InfoQ

Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects

Matt Saunders — Fri, 23 Oct 2026 09:00:00 GMT

AI company Anthropic has launched OSS Scanner, a free, opt-in service to find vulnerabilities in open-source projects. Enrolled maintainers receive periodic security reports generated by the company's strongest models, including Claude Mythos. The reports are sent without human review, and project maintainers can choose to validate their findings and decide which proposed fixes to accept.

By Matt Saunders

NgRx 22: Resource Extensions and Dynamic Deep Signals for Angular

Daniel Curtis — Fri, 23 Oct 2026 08:08:00 GMT

NgRx 22 adds experimental resource extensions that change Angular's resource behavior, so value() is retained during reloads and no longer throws on errors. It also introduces dynamic deep signals for union types, a SignalStoreFeatureType utility, and ESLint v10 support. Upgrading requires Angular 22 and TypeScript 6.0, and most breaking changes have automated migrations.

By Daniel Curtis

Study Finds AI-generated Code Fails to Boost Productivity Due to Downstream Bottlenecks

Sergio De Simone — Thu, 22 Oct 2026 14:00:00 GMT

A recent Harvard study of 718 firms, using the Jellyfish analytics platform, finds that although AI coding assistants and agents increase code volume, this does not translate into a corresponding increase in completed work, partly because AI-generated code increases the workload in later stages of development, particularly code review.

By Sergio De Simone

Presentation: Actors for Agents: Patterns for Production AI

Manju Rajashekhar — Thu, 22 Oct 2026 11:00:00 GMT

Manju Rajashekhar explains how the actor model solves the complex runtime challenges of production AI agents. By treating agents as distributed systems, he discusses state ownership, message passing, write-through state, and supervision boundaries to manage failures, continuations, and mutable execution graphs, moving agentic workflows beyond fragile demos to resilient architecture.

By Manju Rajashekhar

Vercel Labs Open-Sources fx: A Zig Coding Agent Designed to Be Embedded

Daniel Curtis — Thu, 22 Oct 2026 09:33:00 GMT

Vercel Labs has released fx, an experimental open-source coding agent written in Zig. It runs as a CLI, a script component, or an embedded library, including a WebAssembly build. Early feedback questioned its model-agnostic claim and a name conflict with an existing tool. Vercel says the project is pre-1.0 and changing quickly.

By Daniel Curtis

Article: AI Changes the Data Interface, Not the Query Engine

Peihao Yuan — Thu, 22 Oct 2026 09:00:00 GMT

This article presents a disaster-recovery analytics workflow in which an AI agent generates constrained SQL or Python, DuckDB computes reproducible facts from Parquet, and the agent interprets the results. It explains the determinism split, replayable analysis, and four signals for deciding when an embedded engine is sufficient or a managed lakehouse is justified.

By Peihao Yuan

Harbor Adds Docker Sandboxes to Run Reproducible AI Agent Evals in Isolated MicroVMs

Claudio Masolo — Thu, 22 Oct 2026 09:00:00 GMT

Docker announced that Harbor, the open-source agent evaluation framework, now works with Docker Sandboxes. This change allows each evaluation task to run in its own microVM. So, instead of sharing a container, tasks are isolated for better performance

By Claudio Masolo

Developer Behind the AI-Built Adobe Clones Says They Are “Not Anywhere Close to Ready

Steef-Jan Wiggers — Thu, 22 Oct 2026 07:41:00 GMT

A developer used Claude Opus 5.5 to build open-source replacements for seven Adobe applications, promoted them across Reddit with a projection of roughly 100% parity within a month, then told Hacker News the project was not anywhere close to ready. Its own roadmap puts it at 45% ready for real work and 2,300 to 4,100 agent-hours from full parity.

By Steef-Jan Wiggers

eMudhra Intermediate CA Compromise

Chris Swan — Wed, 21 Oct 2026 17:30:00 GMT

Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys were revealed due to low entropy, not through a known breach. Browsers blocked them using revocation lists, but other software had to remove the emSign ECC G3 root. Unpatched systems remain exposed to forged certificates, including client auth and mTLS.

By Chris Swan

Netflix Bridges AWS IAM and Internal Identity with Workload Attestation

Leela Kumili — Wed, 21 Oct 2026 13:45:00 GMT

Netflix has developed a workload attestation mechanism for Apache Spark jobs running on Amazon EMR. The design combines AWS IAM identity with signed claims from Netflix’s control plane before issuing short-lived internal X.509 certificates, allowing managed compute workloads to authenticate to internal services without directly injecting credentials.

By Leela Kumili

Article Series: Agentic AI Architecture

Rafał Gancarz — Wed, 21 Oct 2026 11:30:00 GMT

In this article series, we try to establish agentic AI architecture as a new type of software architecture that will likely dominate the industry for years to come. The articles, written by industry experts, cover various elements and aspects of agentic AI architecture. We aim to present the latest trends and developments shaping the new type of architecture as it enters the mainstream.

By Rafał Gancarz

Presentation: AI is an Amplifier: Scale High Performance, Not Dysfunction

Nathen Harvey — Wed, 21 Oct 2026 11:00:00 GMT

Nathen Harvey shares insights from DORA research on AI adoption in software delivery. He explains why AI acts as an amplifier, how the DORA AI Capabilities Model drives outcomes, and why engineering leaders must evolve beyond bottlenecks like code reviews to achieve sustainable productivity, reduce delivery instability, and empower developers without burning out their teams.

By Nathen Harvey

Google SynthID Detector Simplifies Watermark Detection and Expands Support to Other AI Providers

Sergio De Simone — Wed, 21 Oct 2026 10:00:00 GMT

Google DeepMind announced the global availability of SynthID Detector, a tool designed to help identify AI-generated content, including media created using AI tools from SynthID partners such as OpenAI, NVIDIA, and Kakao, with Apple support expected soon.

By Sergio De Simone

Article: Distributed Spring Batch Without a Message Broker

Janardhan Reddy Chejarla — Wed, 21 Oct 2026 09:00:00 GMT

Distributed Spring Batch partitioning already needs a shared, persistent job repository. This article makes that database the whole coordination plane and drops the message broker, sizing work to the live node count, a per-job master with no standing coordinator, compare-and-set claiming that prevents double-execution, two-phase heartbeat failover, and where a broker is still the right choice.

By Janardhan Reddy Chejarla

Cilium 1.20 Expands Gateway API and Opens eBPF Datapath for Kubernetes

Matt Saunders — Wed, 21 Oct 2026 09:00:00 GMT

Cilium 1.20 has been released with broader Kubernetes Gateway API support, an extensible eBPF datapath and further work on sidecarless mutual TLS. The release also makes the newer netkit network device easier to introduce across Kubernetes fleets that run different Linux kernel versions.

By Matt Saunders