Cursor launches agent-based coding workflows as AI agents grow

AI coding assistants are no longer limited to suggesting lines of code. They are starting to take on full tasks, with the developer moving into more of a supervisory role. Cursor has introduced Cursor 3, which brings agent-based workflows into the coding environment. Instead of acting like a smart autocomplete tool, the system can plan …

Axios npm attack causes JavaScript supply chain chaos

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million weekly downloads. The North Korean state actor Sapphire Sleet compromised the project’s lead maintainer by stealing a long-lived npm access token. This allowed the attackers to publish two poisoned versions of the package that installed …

How Development teams use platforms to secure AI-generated code

AI-powered development tools are rapidly becoming part of everyday engineering workflows. Developers are increasingly relying on large language models (LLMs) and AI assistants to generate boilerplate code, debug issues or accelerate feature development. The technology is improving productivity, but it is also introducing new, concerning security risks that teams need to be aware of. Insecure …