OpenAI is tightening its focus on how ChatGPT fits into real development workflows, and GPT-5.2 is the clearest signal yet of that shift. The new model arrives as teams weigh which AI systems can handle coding, debugging, and multi-step tasks reliably in production environments. The release follows an internal “code red” that redirected staff and …
In 2026, generative AI stops being an experiment for software development and starts being an architectural liability. The initial rush to apply AI everywhere is hardening into a struggle with execution, where the primary hurdles are no longer capability, but control, cost, and security. We are already seeing the cracks in code integrity. As AI-assisted …
Read more “Software development in 2026: Curing the AI party hangover”
Ongoing vulnerable Log4j downloads suggest the supply chain crisis wasn’t the wake-up call it should have been. Back in December 2021, the “internet on fire” headlines weren’t hyperbole. Security teams scrambled, governments issued mandates, and for a moment, software supply chain hygiene became a board-level priority. Yet, as we move through 2025, a stubborn baseline …
Read more “Log4j downloads shows supply chain wake-up call ignored”
GitLab reports that AI adoption is growing among developers, yet they face increasing friction from security concerns and tool sprawl. While the narrative surrounding AI often centres on the fear of job displacement, the reality for software teams is more complex. According to a recent study by GitLab, the integration of generative AI into the …
Read more “GitLab: How developers are managing AI adoption friction”
Sonatype Guide aims to secure AI coding workflows, aligning generation speed and increased productivity with DevSecOps safety. The adoption of generative AI in software engineering has introduced a paradox: while development velocity accelerates, the integrity of the software supply chain faces new and often invisible threats. AIs are adept at generating code logic, but they …
A new malware campaign is A/B testing delivery effectiveness on software developers using malicious VS Code extensions. In a campaign tracked by Koi, a threat actor published two malicious VS Code extensions – ‘Bitcoin Black’ and ‘Codo AI’ – to see which lure worked best. One targeted crypto enthusiasts; the other, productivity-focused engineers. Both delivered …
Read more “Malware campaign uses VS Code extensions for A/B testing”
Starting with TypeScript 7, a compiler port using native code will unlock “better raw performance, memory usage, and parallelism.” For years, the TypeScript compiler has been the heartbeat of modern web development, yet its reliance on JavaScript has created a performance ceiling for massive codebases. That ceiling is about to be shattered. This initiative, codenamed …
Read more “TypeScript 7 native compiler port shatters build times”
The cybersecurity assumption that AI would eventually become an autonomous weapon wasn’t wrong – it was just slower to arrive than expected. Until now, Anthropic’srecent investigation [PDF] has documented something the security community has theorised about but never witnessed at scale: a sophisticated cyber operation where artificial intelligence handled nearly everything, executing enterprise security breaches …
Read more “Enterprise AI security: What developers need to know after Anthropic’s discovery”
Anthropic’s coding tool has gained strong momentum, growing from a simple way to help teams write software faster into a product that brings in about $1 billion in run-rate revenue only months after its public launch. As the work around it expands, Anthropic is bringing Bun – the fast JavaScript runtime – into the company …
Read more “Anthropic brings Bun into its growing AI coding platform”
While autocomplete tools reduce keystrokes and chat interfaces explain development concepts, agentic AI coding systems complete entire tasks. This fundamentally alters software engineering. When a developer describes a requirement – such as adding pagination to a user listing API – an agent doesn’t just offer a code snippet, it locates the endpoint, analyses the existing …
Read more “How agentic AI coding tools change software development”