Build an agent that writes its own tools

The swift patch highlights the critical need for robust security measures in developer tools to prevent widespread data breaches. The post Microsoft fixes severe VS Code vulnerability enabling GitHub token theft appeared first on Crypto Briefing.

A vulnerability in GitHub’s browser-based VSCode editor could lead to the theft of a developer’s token under certain circumstances, says a researcher. The issue, revealed this week in a blog by Ammar Askar, has apparently been already addressed by GitHub owner Microsoft. But it raises a questions about both DevOps security, and about the researcher’s allegation that, because Microsoft doesn’t treat bug discoveries seriously, he can justify giving it short notice before openly publishing vulnerabilities he finds. First, the bug: Users of github.com may not realize it, but when they are on any repository, they can shift to github.dev and its browser-based version of VSCode just by changing the URL. Why do this? Because the browser instance of VSCode is pretty powerful, Askar says in his blog. “You can view all the files in the repo (even if it’s a private one), you can send out pull requests, and even make commits.” Rob Enderle, a IT consultant who heads the Enderle Group, agrees that j

The second post from Build Club, our weekly live build session. A companion GitHub repo can be found here. Your inbox is not the problem. The problem is that you are the person other people are waiting on. Some of those messages need you specifically. Most of them need an answer you have already given... The post Build a digital twin agent (with guardrails) appeared first on DataRobot.

Explore 10 top open-source GitHub repositories for modern databases, analytics, SQL, caching, monitoring, replication, PostgreSQL, SQLite, and AI agent memory.

A malicious npm package posing as a remote user interface for OpenAI Codex exfiltrated developer authentication tokens, after attackers allegedly published code to npm that was not visible in the project’s public GitHub repository. Researchers at Aikido said the package, called codexui-android, appeared to offer legitimate functionality while collecting authentication tokens and sending them to an external server. “AI developer tooling is becoming a high-value target precisely because the tokens are powerful and long-lived,” Aikido said. “A stolen Codex refresh_token goes beyond access to a chat interface — it’s persistent, silent access to whatever that account can do.” Aikido said the incident reflected a broader pattern in which attackers build credible and useful projects as cover for malicious activity. “The legitimacy is the attack vector,” Aikido said. “As AI tools proliferate and developers reach for productivity shortcuts, expect more of this.” The case exposes what some secur

AI-driven coding surge could boost productivity and innovation but raises concerns about code quality, security, and review process adequacy. The post Nvidia CEO Jensen Huang says AI-generated commits on GitHub tripled to 1.4B in 2026 appeared first on Crypto Briefing.

Microsoft is heading to San Francisco this week in a bid to win back developers at its Build conference. I've been attending Build since the days when Microsoft called it the Professional Developers Conference, and I can't remember a more pivotal moment. As Microsoft continues to reshuffle its entire business around AI, it's moving Build into a smaller, more intimate venue. Trust in Windows and GitHub is at an all-time low, and this is Microsoft's chance to reconnect with developers and outline the future. Sources tell me that we'll hear about new AI models in Windows, a new reasoning model from Microsoft AI, and a Copilot "super app." But … Read the full story at The Verge.

Solana co-founder Anatoly Yakovenko has called for another attempt to accelerate SOL disinflation, after a new GitHub discussion proposed improving Solana’s tokenomics through a resource-based base fee that would be fully burned. The debate puts SOL issuance, fee burn mechanics and validator economics back at the center of Solana governance after last year’s failed SIMD-0228 […]