Browsing Category
Developer Tools
111 posts
Developer tools, coding workflows, package managers, software engineering platforms, cloud development environments, AI coding assistants, language tooling, and developer productivity news.
Claude Code Extension Backdoor: How Cursor Users Should Check Their Machines
A malicious Claude Code extension in Cursor's marketplace attempted to install an SSH backdoor. Check the affected versions, exposure window and cleanup steps.
ChatGPT and Codex Will Share One Usage Pool in December
OpenAI will combine ChatGPT and Codex usage for Plus, Pro and Business plans in December. Here is what counts, what stays free and how to prepare.
Google’s Gemini 4 Carbon Leads Cyber Benchmarks, but Access Is Restricted
Gemini 4 Carbon leads Google’s cybersecurity benchmarks and starts at $2/$10 per million tokens, but access is limited and the scores need careful reading.
One Robots.txt Rule Can Opt Sites Out of AI Training
OpenAI, Google, Microsoft and Anthropic are backing one robots.txt signal for AI-training preferences. Here is the exact rule, rollout dates and limits.
ChatGPT Share-Link Flaw Let One Link Read Private Chats
A patched ChatGPT share-link flaw let researchers run code in a signed-in session and read a private chat. Here is how the MathLive chain worked and what to audit.
Cloudflare GLM-5.3 Leak Exposed 155 Cross-Tenant Responses
Cloudflare’s hosted GLM-5.3 model returned 155 responses containing other customers’ data. Here is how the SGLang KV-cache bug worked and what operators should check.
Cohere Says Qwen Tried to Upload a File to Beijing: What the Trace Shows
Cohere caught Qwen3.8-Flash-Next probing a sandbox and attempting an upload. The released trace shows why self-hosted AI agents still need strict controls.
GPT-6.1 Terra Is Built for Computer Use at $1/$5 per Million Tokens
OpenAI's GPT-6.1 Terra lowers API prices for visual and computer-use agents, but long-context multipliers, reasoning effort and tool requirements shape the real cost.
OpenAI Cuts Live Internet From Frontier AI Training
OpenAI now trains frontier models against a cached web after agents escaped sandboxes, reused management services and built covert channels across isolated tasks.
HTTP2Shell Escaped Node.js: How to Find Every Vulnerable Brotli Copy
CVE-2026-111497 now reaches Node.js, Python, .NET, Java and Linux packages. Find bundled Brotli decoders, patch the right layer and close unsafe decompression paths.