Source-13

Cursor has expanded its self-hosted cloud agent infrastructure, adding dynamically scheduled worker pools and support for running agent workloads across cloud and infrastructure platforms. The update allows development teams to manage the machines that execute tool calls from Cursor's cloud agents while continuing to start and manage agent sessions through Cursor. The company made self-hosted … [Read more...]

Cycode has launched Agentic Code Scanning, a system that decides which AI or rule-based engine reviews code and at what cost. "Nobody got into application security to become a model economist," said Lior Levy, Co-Founder and CEO of Cycode. "Point a frontier model at everything and the bill compounds with every commit, fastest on the […] The post Cycode adds Agentic Code Scanning to control AI … [Read more...]

The race to build better AI software has largely focused on the model: which one reasons better? Codes better? Costs less? At Adronite, our testing points to another major efficiency lever that gets far less attention: the harness surrounding the model. Our internal benchmarking suggests the choice of harness can materially change the economics of […] The post Same Model, Smarter Harness: Why … [Read more...]

Visa has updated its open-source vulnerability tool, VVAH, to add remediation, validation, and model choice for security teams. The company has also expanded its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice with new services intended to help clients assess risk, prioritise remediation efforts, and build resilience as threats evolve. According to Visa, the changes […] The … [Read more...]

First Mate Technologies has detailed a software development workflow that uses separate AI models to write and verify code. One model handles implementation, while another designs test cases and reviews the finished code before changes are cleared for merging. The company used the process on QueueMate, a restaurant queue management application built largely with AI […] The post Should AI coding … [Read more...]

AI agents now rank among the top tools developers use for writing and testing code, but manual checks still gate what reaches production. The State of Development 2026 report from Temporal puts numbers behind that pattern, drawing on a survey of 554 engineers and technical leaders who currently use AI agents. Its opening finding sets […] The post Developers trust AI agents yet still verify code … [Read more...]

OpenAI's GPT-5.6 model family is now available in Kiro, the AWS agentic coding service built for spec-driven development and testing. The update brings three models from OpenAI's latest flagship series – Sol, Terra, and Luna – into Kiro. AWS and OpenAI describe the pairing as a way to help developers produce code with fewer iterations […] The post AWS adds OpenAI's GPT-5.6 to Kiro's agentic coding … [Read more...]

Canonical is funding a University of Bristol PhD to automate translation of C code into Rust for Ubuntu's security tools. The three-year project, backed with matched funding from UK Research and Innovation (UKRI), aims to address a difficult problem: manual conversion of C code is expensive and carries risk, yet leaving it untouched means forgoing […] The post Canonical backs Bristol PhD to … [Read more...]

Synthesized has announced Test Data Agent, an infrastructure capability being developed to create realistic test data and system conditions for evaluating AI agents before they are deployed into production environments. The product entered limited availability for existing clients and ecosystem partners recently, with general availability planned for later in the third quarter of 2026. Synthesized … [Read more...]

AWS DevOps Agent automates CI/CD failure investigation by linking GitHub commits to pipeline errors inside CodePipeline. Quality engineering leaders face a decision that goes beyond tooling preference: keep manual log correlation as the default response to a broken pipeline, or hand that first-pass investigation to an automated agent. AWS has published a walkthrough describing how […] The post AWS … [Read more...]

Z.ai has released GLM-5.3 with a CyberGym benchmark score of 84.5 percent, placing it ahead of rival AI models used for cybersecurity. The previous leader, Anthropic's Mythos 5, scored 83.8 percent on the benchmark. OpenAI's GPT-5.6 Sol was only marginally behind Anthropic with a 83.6 percent score. The company evaluated GLM-5.3 using the Claude Code […] The post Z.ai GLM-5.3 tops CyberGym … [Read more...]

Google is making the case that the rise of AI-generated code is changing the criteria developers use to assess programming languages, with readability, verification, and long-term maintenance becoming more important as coding agents take on more development work. The company argues that Go is suited to this model because its language design and development tools […] The post Google says Go is well … [Read more...]

OpenAI is expanding its Daybreak initiative to offer GPT-5.6-Cyber for authorised defensive security work. The programme gives approved defenders two access routes: Daybreak Blue for frontier general-purpose models, and Daybreak Red for purpose-trained cybersecurity models. OpenAI positions Blue as the entry point for most security teams. Red targets authorised vulnerability research, exploit … [Read more...]

LLM-native IDE security risks centre on system controls, according to a study of developer reports. Researchers from York University and the University of Calgary analysed 446 Reddit posts and 6,280 associated comments about security and privacy issues in AI-assisted development environments. The study covered discussions from January 2023 to March 2026, drawn from 29 subreddits […] The post Study … [Read more...]

Something strange has been happening inside cloud infrastructures over the past couple of years, and most teams didn't notice it happening until it was already too big to ignore. AI coding tools moved in fast. Faster than almost anyone expected back in 2023. And with that speed came a tangle of hidden pathways, half-managed connections, […] The post Securing Shadow AI Pipelines Amid the 2026 Cloud … [Read more...]

The UK AI Security Institute (AISI) has disclosed that agents under evaluation took unsanctioned actions on the internet, including an attempted supply chain attack against an open-source project on GitHub. AISI detected unusual data transfers from its research systems on 28 July 2026. The traffic used Tor, an anonymity network that can obscure an internet […] The post AISI details AI agent GitHub … [Read more...]

A supply-chain attack has affected more than 400 npm packages maintained by unrelated publishers, using compromised package releases to steal developer credentials and spread to other projects. Microsoft Threat Intelligence said the malicious releases contain a variant of the Mini Shai-Hulud worm. Affected packages include software associated with widely used JavaScript ecosystems, such as keyv, … [Read more...]

Microsoft has added an AI pillar to its Zero Trust Assessment tool and a DevSecOps pillar to its Zero Trust Workshop. Development teams now hand code generation, dependency selection, and infrastructure configuration to AI tools. Each of those tasks carries its own permission set, its own dependency chain, its own way of going wrong when […] The post Microsoft adds AI and DevSecOps pillars to zero … [Read more...]

Aikido Security says an npm supply chain attack has infected Keyv packages with a variant of the credential-stealing Shai-Hulud malware. The security firm reports that attackers have compromised the GitHub account of jaredwray, the maintainer of the Keyv key-value storage library. The attackers pushed malicious code to the main branch, then cut releases through GitHub […] The post Aikido Security … [Read more...]

Alibaba's Qwen team has released Qwen3.8-Max, a 2.4 trillion parameter model with 95 billion active parameters, pitched at coding, office work, research, and long-horizon tasks run with minimal supervision. The model is available now through QwenCloud. Open weights follow next week, marking the first time Alibaba has released a Max-class Qwen model outside a closed […] The post Alibaba Qwen3.8-Max … [Read more...]