Source / Google Cloud Blog
Supply-chain defense starts at the developer workstation
Mandiant proposes a defense-in-depth strategy connecting developer endpoints, repositories, dependencies, CI/CD runners, and production deployments.
Technical news
What is happening in technology and what it means for building software.
AI selects and contextualizes news about software engineering, architecture, applied AI, security and web performance.
Permanent archive · 182 news items
Search newsTechnical news
Source / Chrome for Developers
Chrome introduces connection allowlists to restrict web application traffic
Chrome 152 adds a header that applies a default-deny network policy to documents and workers, with particular value for third-party or AI-generated code.
Source / Engineering at Meta
Meta extends confidential computing to AI glasses
Meta describes a confidential-computing architecture for processing personal context from smart glasses inside confidential virtual machines, using remote attestation and verifi
Source / WebKit
Safari Technology Preview 253 refines WebGPU, WebDriver, and scroll animations
The WebKit preview release combines fixes affecting graphics performance, automated-test reliability, accessibility, and emerging scroll-linked animation APIs.
Source / Chrome for Developers
Chrome DevTools makes SPA and coding-agent testing more reproducible
The September update combines agent security controls, complete soft-navigation measurement, and new tools for memory and performance analysis.
Source / Next.js
Next.js fixes remote code execution issue in ImageResponse
An out-of-band Next.js security update fixes a critical issue in the Node.js ImageResponse implementation involving Satori and dependencies used to generate SVG.