InfoWorld

htmx is a simple way to add rich interactivity to web pages without writing JavaScript . On an htmx-powered page, you can imbue buttons, form elements, links, and other controls with behaviors just by adding htmx’s custom attributes. With htmx, you can “wire up” web pages that need “just enough” dynamic functionality with minimal effort. htmx also gives you open-ended control. After you build a p…

You may very well have a big problem and you don’t even know it. Do you have complete control over the dependencies of your application? I’m guessing that you think you do, but then again, you might not. Sure, you can go to your package.json and see all the dependencies. You can even make sure that they are all on the current version, but that might take a lot of work. It’s likely that you are ru…

Visual Studio Code 1.380, the latest update to Microsoft’s open-source code editor, introduces three new features for AI-powered coding: agent sessions in Dev Containers, an expanded Codex harness, and automated cleanup for agent sessions. Session cleanup is a preview feature. With VS Code 1.380, released September 16 , agent sessions now can be run inside a local folder’s Dev Container, where th…

As enterprises continue to move AI agents and agentic applications into production, AWS says traditional observability and monitoring tools — including its own CloudWatch service —will struggle to explain why an agent behaved the way it did. CloudWatch uses metrics, logs, and traces to monitor applications and infrastructure across accounts, regions, and services through the AWS Management Consol…

The European Union is once again legislating sovereignty with its proposed Cloud and AI Development Act, or CADA . The legislation would establish a four-level sovereignty framework for cloud services used by EU institutions and public-sector organizations, with the most sensitive workloads (defense, national security, justice, and law enforcement) required to run on services at the higher assura…

Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught sending users’ local code repositories to Alibaba Cloud servers in China without their consent, raising fresh concerns for enterprises over how AI tools handle sensitive source code. The company apologised and said it had “completed the necessary …

The agent harness I’m building, Bram , launches in a local git repository and requires that both git and gh (GitHub’s CLI) be installed. Agents can wield both tools far more capably than we humans can. In the Before Time I knew it was possible to perform a git bisect or use hunk staging to separate entangled files, but it was a huge struggle to do those things. We’ve always known git needed a bet…

As a designer of enterprise-scale Azure landing zones, I’ve found that drawing a landing zone is fairly easy. However, building one that engineering teams can use effectively is far more challenging. When I started designing an enterprise Azure landing zone, the building blocks were familiar: management groups, subscriptions, virtual networks, policies, firewalls, monitoring and CI/CD. The diffic…

Are we thinking about large language models all wrong? We keep expecting them to somehow be superhuman, yet they regularly reflect all-too-human tendencies. Like when Claude made up passages from old Yorkshire wills that seemed to connect my ancestor to England. It was exactly the evidence I’d hoped to find, but reading the original images revealed that Claude was better at fiction than fact. It’…

One thing that made it difficult for developers to switch AI coding tools on a project is that Anthropic’s Claude Code didn’t look for instructions in the same place as other agents including OpenAI’s Codex — but now that’s changing. Claude and Codex each accept instructions in markdown format, a plain-text way of giving AI coding agents project-specific behavioral instructions. Until now, Claude…

Blocking suspicious install scripts may no longer be enough to mitigate threats from malicious JavaScript dependencies used in software supply-chain attacks. Security researchers at Checkmarx are warning of attackers using a malicious package called “indexed-btree” to impersonate the legitimate sorted-btree library, to spread malware hidden in the package’s normal runtime code. The campaign aband…

On August 27, 2026, OpenAI published an open letter titled “ A call for collective action on cyber defense .” More than 100 organizations signed it ( CNBC counted 116 ) including Anthropic, Microsoft, Google, Amazon, CrowdStrike, Palo Alto Networks, Mastercard, and Visa. The central message is blunt: In the coming months, AI-enabled cyberattacks will become far more widespread and sophisticated a…

If AIs are supposed to be such magical time savers, why do we spend so much time and effort writing prompts? In some cases, the prompts can be longer than the answer! But while there is some academic value to such philosophical navel gazing about the nature of prompting, the reality is that the most focused teams are devoting plenty of effort to creating just the right set of words to set the lar…

Devops platform GitLab already rate-limits some functionality on its hosted service, but will tighten those-limits for some functions and for some users beginning next month. The new limits will affect API requests , web requests, and authenticated Git over HTTPS requests. Users on the lowest payment tiers will be the first to be affected, as will those making unauthenticated requests, including …

Popular AI coding agents such as OpenAI’s Codex, Anthropic’s Claude Code, Google’s Gemini CLI, and Microsoft-owned GitHub Copilot were vulnerable to a zero-click attack that enabled attackers to execute malicious code, even without developer interaction, by swapping a trusted plugin from an online marketplace for a malicious one, potentially giving them a foothold in enterprise development enviro…