InfoWorld

Output from vibe coding tools prone to critical security flaws, study finds

The assessment, which it conducted in December 2025, compared five of the best-known vibe coding tools — Claude Code, OpenAI Codex, Cursor, Replit, and Devin — by using pre-defined prompts to build ...
Bleeping Computer

Code beautifiers expose credentials from banks, govt, tech orgs

Thousands of credentials, authentication keys, and configuration data impacting organizations in sensitive sectors have been sitting in publicly accessible JSON snippets submitted to the JSONFormatter ...
Forbes

OpenAI’s New Model Just Got Much Better At Writing More Secure Code

OpenAI’s frontier model may not have astounded when it arrived earlier this year, but research indicates it’s now much better than others at writing code with fewer vulnerabilities. One area where GPT ...
The Verge

WhatsApp can now use passkeys to secure your backups

Chat backup encryption will no longer require you to memorize passwords or lengthy encryption keys. Chat backup encryption will no longer require you to ...
VentureBeat

Meet Aardvark, OpenAI’s security agent for code analysis and patching

An aardvark works in an office typing at a desktop PC while happy human workers mill about in the background. Credit: VentureBeat made with ChatGPT Positioned as a scalable defense tool for modern ...
Ars Technica

Claude Code gets a web version—but it’s the new sandboxing that really matters

Anthropic has added web and mobile interfaces for Claude Code, its immensely popular command-line interface (CLI) agentic AI coding tool. The web interface appears to be well-baked at launch, but the ...
Wired

Vibe Coding Is the New Open Source—in the Worst Way Possible

Just like you probably don't grow and grind wheat to make flour for your bread, most software developers don't write every line of code in a new project from scratch. Doing so would be extremely slow ...
Bleeping Computer

CISA warns of actively exploited Git code execution flaw

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is warning of hackers exploiting an arbitrary code execution flaw in the Git distributed version control system. The agency has added the ...
InfoQ

Claude Code Subagents Enable Modular AI Workflows with Isolated Context

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. In this episode, Thomas Betts chats with ...
SDxCentral

Fortinet reconstructs FortiRecon with a Gartner nod

Fortinet bolstered exposure management capabilities in its FortiRecon platform, aligning with recent Gartner security recommendations. The upgraded service sees deeper integration into Fortinet's ...
ZDNet

Canonical's OpenJDK builds promise Java devs more speed - and a whopping 12 years of security support

With Ubuntu Pro, Canonical's OpenJDK build includes 12 years of support. 'Chiseled' builds are faster, more secure than other OpenJDK builds. Canonical is aligning Ubuntu's and OpenJDK's release ...