InfoWorld

Devops platform GitLab already rate-limits some functionality on its hosted service, but will tighten those-limits for some functions and for some users beginning next month. The new limits will affect API requests , web requests, and authenticated Git over HTTPS requests. Users on the lowest payment tiers will be the first to be affected, as will those making unauthenticated requests, including …

Popular AI coding agents such as OpenAI’s Codex, Anthropic’s Claude Code, Google’s Gemini CLI, and Microsoft-owned GitHub Copilot were vulnerable to a zero-click attack that enabled attackers to execute malicious code, even without developer interaction, by swapping a trusted plugin from an online marketplace for a malicious one, potentially giving them a foothold in enterprise development enviro…

Some Python features are so useful they feel almost illegal, or like they’re granting you superpowers. We have dataclasses to take the hassle out of writing classes, editable installs to speed up package development, virtual environments to simplify dependency management, and a free-threaded Python build to improve parallelism. Want to seize the power of all of these great features? Just follow t…

The detail that caught my attention in the OpenAI-Hugging Face investigation was the package cache. Roughly 1,200 AI agents that were supposed to be isolated from one another found a way to communicate through it. Around the same time, Anthropic disclosed an incident in which a single agent reached the real internet but continued describing its surroundings as a simulation. These were different f…

September 3 started like any other Thursday, until it didn’t. Within roughly 90 minutes, ChatGPT, Claude, Grok, and even Microsoft’s own Copilot were degraded or dark, knocked sideways by a failure in Microsoft Azure’s East US region . Downdetector logged more than 37,000 reports for ChatGPT alone, more than 1,300 for Claude, and roughly 1,365 for Grok. OpenAI’s status page flagged elevated error…

Today’s large language models are verbose, even if they’re being asked to recommend a simple decision, driving up usage costs through the sheer volume of tokens they consume or generate. Enterprises looking to incorporate AI into automated workflows will want something less verbose — both because machines are often just looking for a categorical answer, and because automated workflows are likely …

As debate over AI safety intensifies, new research is drawing attention to a more immediate risk for enterprises: AI agents that can alter the models they rely on while carrying out routine tasks. Researchers at AI security firm Irregular asked a coding agent to solve a software maintenance problem involving an application built on a local AI model that was returning incorrect answers. Instead of…

Walk into any boardroom or technology conference today, and the conversation is entirely consumed by the promise of agentic AI . We are told that autonomous AI agents will soon handle our corporate analytics, democratizing data so that anyone, from an intern to the CEO, can type a natural-language question into Slack and get an instant, data-backed answer. Sounds great, right? Not so fast. If you…

Visual Studio is a lot more than an editor and debugger; it’s the host for Microsoft’s cross-platform build tools. MSBuild is one of those forgotten heroes, a tool that’s at the heart of all your development processes, but one that’s hidden behind the façade of your development environments. MSBuild is where your code, libraries, and SDKs are marshaled and delivered to .NET and other compilers. I…

The green dashboard is one of the most comforting objects in software engineering. It says the build passed, the tests passed, the service is healthy and the incident queue is quiet. When an AI agent is writing code or repairing tests, though, those green signals can become dangerously local. Each layer can report success while the system’s actual behavior drifts away from what a human intended. …

A growing divide among leading AI companies over how to secure increasingly powerful models is beginning to translate into challenges for enterprise IT, with implications for how organizations access, deploy, and govern AI systems. The latest flashpoint came after Meta CEO Mark Zuckerberg called for neutral evaluators to independently test AI models, pushing back on calls from rivals to slow deve…

AWS is betting that AI agents need a different interface as they move beyond answering prompts and start working autonomously in the background. The company has open-sourced Pizza Bot, a self-hosted application that gives users an inbox for managing work delegated to AI agents, with separate threads for ongoing tasks and a queue for work that is completed or needs human input, rather than keeping…

Career paths for software developers have always been a touch problematic. Early on, you started out as a junior developer, and maybe there were ladder rungs that got you raises until you became a senior developer. But there was typically a ceiling to that, leaving you with little choice but to move into a management position if you wanted to continue to advance and make more money. On top of tha…

One of the first questions I ask devops organizations is to walk me through their development and operations standards. What are the non-negotiable devops practices ? What are the data governance first principles ? What observability standards are in place? How is security embedded in devops ? This is the starting point. From there, we might review standards on how functional requirements are wri…

A swarm of hundreds of OpenAI agents uploaded “malicious packages” to RubyGems and tried to steal API keys, the Ruby community gem hosting service revealed Friday. OpenAI confirmed part of the disclosure, saying , “our agents used the RubyGems platform to access the internet to carry out benign tasks and retrieve public information. We’ll continue to investigate as part of our broader review of a…