Flaw in DeepSeek Harness AI Coding Tool Let Agents Disable Their Sandbox
News of the now-fixed vulnerability comes amid growing concerns that AI vendors do not in have complete control of their autonomous agents.
Microsoft’s GitHub Hit by Major Outage as AI-Driven Demand Strains Infrastructure
GitHub, the Microsoft Corp.-owned code hosting platform serving more than 180 million developers, is still reeling from a widespread outage on Monday that severely disrupted software development pipelines globally. The hours-long incident was the latest in a relentless series of reliability failures for a service struggling to keep pace with an unprecedented surge in artificial […]
GitHub Hit by Widespread Outage, Halting Work for Global Developers
A major technical outage struck GitHub on Monday morning, disrupting workflows for millions of developers worldwide for several hours as critical services, automated testing pipelines, and artificial intelligence (AI) coding tools suffered high error rates. The hosting platform — a subsidiary of Microsoft Corp. that supports roughly 180 million users — first reported performance issues […]
From API Integration to Agent Governance: What Backend Teams Need to Know About MCP
Many MCP projects begin with an existing API and a simple request: expose one backend capability to an LLM client. The quickest route is to wrap an endpoint as a tool and connect it to Claude or another MCP host. Users can then ask for data in natural language instead of navigating a fixed interface. […]
Anthropic Reverses Course on Hidden AI Restrictions Following Developer Backlash
Anthropic has abruptly walked back a controversial, unannounced policy that degraded the performance of its latest model, Claude Fable 5. The reversal follows intense backlash from the machine learning community, which criticized the company for a lack of transparency and anti-competitive behavior, according to a Wired report. The controversy began earlier this week with the […]
Security Flaw in Claude Code Illustrates the Risk of AI in Developer Workflows
AI coding agents are reshaping software development—but they’re also expanding the attack surface. Researchers uncovered a now-patched vulnerability in Anthropic’s Claude Code GitHub Action that could have enabled prompt injection attacks to expose CI/CD secrets, API keys, and credentials. As AI agents gain autonomy in development workflows, organizations must treat untrusted inputs as hostile and rethink CI/CD security models. Natural language is becoming executable code—and attackers know it.
Still Using API Keys for Your AI Agent? Here’s When it’s Time to Upgrade
API keys got you here. They won’t get you where you’re going. OAuth isn’t a future upgrade. It’s the foundation your agents should have been built on from the start.
Postman Adds AI Agent to Automate API Development and Governance
Postman added an artificial intelligence (AI) agent to its portfolio of tools and platforms for building and governing application programming interfaces (APIs) that can autonomously perform tasks ranging from development and documentation to exploration and setting up integrations with continuous integration/continuous deployment (CI/CD) environments. Company CEO Abhinav Asthana said the AI Engineer significantly reduces the […]
The “Day 2” AI Problem: Why Standard API Gateways Fail at GenAI Scale
Injecting GenAI into applications is deceptively easy. Need a new chatbot backed by an LLM? Grab an OpenAI API key and you can throw together an MVP in an afternoon. This is the pattern teams have used to push AI features into apps for the last few years. The problem, as with previous tech hype […]
SmartBear Extends Scope of API Lifecycle Management Ambitions
SmartBear upgrades its API platform with a revamped Swagger Catalog and AI-driven drift detection to secure the modern API lifecycle against rogue, zombie, and misconfigured endpoints.
Survey Surfaces More Focus on Software Security Testing and API Security
A global survey of 828 enterprise IT professionals conducted by the Futurum Group finds well over a third of respondents expect their organization to increase spending on software security testing (39%) and application programming interface (API) security (36%) over the next 12 to 18 months. Overall, about 35% said they also plan to make some […]
Cursor Acquires Graphite to Streamline AI-Powered Development
Cursor, the artificial intelligence (AI) coding assistant valued at $29 billion, has acquired code review startup Graphite to address what Cursor CEO Michael Truell describes as a growing bottleneck in software development. The companies declined to disclose financial terms but confirmed the transaction involves a mix of cash and equity. While AI has dramatically accelerated […]
7 Critical API Protection Strategies to Fortify Your API Security
Against a backdrop of escalating threats and costly consequences, organizations need a comprehensive, multilayered approach to API security.
Modern Application Management Requires Deeper Internet Visibility
Most IT teams regularly employ a range of tools to monitor application performance. But in an era where applications are running everywhere from the cloud to the network edge, the visibility being provided is limited. The metrics and analysis being surfaced are roughly akin to only being able to see a few yards ahead when […]
Smoothing API Onboarding With Simulation and Documentation
“Soon we’ll be making another run…And love, exciting and new, Come aboard, we’re expecting you…”– Theme from The Love Boat, American television program, circa 1977 If software is eating the world, then APIs are eating software. Investment in the API economy is increasing. More than 200 million APIs are already out there in the world, […]
7 API Observability Anti-Patterns to Avoid
Here are seven API observability anti-patterns and pitfalls to avoid to your APIs observable and your users happy.
Cycode Acquires Bearer to Extend ASPM Platform
Cycode has acquired Bearer, a provider of a set of tools for SAST, API discovery and identification of sensitive data.
ngrok Previews API Gateway Service to Streamline App Networking
Under an early access program, ngrok made available an API gateway that can be consumed as a service.
Squaring the Circle: How to Make Public APIs Private
Many API attacks are effectively zero-day, novel attacks that exploit recent and unique changes to specific APIs. Here’s how to stop them.
Salesforce Adds Ability to Apply Custom Security Policies to APIs
Salesforce added the ability to customize API security policies to the Mulesoft Anypoint API management platform.
Graylog Makes Free API Security Tool Available to Developers
A free version of Graylog’s API security platform is intended to encourage developers to adopt best practices to secure APIs.
Will the Rise of Generative AI Increase Technical Debt?
The explosion of new AI APIs, libraries and frameworks has the potential to increase technical debt and, in the process, overwhelm DevOps teams.
How Supergraphs Help Consolidate Data Access
If used to aggregate various data sources and APIs into a unified graph, GraphQL could become ‘one schema to rule them all’ for enterprises.
Showing the 24 most recent articles. Additional archive pages are not yet available.