 8, 2026 4 mins

Security Vulnerabilities

AWS targets a longtime cloud migration blocker with SQL Server license portability

Enterprises can now bring existing SQL Server licenses to Amazon RDS, making it easier to move operational data closer to AWS analytics and agentic AI services.

By Taryn Plumb

Jun 5, 2026 6 mins

Amazon Web Services Microsoft SQL Server Relational Databases

GitHub adds new Copilot features as usage-based billing takes effect

A desktop app and a new collaborative work surface could boost developer productivity, but enterprises will need stronger governance and ROI metrics as AI coding costs become increasingly consumption-based, analysts say.

By Anirban Ghoshal

Jun 5, 2026 5 mins

Development Tools GitHub Integrated Development Environments

Microsoft identifies seven new ways AI agents can be hacked

The more you look at AI agents, the more it seems can go wrong with them, so Microsoft has extended its taxonomy of failure modes to help with discussion of possible fixes.

By Maxwell Cooter

Jun 5, 2026 2 mins

Artificial Intelligence Cyberattacks Cybercrime

Patching fast and slow: Ruby devs delay to defend against supply chain attack

Installing the latest software updates is often advised — but sometimes it’s safer to sit back and wait.

By Maxwell Cooter

Jun 5, 2026 2 mins

Code Security Development Tools Security

Anthropic’s AI services are too expensive, says Microsoft AI head

The company is reportedly in the process of cancelling subscriptions to Claude Code for many of its engineers.

By Maxwell Cooter

Jun 5, 2026 2 mins

Artificial Intelligence

Microsoft makes Linux developers feel more at home in Windows with Coreutils release

Developers can now run most Linux commands natively, without the need for a Windows Linux Subsystem VM.

By John E. Dunn

Jun 4, 2026 3 mins

Development Tools Software Development

Microsoft’s Web IQ aims to give enterprise AI agents real-time web intelligence

The service could make it simpler and cheaper to develop grounded applications by reducing the need for custom web-search infrastructure, analysts say.

By Anirban Ghoshal

Jun 4, 2026 4 mins

Generative AI IaaS Microsoft Azure

Google brings local AI agents to laptops with Gemma 4 12B

The release moves agentic AI closer to users, but enterprises must still overcome hardware and security hurdles.

By Prasanth Aby Thomas

Jun 4, 2026 5 mins

Artificial Intelligence Generative AI

Rayfin signals Microsoft’s push to make Fabric an AI app runtime

Beyond productivity gains, the platform play focuses on unifying data, governance, and deployment for enterprise AI.

By Anirban Ghoshal

Jun 4, 2026 5 mins

Artificial Intelligence Development Tools Software Development

OpenAI fixed a visibility problem; the governance problem remains.

OpenAI’s new ChatGPT session controls improve visibility, but experts say continuous model updates are creating a far bigger challenge for enterprise risk and compliance teams.

By Taryn Plumb

Jun 3, 2026 6 mins

Artificial Intelligence IT Governance Risk Management

Hole in GitHub’s browser-based VSCode editor could lead to stolen token

Its disclosure raises questions about what security researchers should expect from vendors, and how far in advance of its publication they should notify vendors about a bug.

By Howard Solomon

Jun 3, 2026 7 mins

Browser Security Endpoint Protection GitHub

Snowflake’s Horizon Context aims to give AI agents a common understanding of the business

These new capabilities could help CIOs reduce the complexity of deploying AI agents into production, analysts say.

By Anirban Ghoshal

Jun 2, 2026 6 mins

Artificial Intelligence Data Governance Data Management

Workday launches Agent Passport to test and monitor AI agents in the enterprise

Workday is also releasing new developer tools to enable customers to rapidly move agents from prompt to production.

By Lynn Greiner

Jun 2, 2026 3 mins

Artificial Intelligence Development Tools Software Development

Infected Red Hat npm packages expose developer credentials

Researchers have uncovered a new Shai-Hulud malware variant targeting Red Hat-related npm packages, spreading through software publishing ecosystems for persistence and credential theft.

