InfoWorld

AWS on Tuesday released Kiro Crew, an open-source orchestration platform designed to help enterprises move beyond interactive AI coding assistants toward long-running, autonomous engineering workflows that span repositories, developer tools, and multiple work sessions. Rather than simply generating code, Kiro Crew coordinates multiple AI agents, schedules recurring work, preserves project context…

Security flaws in automated workflows in the GitHub repository for Google’s Agent Development Kit for Python could allow public-facing AI agents to trigger more privileged automation, opening one path to manipulate pull-request reviews and another to expose credentials, according to a report from Pillar Security. The first attack path involved a triage agent that analyzed pull requests submitted …

Most folks seem happy to let AI write their LinkedIn posts for them. Others, myself included, have AI draft their work memos or slide decks. And some, according to recent survey data highlighted by AI Secret , are happy to let AI do their grocery shopping for them (28%), but not handle luxury goods or banking (6%). In trying to uncover a guiding principle for when mere mortals are willing to cede…

Not long ago, I worked with an enterprise that believed it had done everything right. The company had spread workloads across multiple regions, replicated key data stores, documented failover procedures, and invested heavily in automation. On paper, it looked like a mature cloud deployment. Then a control-plane issue hit one of its core providers. The infrastructure itself was not entirely gone, …

There is a lot of talk about the coming enterprise AI reality, in which AI finally arrives in production systems. You might not know it, but this reality—or nightmare, depending on how you handle it—is already happening. It all starts with a “pilot,” a “prototype,” or a “side project.” Maybe someone builds an internal dashboard with an agent. The dashboard quickly becomes indispensable, and all o…

Advancing on software development, GitHub has announced the public preview of stacked pull requests. The public preview was announced July 30 . Stacked pull requests break large changes into a chain of smaller, dependent pull requests. A stacked pull request is an ordered series of pull requests that each represent focused layers of a change,” GitHub said in the announcement. The goal is to make …

Gleam, a type-safe and scalable language for the Erlang virtual machine and JavaScript runtimes, has reached version 1.18.0 . The update brings full support for record fields to the Gleam language server, along with other improvements. Gleam 1.18.0 was released July 29 . Gleam is billed as “a friendly language for building type-safe systems that scale.” Gleam 1.18.0 brings three improvements to t…

The rise of AI coding agents is beginning to expose a longstanding weakness in software development: work remains fragmented across developer terminals, CI pipelines, remote servers, and production systems. Superlogical, a startup founded by HashiCorp co-founder Mitchell Hashimoto , aims to solve that by turning the terminal into a persistent execution layer that both developers and AI agents can…

Alibaba on Monday introduced Qwen3.8-Max, its largest artificial intelligence model to date, expanding its enterprise AI portfolio with an open-weight model designed for software engineering, multimodal reasoning, and other knowledge-intensive business workloads. In a blog post announcing the launch, Alibaba described Qwen3.8-Max as a 2.4-trillion-parameter mixture-of-experts (MoE) model that act…

When we think of documents, or documentation, they tend to fall into two circles. First are business documents, typically composed with an office application like Microsoft Word or Google Docs. Second is project documentation, often created semi-automatically from a project using an app like Sphinx or Pandoc. But there’s a third circle, one that can overlap the other two. These are documents prod…

Every developer who has worked with an LLM -powered application has hit a familiar wall. You hard-code context into a prompt, and it works great for the thing you built it for. But when you try to have the system do something slightly different, something goes wrong. So you add more context. Then more conflicts show up, and you end up trying to hopelessly maintain a web of hand-tuned strings that…

Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmos DB databases — both those of customers and Microsoft’s own. Google subsidiary Wiz found a flaw in the database’s Gremlin API, usually used for storing and managing property graph data. If bad actors had discovered it first, they could have …

JetBrains is warning of a critical security vulnerability in its TeamCity DevOps platform that could allow unauthenticated attackers to execute arbitrary operating system commands on vulnerable servers. “If exploited, this vulnerability may allow an unauthenticated attacker with HTTP(S) access to a TeamCity server to bypass authentication checks and execute arbitrary commands,“ the company said i…

OpenAI has cut API prices for its GPT-5.6 Terra and Luna models by 20% and 80%, respectively, while also reducing the number of usage credits the models consume in ChatGPT Work and Codex, in an effort to effectively increase the amount of AI work enterprise subscribers can perform without paying more. “Starting July 30, API pricing is $2 per million input tokens and $12 per million output tokens …

For a long time, I thought of observability as something mainly owned by backend, platform or site reliability teams. Frontend engineers built the interface, handled browser behavior and called APIs. When something failed deeper in the system, another team looked at server logs and infrastructure dashboards. That division works until the application is technically available, but the user experien…