Every week each of our five capabilities picks one development worth a decision-maker’s attention: a regulator’s advisory, a platform change, a piece of research. We credit the source, say what it means, and set out what we would do next. Or follow the feed.
Software supply chain security failed at the publishing step: a malicious npm release left SubQuery's own pipeline on 5 October. Here is what to change in your build controls.
A VMware exit plan matters more than the migration date: IBM has sold contracts for hundreds of its VMware cloud customers to 11:11 Systems. Check your contract and your options now.
Edge device security still decides breaches: ten agencies say China-linked actors used eight known CVEs, some more than a decade old. The lesson is hygiene and mailbox identity, not novelty.
ChatGPT ads will appear beside generated images from later this month for US Free and Go users. The format is small, but paid and organic presence in AI answers now need managing together.
The Cloud Security Alliance’s research on AI-generated code finds developers shipping more, with more vulnerabilities and more confidence. The fix is structural, not a ban.
InfoQ’s 2026 trends report puts FinOps for AI at the frontier: token spend is tracked, but rarely tied to outcomes. Here is how to connect AI cost to the value it creates.
NCSC, the FBI and the Dutch AIVD have exposed CHOSEN BRICK, Iranian spyware delivered through WhatsApp and Telegram conversations. The lesson reaches well beyond its targets.
Snowflake’s warning is blunt — dashboard permissions cannot govern agents that query anything they can reach. Governance has to live in the data layer, and be tested in production.
Google’s new AI contribution pilot pays publishers when their content shapes answers in Gemini, AI Overviews and AI Mode. For B2B brands, it confirms what visibility now means.