InfoWorld

Digital sovereignty has moved from a policy discussion to a practical enterprise cloud computing problem. For years, most organizations treated public cloud as a location-flexible utility. They placed workloads where performance, price, managed services, and availability looked best. Data residency requirements existed, of course, but they were often handled as narrow legal or compliance tasks. P…

“Bug-free, secure code is now attainable” is a nice idea . It just happens to be wrong. That ambitious statement was one of more than 80 replies to Eric Raymond’s optimistic take on AI-assisted vulnerability discoveries. Because the corpus of human-written code is finite, Raymond argues, so are its defects. With “a million friendly robots” to help fix them, we’re well-positioned to out-AI the bad…

The value of GraphQL emerges for a specific type of enterprise screen, one that brings together highly interdependent data across multiple sources. In all other cases, there is a price to pay, which is bound to come out after you have already made the decision. I build internal access-governance applications, with React front ends that talk to both REST and GraphQL back ends. Using the two side b…

Oracle is expanding its Autonomous AI Lakehouse with a Business Semantic Layer designed to give AI agents a consistent understanding of enterprise data, a move aimed at improving the accuracy of AI-generated insights and helping organizations scale agentic applications across business functions. To ground AI agents in business context, the Business Semantic Layer uses catalog annotations, SQL ann…

Malicious instruction files planted in a computer’s Downloads folder can trick AI coding agents into executing harmful code or exposing authentication tokens, Forever Security said after blocking an attempted attack on a customer’s machine and demonstrating similar techniques against OpenAI’s Codex and Anthropic’s Claude Code. In its research report, the firm said it discovered a malicious AGENTS…

No one can predict which AI provider will win the next benchmark cycle. The smarter approach is to build an architecture that can adapt as models change. One with a stable contract between agents and models, tools and state that exist outside any single provider, and evaluations that make each model change a measurable decision. The goal isn’t to avoid choosing a preferred model. It’s to ensure t…

Enterprises spent the last decade building API programs. A large organization now runs thousands of internal APIs, each with a spec, owner, authentication scheme, and access policies enforced at a gateway. As agents move into production, those APIs are the obvious source of the context agents need: customer records, order status, inventory, pricing, and support tickets. The more difficult questio…

For years, one of the first questions we asked about a suspicious npm package was whether it ran a pre-install or postinstall script. Those hooks can execute before a developer has written a line of code that uses the dependency. Blocking them is a sensible defense. It prevents a particular kind of package from running just because someone installed it. But installation is only the beginning of a…

OpenClaw, the AI digital assistant, is looking to establish itself as an essential tool for users — but if it is as profligate in its use of tokens as its creator, Pete Steinberger, then users could be in for some huge usage bills. Steinberger, now working for OpenAI , spent $10 million on AI tokens there last month, he told Cloudflare CEO Dane Knecht at the Cloudflare Connect 2026 Conference in …

The recent Google Cloud incident in London is the kind of event that should force enterprises to rethink what cloud resilience really means. Google said the disruption was caused by a “power event” affecting London-based data centers in its europe-west2 region. The issue appeared early in the day and affected cloud services that many organizations depend on, either directly through their own depl…

As enterprises scale AI agents, Google is betting that idle infrastructure costs could become a major barrier to adoption. To address that challenge, the company on Thursday launched Agent Compute Engine, a service that suspends inactive agents and restores them on demand while preserving their execution state. AI agents often spend long periods waiting for instructions, tool responses, or human …

A certificate authority’s decision to abandon the global SSL/TLS market is exposing a weakness many organizations rarely examine: their dependence on complex PKI trust chains. Following the compromise of private keys behind eight of its intermediate certificate authorities, eMudhra is exiting the global SSL/TLS certificate business and is offering customers Sectigo-issued replacements. However, a…

Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But one of the lesser-known stories centers around disclosure. According to The PHP Foundation , several organizations had agreed to a coordinated release detailing the critical flaws and mitigation actions, but cybersecurit…

GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions. The most serious of the security issues, labeled critical in severity, is CVE-2026-110264 , an integer overflow issue. “GitLab has remediated an issue that, under certain conditions, could…

The AI industry has been expanding how much information an AI model can consume at once. In just a few years, context windows have grown from thousands of tokens to millions. Anthropic increased Claude’s context window from 9,000 to 100,000 tokens in May 2023 , reaching 200,000 tokens by November 2023 . Google’s Gemini 1.5 Pro reached one million tokens in February 2024 , then two million by June…