Security, Trust & Governance: Securing Software That Increasingly Writes Itself: SD Times 100

Part of the SD Times 100 2026 series. See the full SD Times 100 2026 list for every category and honoree. Application security has spent years maturing around a relatively stable assumption: a human ...
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...
CNET

If It Has a Screen, It Can Run Doom. How a Game From 1993 Became a Porting Legend

The video game has been part of tech culture since it launched in 1993, with its signature view of a gun centered of the ...
Security Boulevard

Cut your coding agent’s cost with Sonar Vortex

New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...
InfoWorld

Five tools to bolster your AI coding stack

Look to these tools to improve your AI coding practices and the quality, security, and reliability of your AI-generated code.
latesthackingnews.comOpinion

Amazon Q’s MCP Flaw Is an Industry Warning: AI Tools Still Lack Workspace Trust Standards

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...
InfoWorld

VS Code stops trusting your code by default

VS Code 1.26 prevents automatic code execution for new project folders, lets users configure whether code can be executed ...

The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...
ADTmag

Spring Tools 5.2.0 Adds Experimental Claude Code Plugin and Spring AI Support

The release includes an embedded MCP server that exposes Spring project analytics to AI coding assistants, along with first-class support for Spring AI and automated property refactoring.
9to5Google

I’ve gone from anti vibe coder to Antigravity addict

As a lazy, lapsed programmer, I feel that tools like Antigravity and Codex have changed my day-to-day workflows and, ...

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

In Test: Elixir's 1.20 New Intelligent Type System

Report do def user_age_to_string(user) do Integer.to_string(user.age) end end # An anderer Stelle im Projekt: Report.user_age_to_string(%{age: "42"}) Integer.to_string/1 is Elixir's usual notation for ...