A new iteration of the Shai-Hulud malware that ran through npm repositories in September is faster, more dangerous, and more destructive, creating huge numbers of malicious repositories, compromised ...

As AI platforms grow more complex and interdependent, small failures can cast long shadows. That’s what happened inside the open-source CrewAI platform, where a vulnerability in its error-handling ...

Overview: Free AI coding assistants offer verified access and support many tasks in VS Code.Open source and local models increase flexibility and control in dev ...

Qodo calls its secret sauce context engineering — a system-level approach to managing everything the model sees when making a decision. This includes the PR code diff, of course, but also prior ...

AI might not be transforming every job yet, but it’s having a big impact on developers.

An attacker is exploiting a disputed Ray flaw to hijack AI infrastructure globally, spreading a self-propagating botnet for ...

A global campaign dubbed ShadowRay 2.0 hijacks exposed Ray Clusters by exploiting an old code execution flaw to turn them ...

How governance diffuses responsibility across owners, reviewers, and committees, and how engineering leaders can fix it.

Cybersecurity researchers WatchTowr analyzed JSONFormatter and CodeBeautify, services where users can submit code, or data ...

North Korean state-sponsored threat actors, part of the infamous Lazarus Group, have been seen hosting malware and other ...

"Vibe coding" appeared in early 2025 to describe the simple idea of programming with AI tools. So I tested a range of them — and these are the three best ones.

Researchers discovered a security weakness in the AI-powered coding tool that allows malicious MCP server to hijack Cursor's ...