Look to these tools to improve your AI coding practices and the quality, security, and reliability of your AI-generated code.

Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...

Overview Windsurf and Amazon Q Developer, two familiar AI coding brands, will have each moved into different product areas by ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

“Honestly, AI slop [pull requests] are becoming increasingly draining and demoralizing for #Godot maintainers,” Verschelde ...

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...

The release includes an embedded MCP server that exposes Spring project analytics to AI coding assistants, along with first-class support for Spring AI and automated property refactoring.

By registering the LongCat-2.0 repository under the open-source MIT License, Meituan positions the architecture with maximum ...

China now has an open-weight model that can find software vulnerabilities and create attacks for anybody to use.

Claude Code dynamic workflows are now generally available on all paid plans, including Pro for the first time. The feature writes its own orchestration scripts and coordinates up to 1,000 parallel ...