The XZ Utils backdoor was a wake-up call, but the underlying problem it exposed has not gone away. Sophisticated adversaries are playing the long game, spending months or years earning trust within open source projects before introducing malicious code into libraries that sit at the foundation of modern software infrastructure. Mike Vizard and Josh Bressers, […]
GitHub Copilot CLI Gets a Second Opinion — and It’s From a Different AI Family
GitHub Copilot CLI’s “Rubber Duck” experimental feature uses cross-family model collaboration (Claude + GPT-5.4) to catch architectural flaws and reduce logic errors.
Why Code Validation is the Next Frontier
Shared staging environments were never designed for a world where dozens of changes land in a codebase every hour. Yet most engineering teams still depend on them as the primary checkpoint before production. Alan Shimel and Arjun Iyer, CEO of Signadot, dig into why that model is falling apart and what needs to replace it. […]
Why Governance Determines Whether Agentic AI Accelerates or Stalls Engineering
AI coding tools offer rapid productivity gains, but “governance debt” often slows delivery. Learn how to embed risk-based controls and auditability into agentic AI workflows to scale engineering capacity.
Anthropic Code Review Dispatches Agent Teams to Catch the Bugs That Skim Reads Miss
Anthropic Code Review dispatches agent teams to find bugs in PRs. Multi-agent analysis, severity ranking, and inline fixes for Teams and Enterprise.
Cursor Cloud Agents Get Their Own Computers — and 35% of Internal PRs to Prove It
Cursor’s new cloud AI coding agents can build, test, and verify software autonomously using real UI interaction. With 35% of production PRs generated by agents, software delivery is shifting from code authoring to agent orchestration and governance.
Qodo Adds Multiple AI Agents to Code Review Platform
Qodo 2.0 adds memory-enabled, task-specific AI agents to its LLM-based code-review platform, improving defect recall and F1 performance to help DevOps scale code quality as AI-generated code rises.
The Deterministic Future of AI-Generated Code
AI has eliminated the bottleneck of writing code—but introduced massive uncertainty in verifying it. This piece explores why deterministic guardrails, smarter linters, and eBPF-driven observability are becoming essential to code review and CI in the AI era.
Vibe Coding Can Create Unseen Vulnerabilities
Vibe coding uses AI to write software fast — but without developer oversight, it can introduce security flaws, technical debt and compliance risks.
Sonar Previews Service to Improve Quality of AI Generated Code
Sonar’s SonarSweep improves AI-generated code by reducing bugs and vulnerabilities, helping organizations train more reliable AI models.