Features
Latest Typosquatting Attack Targeting VS Code Tools Hits Windsurf IDE
Cybersecurity researchers from Bitdefender, a provider of an endpoint detection and response (EDR) platform, have discovered an extension to the Windsurf integrated development environment (IDE) that steals credentials and data after code ...
Microsoft Field Engineers Built a Six-Agent Research Pipeline in VS Code That Fact-Checks Its Own Output
Tom Smith | | Agent Handoff Pattern, Azure Kubernetes Service (AKS), Azure Red Hat OpenShift (ARO), Fact-Checking AI, GitHub Copilot Agents, Global Black Belts (GBB), Grounding, MCP Server, multi-agent systems, Project Nighthawk, Technical Research Automation, VS Code Agent SkillsAzure Global Black Belts Diego Casati and Ray Kao developed Project Nighthawk, a multi-agent system that automates deep technical research for AKS and ARO with 100% source-grounding ...
Survey Surfaces Increased Reliance on Open Source Software to Build Apps
Mike Vizard | | AI-Driven Vulnerabilities, Cyber Resilience Act (CRA), DevOps maintenance, DevSecOps best practices, DORA Compliance, Enterprise Open Source Adoption., Open Source Software (OSS), OpenLogic Survey, Software Supply Chain Security, vendor lock-inOpen source adoption is surging, with 49% of IT teams increasing usage. However, 47% of staff spend 75% of their time on maintenance. Explore the impact of AI threats and EU regulations ...
Meta Researchers Show AI Agents Can Verify Code Without Running It — and Hit 93% Accuracy
Tom Smith | | Agentic Code Reasoning, AI coding agents, Code Equivalence Verification, Defects4J Benchmark, DevOps Code Review, Execution-Free Reward Signals, Meta Research, Reinforcement Learning Training, RubberDuckBench, Semi-Formal Reasoning, software lifecycle engineering, static analysisMeta's semi-formal reasoning enables AI agents to verify code without executing it, achieving 93% accuracy. Implications for code review and RL training costs ...
GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents
Tom Smith | | AI coding agents, automated remediation, Credential Leakage, DeepSeek, devops security, GitHub MCP Server, GitHub Secret Scanning, LangChain, Push Protection, secret detection, Snowflake, Software Supply Chain, Token Validity Checks, VercelGitHub's March 2026 updates introduce secret scanning for AI agents via MCP, 37 new detectors, and expanded push protection. Learn how to secure AI-generated code ...
Developers Using Anthropic Claude Code Hit by Token Drain Crisis
Adrian Bridgwater | | ai, AI coding assistant, Anthropic, automation, Claude Code, CLI Coding, cloud, Developer Velocity, developers, devops, Max Subscription, Prompt Caching, Quota Exhaustion, Token Tracking Bug, Usage LimitsAnthropic’s Claude Code users report Max tier quotas exhausting in under 20 minutes. Explore the "Cache-22" of prompt caching, session limits, and why AI coding "opacity" is stalling developer workflows ...
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
Jeff Burt | | Axios, CI/CD, Google Threat Intelligence Group, JavaScript dependencies, Mandiant, North Korea, remote access trojan (RAT), Socket, sonatype, supply chain attack, TeamPCPThe threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large "blast radius." ...
AWS Makes Pair of AI Agents to Automate DevOps Tasks Available
Amazon Web Services (AWS) today made a pair of artificial intelligence (AI) agents to manage DevOps workflows and conduct penetration tests generally available. Neha Goswami, director of Agentic DevOps at AWS, said ...
Harness Extends CD Platform to Address AI Coding Challenges
Mike Vizard | | AI coding tools, AI-Powered Verification, Automated Rollback, continuous delivery, database devops, DevOps Scale, Harness CD, platform engineering, Release Orchestration, Snowflake Support, software engineering productivity, Warehouse-Native Feature ManagementHarness expands its CD platform to tackle the "AI code explosion" with automated rollbacks, snowflake support, and warehouse-native feature management ...
Lightrun Adds Ability to Dynamically Pull Telemetry Data from Live Apps
Lightrun has added an ability to dynamically pull missing telemetry evidence from live application environments without having to deploy additional instrumentation to its namesake site reliability engineering (SRE) platform that is based ...
OpenTelemetry Gets Kotlin Multiplatform API & SDKÂ
Adrian Bridgwater | | Android Development, application development, automation, Client-side Monitoring, cloud-native, CNCF, continuous delivery, cross-platform development, devops, Embrace, JVM Interoperability, KubeCon 2026, Logging API, mobile observability, observability, Telemetry data, Tracing APIOpenTelemetry expands its observability reach with a native Kotlin Multiplatform API and SDK. Contributed by Embrace, this update enables vendor-neutral telemetry across JVM, iOS, and web, offering idiomatic Kotlin support and optimized ...
Tekton Kubernetes-Native CI/CD Project Reaches CNCF IncubationÂ
Adrian Bridgwater | | CI/CD, continuous delivery, continuous integration, devops, microservices, observability, software developmentThe CNCF TOC has voted to accept Tekton as an incubating project. As a Kubernetes-native framework for CI/CD, Tekton enables developers to build, test, and deploy across clouds by treating pipelines as ...
