OpenAI Codex Hooks: Control Your AI Agent’s Every Move
Codex Hooks went GA on May 14. Here's what that actually means: lifecycle events, secret scanning, auto-lint, memory builders, and the trust model ...
Node.js 26 node:ffi: Call Native C Libraries Without C++ Addons
Node.js 26.1 ships node:ffi — a built-in FFI for calling native C libraries without C++ ...
Bumblebee: Perplexity’s Open-Source Scanner for Developer Supply Chain Threats
Perplexity AI — the search company — open-sourced a developer security tool on May 22. ...
Gemini Interactions API: Migrate Before June 8
Google's Gemini Interactions API switched to the steps schema today. If you read response.outputs, your ...
Google Antigravity 2.0: Migrate Before June 18
Google deprecated Gemini CLI on May 19. You have until June 18 to migrate to ...
Cursor Composer 2.5: Benchmarks, Pricing, and Kimi K2.5
Cursor Composer 2.5 launched May 18 with 79.8% SWE-Bench, matching Opus 4.7 at 1/30th the cost. Here are the benchmarks, pricing tiers, and ...
WebMCP: Make Your Website an AI Agent Tool (Chrome 149)
WebMCP is Google's new browser standard that lets websites declare callable tools for AI agents. ...
npm Staged Publishing: The 2FA Gate Against Supply Chain Attacks
npm 11.15.0 introduced staged publishing - a mandatory 2FA approval gate between your CI/CD pipeline ...
MCP Goes Stateless: What the July 28 Spec RC Breaks
The MCP 2026-07-28 release candidate is the largest protocol revision since launch. Sessions are gone, ...
CVE-2026-26268: Cursor AI RCE via Git Hooks — Patch Now
CVE-2026-26268 lets attackers run code on your machine when Cursor's agent clones a malicious repo. ...