AI-Generated Code Security Has Not Improved in a Year
Veracode tested more than a hundred models and found a 56 per cent security pass rate, flat year on year. Coding-special...
Wire
ASEAN edition · Tue, 18 Aug 2026 · Signal over noise
Developer Tools News
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
529 articles
83 this week
14 desks
Health & Wellness
18
Privacy & Data
16
Cloud & Infra
16
Cyber Threat Intel
13
Consumer Tech
10
Sustainability
5
Statistics
4
Science
3
Advertisement
A Second AI Security Body in a Fortnight. This One Caps Membership at Fifty.
The AI Trust and Security Consortium launched on 11 August with fifty seats and incidents shared under strict confidenti...
A Reporting Standard for Rogue AI Agents, Minus the Two Labs That Matter Most
Over 120 organisations have proposed SAFE, a common taxonomy and clock for reporting AI agent security incidents. It bor...
Advertisement
Mozilla Revoked a Signing Key Nobody Stole. That Is the Correct Answer.
An unencrypted copy of the Firefox release-signing subkey was committed to a private repo. No evidence of misuse, everyo...
Five Rivals Agreed on a Folder Layout. That Is the Achievement.
Agent Plugins 1.0.0 packages Agent Skills and MCP servers into one portable directory. Everything the specification refu...
Torvalds Calls It the New Normal. AI Is Not Writing the Kernel, It Is Reviewing It.
Linux 7.2-rc7 is large, and Torvalds says many of the fixes come from review by AI tools. Machine review scales. Maintai...
Claude Code Stops Asking on Friday. Its Own Study Says Humans Caught 13.6%
From 14 August the approval prompt in Claude Code is off by default for Pro, Max and Team accounts. Anthropic says peopl...
AI Fixed a Quarter of the Vulnerabilities Cleanly. The Failures Pass Your Tests.
Researchers at 1Password's Off-by-1 Labs found that autonomously generated security patches cleanly fixed the vulnerabil...
Humans Miss a Third of Malicious Agent Commands. They Also Block Half the Safe Ones.
A permission-approval game logged 409,000 decisions across more than 40,000 runs. Reviewers missed 33.7% of malicious co...
Two Registries Made Time a Security Control. Our Own Files Say When That Works.
GitHub gave Dependabot a three-day cooldown on 14 July and PyPI began rejecting new files on releases older than 14 days...
A cPanel Flaw Lets One Hosting Customer Reach Every Other Customer on the Server
CVE-2026-58048 gives an authenticated cPanel user database root privileges. On shared hosting, that reaches databases be...
Singapore Told Node.js Users to Treat Their Credentials as Already Stolen
A self-propagating worm reached the maintainer of keyv and used the credentials it stole to publish infected releases ac...
Every Flaw CISA Listed This Week Was a Tool That Builds or Runs Other Software
Five KEV listings in three days: an RMM console, a CI/CD server, a Tomcat cluster channel and an AI workflow builder. No...
A Critical Rails Flaw Reads Your Server's Files From an Image Upload — and Patching Rails Is Not Enough
CVE-2026-66066 scores 9.5 and needs no authentication. The fix depends on a libvips version many deployments do not have...
npm v12 Is Here, and It Turns Off a Default That Has Run Arbitrary Code for a Decade
npm v12 went generally available on 8 July, flipping install scripts, Git dependencies and remote-URL packages from auto...
Apple Loses Its EU Gatekeeper Fight — What the DMA Ruling Actually Changes for Developers
On 8 July 2026, the EU General Court dismissed Apple's challenges to its Digital Markets Act gatekeeper designation for...
DuneSlide: Two Cursor Flaws Turn a Zero-Click Prompt Injection Into Code Execution
Cato AI Labs has disclosed DuneSlide — two critical remote-code-execution flaws in Cursor (CVE-2026-50548 and CVE-2026-5...
Cloudflare Splits AI Crawlers Into Search, Agent and Training — With New Ad-Page Defaults Coming in September
On 1 July 2026, Cloudflare split AI bot traffic into Search, Agent and Training categories for all customers, including...
npm v12 Flips Three Install Defaults From Automatic to Opt-In — Prepare Your Pipelines Now
GitHub's npm v12, due July 2026, turns three things npm install does automatically today into choices you have to opt in...
WWDC 2026 for Developers: An Expanded Foundation Models Framework and an Agentic Xcode 27
Beyond the new Siri, WWDC 2026 gave developers an expanded Foundation Models framework — multimodal prompts and access t...
Miasma: How a Hijacked CI Pipeline Shipped Malicious npm Packages With Valid Provenance
The Miasma supply-chain attack didn't typosquat or steal an npm token — it hijacked a maintainer's CI pipeline and publi...
NEXTDC Opens Peninsular Malaysia's First Tier IV Data Centre with RM2.8 Billion KL1 Launch in Petaling Jaya
NEXTDC officially opened KL1 in Petaling Jaya on 14 May 2026 — an AUD$1 billion facility that holds Peninsular Malaysia'...
Indonesia's INA Locks In 30% Annual Allocation for AI and Data Centre Infrastructure
Indonesia's sovereign wealth fund INA has formalised a 30% annual cap on digital sector deployment, anchored by a joint...
Microsoft Build 2026: Project Polaris Cuts Copilot's OpenAI Dependency, Copilot Workspace Ships to GA
Microsoft confirmed at Build 2026 in San Francisco that GitHub Copilot will run on Project Polaris — its own mixture-of-...
Advertisement