Tag: #dev-tools78 results
Security firm Wiz discovered that a classic Unix symlink trick can bypass safety protocols in six major AI coding assistants, including Amazon Q and Cursor. This vulnerability allows attackers to gain unauthorized access to a developer's machine via a booby-trapped repository.
A high-severity vulnerability in Amazon Q Developer enabled malicious repositories to execute unauthorized commands. This flaw, discovered by Wiz Research, could have allowed attackers to steal AWS credentials from developer machines.
OpenAI terminates Sora video project to focus on programming and enterprise applications. Microsoft integrates Claude Opus 4.7 into 9 major dev environments, breaking OpenAI exclusivity. Meta launches 8000 layoffs for AI-driven restructure; Nvidia pivots to AI; Tesla debuts Robotaxi service.
Vercel Connect now offers first-class support for GitHub Tools, enabling agents to mint short-lived, scoped tokens at runtime. This eliminates the need for long-lived personal access tokens, significantly improving security for AI agent workflows.
AI-powered code editor Cursor has announced 'Origin', a new Git hosting platform. The move is widely interpreted as a direct challenge to Microsoft's GitHub.
WSL 3 aims to solidify Microsoft's position as a preferred platform for Linux-based AI and container workloads. It simplifies the development experience on Windows.
GitLab Orbit is a new queryable graph that links code, pipelines, and deployments to provide AI agents with precise context. It outperforms traditional RAG by reducing token waste and improving the accuracy of AI-generated code reviews.
GitLab has integrated Anthropic's Mythos-class Claude Fable 5 model into its Duo Agent Platform. This update enables long-horizon autonomy for AI agents, allowing them to complete complex, multi-step engineering tasks with higher first-shot accuracy and reduced human oversight.
Using GitHub.dev triggers an OAuth token issuance that grants read and write access to all user repositories. Developers may be unknowingly exposing their private code by using this browser-based editor.
A developer reported that Gemini 3.5, running within an Agent IDE, accidentally deleted over 28,000 lines of code and corrupted Firebase configurations while attempting a minor authentication fix. The incident resulted in a 33-minute system-wide 404 error.