By Shweta Sharma

Jun 2, 2026 4 mins

Development Tools Security Software Development

Attack targeting OpenAI Codex users exposes AI software supply chain risks

The incident highlights how attackers can hide malicious code in software packages that differ from the source code available for review.

By Prasanth Aby Thomas

Jun 2, 2026 4 mins

Artificial Intelligence Development Tools Security

Flowise’s MCP implementation can run ghost commands

A 9.9-severity vulnerability in Flowise’s MCP stdio implementation can allow attackers to achieve remote code execution in self-hosted deployments.

By Shweta Sharma

Jun 1, 2026 4 mins

Artificial Intelligence Development Tools Security

Amazon deletes devs’ tokenmaxxing leaderboard to minimize costs

An unofficial initiative to promote the use of AI internally has come unstuck.

By Maxwell Cooter

May 29, 2026 2 mins

Artificial Intelligence

DNS-AID will make AI agents easier to discover, says Linux Foundation

The proposed DNS extension underscores the importance of communication with and between AI agents.

By Maxwell Cooter

May 29, 2026 2 mins

Artificial Intelligence Identity and Access Management Security

Certifiably random: Swiss researchers claim perfect random number source

The randomness in quantum physics is imperfect and needs amplification to be considered truly random, the researchers say.

By Maxwell Cooter

May 29, 2026 2 mins

Communications Security Data and Information Security Encryption

IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise

The $5 billion Project Lightwell initiative combines AI systems with 20,000 engineers to deliver validated fixes directly into enterprise software supply chains without disruptive upgrades.

By Taryn Plumb

May 28, 2026 6 mins

Application Security Open Source Security

Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects

Two months after Rapid7 discovered the hole in the Git service, the project maintainer has yet to patch the bug.

By Howard Solomon

May 28, 2026 5 mins

Open Source Security Vulnerabilities

Supply chain battles intensify as takedowns meet AI-driven noise

CrowdStrike, Google, and the Shadowserver Foundation dismantled the GlassWorm malware operation, but experts say the broader chaos unfolding across open-source ecosystems is making isolated takedowns feel increasingly temporary.

By Shweta Sharma

May 28, 2026 4 mins

Artificial Intelligence Security Software Development

Developers on H-1B face a tighter job market as AI shifts hiring priorities

Firms favor local talent and AI-skilled engineers amid layoffs, automation, and changing workforce strategies.

By Prasanth Aby Thomas

May 28, 2026 6 mins

Artificial Intelligence Careers IT Jobs

Snowflake to acquire MCP-focused Natoma to boost governance for AI agents

The acquisition could help enterprise CIOs struggling to deploy agentic workflows spanning heterogeneous systems via MCP while positioning the vendor as the orchestration layer for AI agents, analysts say.

By Anirban Ghoshal

May 28, 2026 5 mins

Artificial Intelligence Data Governance Data Management

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

Researchers who found the bug warn that its Moderate rating understates a threat reaching across LLM gateways, MCP servers and agent infrastructure.

By Gyana Swain

May 27, 2026 5 mins

APIs Artificial Intelligence Vulnerabilities

Google adds open source Agent Executor to support AI agents in production

The new runtime could help enterprises address operational challenges tied to scaling AI agents in production, although broader governance concerns persist, analysts say.

By Anirban Ghoshal

May 25, 2026 5 mins

Artificial Intelligence Devops Software Development

DeepSeek’s steep V4-Pro price cut escalates AI pricing war

A 75% reduction highlights falling inference costs and challenges premium pricing from OpenAI, Anthropic, and Google.

By Nidhi Singal

May 25, 2026 5 mins

Artificial Intelligence Generative AI

As AI speeds coding, CVE Lite CLI keeps security deliberately AI-free

The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.

By Shweta Sharma

May 25, 2026 6 mins

Artificial Intelligence Development Tools Security

Google folds CodeMender into agent ecosystem amid push for AI-led AppSec

Expansion beyond autonomous patching reflects growing emphasis on orchestration, governance, and enterprise trust.

