Blog
Insights on software development, security, and technology from our team.
A Chrome zero-day is being exploited right now. Here's what your dev team should actually do.
CVE-2026-3910 targets Chrome's V8 JavaScript engine and is already being used in real attacks. It affects every Chromium-based browser your team uses. We break down what happened, why it matters beyond "just update Chrome," and the practical steps most teams are still skipping.
Your AI coding tools are fast. Your pipeline isn't. That's the real problem.
This week's Harness DevOps report and Anthropic's new Code Review tool tell the same story: teams are generating code faster than ever, but testing, security, and deployment can't keep up. Here's what we think you should actually do about it.
Cursor's always-on coding agents are here. Are your teams ready?
Cursor launched Automations this week, letting AI coding agents run continuously without human prompting. We break down what this means for dev teams, code quality, and security posture.
That BeyondTrust RCE is worse than you think
CVE-2026-1731 went from disclosure to active ransomware exploitation in under a week. If your team uses remote support or privileged access tools, here's what you should be doing right now, and what this pattern means for how you architect access going forward.
A 9.9 CVSS bug in your remote access tool is now in ransomware campaigns
CVE-2026-1731 in BeyondTrust Remote Support went from disclosure to active ransomware exploitation in under two weeks. If your team uses remote access or privileged session tools, here's what you should be doing right now.
Laravel's AI SDK just dropped. So did six zero-days. Here's what matters.
Laravel shipped a first-party AI SDK with unified provider support and an Agent pattern. Meanwhile, Microsoft's February Patch Tuesday fixes six actively exploited zero-days. We break down what both mean for development teams right now.
AI just moved into your IDE. Here's what that actually means.
Laravel shipped a first-party AI SDK. Apple put autonomous coding agents inside Xcode. Both happened in the same week. We break down what this means for development teams building web and mobile apps, and where to be careful.
Laravel just shipped a first-party AI SDK. Here's what it actually means for your team.
Laravel released its official AI SDK on February 5, giving PHP developers a unified way to work with OpenAI, Anthropic, Gemini, and others. We break down what matters, what to watch out for, and whether you should adopt it now.
Laravel ships an AI SDK, Apple opens Xcode to autonomous agents, and we have thoughts
This week Laravel released a first-party AI SDK that unifies multiple AI providers behind a single API. Days earlier, Apple dropped Xcode 26.3 with built-in support for autonomous coding agents from Anthropic and OpenAI. Here's what both moves mean for development teams.
When the News Stream Goes Dark: What February 7th's Search Gap Tells Us About Tech Information
Today's empty tech news results reveal how fragmented our information sources have become. For development teams, this highlights critical dependencies we rarely think about.
When There's No Breaking News: What Development Teams Should Focus On Instead
Sometimes the biggest tech story is that there isn't one. Here's what your development team should prioritize when the news cycle goes quiet.
Symfony's Dual Release Strategy: Why Identical Features with Different PHP Requirements Changes Everything
Symfony 7.4 LTS and 8.0 launched simultaneously with identical features but different PHP requirements. This strategic shift forces teams to choose between long-term stability and modern performance.