» Tag
ai
1156 postsBeyond CRUD: personal projects that prove real architecture skills
A look at why generic CRUD portfolios fall short, and how event-driven architecture, infrastructure-as-code, and decoupled AI integration better demonstrate senior engineering skill.
GLM 5.2 and the Open-Source Shakeup of AI Profit Margins
Zhipu AI's open-source GLM 5.2 rivals GPT-4o performance via MoE architecture while slashing inference costs, reshaping AI's profit margin economics.
FOMO-Driven AI Coding: Speed Illusion, Hidden Review Debt
GitHub's 55% speedup versus METR's 19% slowdown finding reveals how FOMO-driven AI coding adoption hides the real cost of review and verification in mature codebases.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comFixing JavaScript Observability Without Monkey-Patching
Sentry engineers are pushing Node's TracingChannel API into pg, mysql2, and redis to replace fragile JavaScript APM monkey-patching.
AI Agent XBOW Finds and Exploits a Linux Kernel Bug (CVE-2026-72018)
XBOW's AI security agent found and exploited a Linux kernel bug (CVE-2026-72018) via SMC-D, achieving full root privilege escalation.
Fake AI Crawler User-Agents Are Probing Cloud Metadata Endpoints
HoneyLabs uncovered a single client spoofing thousands of AI crawler user-agents to run SSRF attacks against cloud instance metadata endpoints.
CodeCrucible: A Reusable Blueprint for LLM-Driven SAST
Block's CodeCrucible offers a reusable design blueprint for LLM-driven SAST, using whole-repo analysis instead of snippet-anchored vulnerability scanning.
AI-Built Phishing Kits Are Industrializing Business Email Compromise
Two AI-built Phishing-as-a-Service kits automate Microsoft 365 takeover and invoice fraud, industrializing business email compromise at scale.
How Anthropic bakes security into its Claude-driven dev lifecycle
A look at how Anthropic embeds AI-driven security checks across coding, CI review, and deployment in its Claude-based dev lifecycle.
Static Scanner Finds 30 Unguarded Destructive Actions in AI Agent Frameworks
An open-source scanner analyzed 25 AI agent frameworks and confirmed 30 cases where models can delete data, deploy, or send webhooks unauthorized.