SEC.01 / AI Tools & Prompts
SHA Pinning Did Not Save the Plugin Install
Air Security's Plugin4Shell hits Claude Code, Codex, Copilot, and Gemini CLI. Two vendors patched. Copilot is disputed. AI commits still leak secrets at 2x.
Air Security's Plugin4Shell hits Claude Code, Codex, Copilot, and Gemini CLI. Two vendors patched. Copilot is disputed. AI commits still leak secrets at 2x.
Pondero says upgrade Claude Code past 2.1.179. SHA pinning is deprecated. Safari 27 shipped MCP. Applitools wants agents to see the UI they just wrote.
JetBrains' April 2026 survey confirms near-universal adoption of AI coding tools. But the trust gap between use and confidence is the story nobody's talking about.
AI-native IDEs aren't just traditional editors with autocomplete — they're reimagining the entire development experience around AI collaboration. Here's how Cursor, Windsurf, and GitHub Copilot are reshaping software development.