Source / Google
Google opens Fairwind to automate vulnerability discovery and fixing
The Fairwind program combines Gemini 3.8 Flash Cyber and CodeMender to help trusted partners find, verify, and fix security flaws at scale.
Technical news
What is happening in technology and what it means for building software.
AI selects and contextualizes news about software engineering, architecture, applied AI, security and web performance.
Permanent archive · 56 news items
Search newsTechnical news
Source / WebKit
Safari connects the browser to agents for debugging the web with real data
WebKit introduces an MCP server that lets compatible agents inspect the DOM, network, console, performance, and accessibility directly in Safari.
Source / Microsoft
VS Code separates agent sessions from the editor with a persistent host
Microsoft introduces Agent Host and the AHP protocol to keep agent sessions active, synchronized, and accessible from different local or remote clients.
Source / Cloudflare Blog
Cloudflare connects vulnerability analysis with observable production risk
Cloudflare’s new workflow combines code analysis, active routes, traffic, WAF events, and checks outside the model to prioritize findings with more context.
Source / GitHub Changelog
CodeQL 2.26.4 improves risk detection in GitHub Actions
The latest CodeQL release expands JavaScript and TypeScript modelling and refines taint-flow and mutable-reference checks in GitHub Actions.
Source / Engineering at Meta
Meta puts a proxy in front of ZippyDB to control connections, load, and failures
ZGateway turns a client-to-server connection mesh around ZippyDB into two bounded hops while centralizing batching, caching, admission control, and observability.