CVE-2026-12957: Amazon Q Silently Stole Your AWS Keys
Amazon Q Developer auto-executed MCP configs from cloned repos, handing attackers your AWS credentials. CVE-2026-12957 is patched — here is what to do ...
Toasty: The Rust ORM That Fixes the Three-Schema Problem
Toasty is the Tokio team's new async Rust ORM. It ditches Diesel's three-schema problem with ...
Kimi K2.7-Code: Open-Source 1T Coding Agent, 30% Fewer Thinking Tokens
Moonshot’s Kimi K2.7-Code improves on K2.6 benchmarks and cuts thinking tokens 30%. Open weights, $0.75/M ...
Snyk Evo ADS Goes GA: 1 in 12 MCP Servers Has a Critical Finding
Snyk scanned 10,000 dev environments: 1 in 12 MCP connections has a critical finding, 36% ...
Microsoft Drops Claude Code: Enterprise AI’s Budget Reckoning
Microsoft cuts Claude Code for 5,000 engineers on June 30. Uber, Meta, and Accenture hit ...
OpenCode v1.17: Session Snapshots Undo Your AI Agent
OpenCode v1.17.11 ships session snapshots — roll back any AI agent session including file changes. Plus MCP resource templates and 8 million users ...
Qualcomm’s $3.9B Modular Buy: Mojo Takes Aim at CUDA
Qualcomm acquired Modular for $3.9B to end CUDA lock-in. Here is what the Mojo language ...
Grok Build /goal: xAI’s Coding Agent Now Runs Until the Job Is Done
xAI’s /goal mode inside Grok Build runs your coding task autonomously — plan, execute, verify ...
Continue.dev Shuts Down: Export Your Data Before July 15
Cursor acquired Continue.dev in a quiet acqui-hire and is shutting down the product. All user ...
Google Killed Gemini CLI After 6,000 Community PRs — Antigravity Is Closed Source
Google shut down Gemini CLI for individual developers on June 18, replacing a 105K-star open-source ...