n8n patched eight vulnerabilities on October 14, 2026, including stored XSS and cross-project data access. Self-hosted users need to update manually.

Technical coach Emily Bache found that agentic AI tools break classic mob programming dynamics. Here is the failure pattern and the new interaction patterns she is exploring.

Laravel Monocle records queries, cache, HTTP calls, and more during any request or job, then exposes the data via MCP so your coding agent can debug alongside you.

Bloom Security's SlugFest research found over 1,500 npm packages vulnerable to a repo-slug hijack attack. Here's what the flaw does and how to check if you're exposed.

A 700-firm study found AI coding agents inflate code output by 30% but don't increase software shipped. Code review is the bottleneck, and it's getting worse.

A Lead AI Architect at Microsoft open-sourced a harness that wraps coding agents in inspectable stages, human checkpoints, and a separate evaluator. Quality score jumped from 6.64 to 9.02 in controlled testing.

94% of orgs use GenAI coding tools, and the EU Cyber Resilience Act now holds them liable for open source vulnerabilities. Here is what that means for developers.

A breakdown of four AI coding assistants, what each does best, how pricing works, and which type of developer or team each one actually suits.

Pacer puts two status rings in your macOS menu bar to show whether your Claude Code, Codex, Cursor, or Copilot subscription will survive until the next reset.

A 24-build study of Claude Code and Codex found that the model you pick matters more than security prompts. Sonnet 5.5 shipped all 12 protections by default. Haiku 4.5 hardcoded a signing key anyway.

Google's 2025 DORA report links AI adoption to less stable software delivery. Here's the control gap Java teams need to close before it closes them.

Maxi Contieri's framework for writing explicit forbidden-action lists for AI coding agents, with real incidents from Replit, Google, and Cursor as the proof.