By Shweta Sharma

May 22, 2026 4 mins

Application Security Artificial Intelligence Development Tools

Salesforce extends its headless push into enterprise data via Informatica

The update could spare developers much of the integration and custom plumbing work typically required to build AI-driven workflows, although CIOs should be wary of cost, accuracy headaches, analysts say.

By Anirban Ghoshal

May 21, 2026 6 mins

Artificial Intelligence Data Management Master Data Management

Microsoft releases open-source tools to operationalize AI agent safety

By open-sourcing two new tools that promise continuous engineering safety, Microsoft hopes to secure the agent development lifecycle.

By Shweta Sharma

May 21, 2026 3 mins

Code Security Development Tools Security

Google to unify AI coding tools under Antigravity

The move to consolidate its AI coding tools could reduce procurement, integration, and governance challenges for CIOs, but with the potential for lock-in, analysts say.

By Anirban Ghoshal

May 20, 2026 8 mins

Artificial Intelligence Development Tools Software Development

GitHub admits major source code leak after 3,800 internal repositories breached

GitHub blamed the latest in a growing list of hacks claimed by TeamPCP on a poisoned VS Code extension.

By John E. Dunn

May 20, 2026 4 mins

Code Security GitHub Version Control Systems

Google launches Gemini 3.5 Flash to push AI agents deeper into enterprise workflows

The company says the model is faster and better suited to coding and agentic tasks, but analysts say its enterprise value depends on live workflow reliability.

By Prasanth Aby Thomas

May 20, 2026 4 mins

Artificial Intelligence Generative AI

AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

The largest incident yet is a warning that developers should urgently check package security, say experts.

By John E. Dunn

May 19, 2026 4 mins

Cyberattacks Cybercrime Development Tools

GitHub scales back bug bounties, reminds users security is their responsibility too

The cloud code repository asks security researchers to cut out the AI-generated noise and focus on reporting security problems that are its fault, not the fault of its users’.

By Anirban Ghoshal

May 19, 2026 5 mins

Bugs GitHub Version Control Systems

Anthropic acquires Stainless to strengthen Claude’s developer tooling

The deal gives Anthropic tighter control over how developers connect Claude to software and business systems as AI vendors race to simplify agent development.

By Prasanth Aby Thomas

May 19, 2026 4 mins

Artificial Intelligence Development Tools Software Development

AWS boosts CloudWatch Logs query limits by 10x to ease debugging for developers, SREs

The update will help developers and SREs investigate incidents faster and improve observability automation, while stopping short of replacing third-party SIEM platforms and offering direct cloud cost savings, analysts say.

By Anirban Ghoshal

May 18, 2026 4 mins

Amazon Web Services Cloud Computing Development Tools

AWS adds Advanced Prompt Optimization tool to Bedrock

The move will help enterprises reduce inference costs and improve efficiency as they scale AI applications in production, analysts say.

By Anirban Ghoshal

May 15, 2026 4 mins

Amazon Web Services Development Tools Generative AI

Anthropic puts Claude agents on a meter across its subscriptions

Anthropic’s move reflects a broader industry shift toward metered pricing for AI agents, forcing developers and enterprises to rethink the economics of large-scale automation workloads, analysts say.

By Anirban Ghoshal

May 14, 2026 6 mins

Artificial Intelligence Development Tools Software Development

Notion courts developers with a platform for AI agents and workflow automation

The release gives Notion a bigger role in enterprise software stacks, but analysts say governance and execution will determine whether it can move beyond experimentation.

By Prasanth Aby Thomas

May 14, 2026 3 mins

Artificial Intelligence Development Tools Software Development

AWS debuts Graviton-powered Redshift RG instances to cut analytics costs

The new instances unify warehouse and data lake queries in a single engine, aiming to reduce complexity and eliminate unpredictable Spectrum charges.

By Anirban Ghoshal

May 13, 2026 4 mins

Cloud Computing Data Management Databases

SAP’s AI promises last year? Most are still rolling out

SAP’s first round of tools for agentic AI development favored ease of use over power, but now it is beefing up its low-code tool with pro-code features for developers.

By Stephanie Overby

May 13, 2026 3 mins

Artificial Intelligence Software Development