InfoWorld

A critical vulnerability in the open-source AI agent platform Ruflo could allow unauthenticated attackers to take control of enterprise AI environments by exploiting an exposed Model Context Protocol (MCP) bridge, according to research published by Noma Security. The flaw, tracked as CVE-2026-59726 and dubbed RufRoot, carries a maximum CVSS score of 10.0 and affects Ruflo versions prior to 3.16.3…

Databricks is adding an agentic code conversion capability to its Lakebridge toolkit, using Genie Code to provide its new customers another way to move from rival data warehouses to its lakehouse built atop Databricks SQL. The new capability, called the agentic code converter , uses AI subagents to analyze source code, convert files in parallel, validate the translated SQL, and iteratively retry …

One percent of AI-active developers now generate 46 times more AI-written lines of code per day than the median active user, according to the Cursor Developer Habits Report . The bottleneck is no longer writing software. It is understanding what happens after that software ships. Every new service, dependency, feature flag, generated abstraction, and deployment path increases the number of ways a…

The demo videos always end at the same moment. A figma frame turns into a passing test in twelve minutes. Someone in the room says the word “productivity.” The recording stops. The parts that come after that moment are the parts I actually get paged about. Who owns the ticket the agent opened at 3:14 a.m.? Which model call produced the assertion in test case 47? What closes the 17 draft tickets a…

AI agents are being connected to real systems faster than most organizations are learning how to secure them. That should concern us. The first wave of AI security discussion has been useful, but limited. The industry has learned the vocabulary: prompt injection, indirect prompt injection, tool misuse, data leakage, excessive agency, unsafe retrieval, and broken authorization boundaries. These te…

Microsoft has shipped Visual Code 1.131, an update to its code editor with improvements for monitoring subagents, dictation, and Markdown editing. Released July 29 , Visual Studio Code 1.131 can be downloaded for Windows, Linux, or Mac at code.visualstudio.com . An enhancement to the Agents window in VS Code 1.131 allows developers to see what a running subagent is doing without opening its conve…

Microsoft has released MCP C# SDK v2.0 , a major update of the company’s official C# SDK for Model Context Protocol (MCP) servers and clients. Unveiled July 28 , MCP C# SDK v2.0 implements the 2026-07-28 revision of the MCP specification , which Microsoft described as the protocol’s largest revision since its launch. The 2026-07-28 revision makes the MCP protocol stateless by default, standardize…

Oracle on Tuesday described new EBCDIC character set compatibility features in Oracle AI Database for customers transitioning from legacy databases on IBM mainframes. In its post, Oracle noted that EBCDIC compatibility has historically been one of the top technical challenges for enterprises re-platforming to use newer, ASCII -based databases while continuing to use proven legacy applications. “A…

Java Development Kit 27 , an Oracle-driven, planned update to standard Java, is set to reach its initial release candidate (RC) stage on August 6. This update has features ranging from making the Garbage-First (G1) garbage collector the default collector and adding structured concurrency to simplify concurrent programming. JDK 27 is currently in rampdown phase 2, with the feature set now frozen. …

I’m an old Borland guy. I started using Borland tools in the early 1990s, from Turbo Pascal through Delphi. I dabbled in Paradox. I even tried to stick with Borland Office. I wandered through the Inprise years , and the Kylix endeavor , and I was actually a Borland employee during the CodeGear / Embarcadero migrations. You could write a book about the rise and fall of Borland. Suffice it to say t…

For a programming language that is prized for being convenient and easy, Python has some surprising barbs and sharp edges. Find out how a new pip flag can make it easier to work with project dependencies apart from the project itself. Get the skinny on why standalone Python programs are hard to assemble, and what you can do about it. See how Python’s new Installation Manager for Microsoft Windows…

Anthropic CEO Dario Amodei has argued that policymakers should keep lower-risk open-weight AI accessible while placing stricter safeguards around frontier systems, including mandatory testing and limits on China’s access to advanced computing and model capabilities. In a post outlining Anthropic’s position, Amodei said broad restrictions, including bans on Chinese open-weight models used by US bu…

For years, the public cloud was the default for new workloads because its convenience, elasticity, and breadth of services made sense. However, as AI’s strategic importance grows, its economics and infrastructure are changing. Tesla is one of the clearest examples of a company deciding that AI is too important, too expensive, and too central to its business to leave largely in the hands of a thir…

Last month I asked Claude’s Fable 5 model to read four 18th-century probate wills. It responded by fabricating a family. For more than 20 years, I’ve been chasing the parents of John Jacob Asay, born around 1725 near Burlington, New Jersey. I’ve been trying to connect him to Asays overseas. My working hypothesis links the New Jersey Asays to a Yorkshire family from Holderness that spelled the nam…

JetBrains has released Kotlin 2.4.20-Beta2, an update to the company’s multiplatform programming language that has emerged with capabilities ranging from the Wasmtime runtime to JavaScript functions and Swift accommodations. Kotlin 2.4.20-Beta2 was released July 2 . Among the new capabilities and improvements, the new release changes how Kotlin/Wasm handles top-level require() calls in @JsFun dec…