The software & developer tools stories our desk judged worth your time, written so anyone can follow them.
OpenAI says its AI models are coming to Google Cloud in the coming weeks, which could make setup and billing simpler for businesses already on Google.
Read more: OpenAI to offer its AI models on Google Cloud within weeksTwo critical flaws in PHP, the code behind much of the web, now have a fix. It will not install itself, so site owners must act.
Read more: Serious flaw in PHP, which runs most websites, gets a fix todayInfoQ says AI agents are a new way to build business software, and warns the field moves so fast that last year's best practice can become this year's mistake.
Read more: InfoQ series says AI agents will reshape how business software is builtNVIDIA expanded its open source toolkit so company AI agents can use a business's own records while staying inside limits set by the company.
Read more: NVIDIA adds tools to help company AI agents use your data safelyA tech writer asked Claude Code to build its own rival. The result, XDACode, is a working coding assistant that runs in a terminal, and it took about 15 minutes.
Read more: A writer had Claude Code build its own rival in 15 minutesA security firm says a flaw called PHP2Shell could let attackers run code on PHP websites. The claim is unconfirmed, but fixes are reportedly coming soon.
Read more: Unconfirmed report warns of serious flaw in PHP, which runs much of the webMicrosoft is adding risk scores for AI agents and permissions that shift with risk. It hints at how AI tools may be kept in check at work.
Read more: Microsoft adds risk scores and flexible permissions for AI agentsHackers stole UpdraftCentral keys from TeamUpdraft and are using them to secretly take over WordPress sites. Up to 400,000 sites could be exposed.
Read more: Hackers use stolen backup-plugin keys to take over WordPress sitesAnthropic's Claude Security now rescans code as it changes and tracks which flaws are fixed, giving software teams a running view of their security gaps.
Read more: Claude Security now checks your code for flaws all the timeGoogle says apps built for the next Android can no longer change your contacts on their own. They must open a standard editor where you approve each change.
Read more: Android apps will lose the power to quietly edit your contactsPrivate keys for eight eMudhra certificates were compromised, so fake sites could look trusted until software is updated.
Read more: Stolen keys let fake websites pass as trusted, so update your softwarePerplexity says its Computer assistant can now run fully on a Mac, keeping your files and messages on the machine. Here is what you need and what is unclear.
Read more: Perplexity's AI assistant can now run entirely on your MacPHP's security team will ship emergency fixes tomorrow for two critical flaws that researchers say let attackers run code on a server.
Read more: PHP to release emergency fixes tomorrow for two severe security flawsApple says nearly 100 parts in the iPhone Duo and iPhone 18 Pro are made in the U.S., but the phones are still not built there, and buyers see no change.
Read more: Apple says nearly 100 parts in new iPhones are now made in AmericaVercel has moved WebSocket support out of beta, so live chat and streaming apps on its platform now run on a fully supported feature with familiar pricing.
Read more: Vercel's live two-way connections are now fully releasedElevenLabs released two new voice models for live AI phone-style conversations. The top one answers in 0.57 seconds, which could mean fewer awkward pauses.
Read more: ElevenLabs launches faster AI voice models for live phone-style conversationsGoogle released TorchTPU, an open-source tool that lets AI apps run on its own chips with setting changes, which could widen hosting choices for businesses.
Read more: Google releases TorchTPU so AI apps can run on its chipsGoogle and Amazon released free tools that let developers move AI apps off Nvidia chips without rewriting them, which could mean more choice and lower cloud costs.
Read more: Google and Amazon make it easier to move AI apps off Nvidia chipsSmartsheet's new server lets AI assistants read and update your project sheets with plain-language requests, through Amazon Quick or the Kiro developer tool.
Read more: Smartsheet now lets AI assistants read and update your project sheetsAnthropic updated its TypeScript toolkit for Google Cloud to use stable service addresses and added support for organization accounts. Developers may need to update.
Read more: Anthropic's Google Cloud toolkit now uses stable v1 endpointsGitHub's Dependabot alerts now report the version of a risky component your project uses, which can simplify tools that collect security alerts.
Read more: GitHub security alerts now show which version of a package you useA four-person Iowa nonprofit says Microsoft Copilot gives its staff back up to 24 hours a month, mostly on grants and board reports.
Read more: Small Iowa nonprofit saves up to 24 hours a month using Microsoft CopilotAsymptote Labs raised $5.5M for tools that record what AI agents do inside a company and can block risky actions, like data leaks, before they happen.
Read more: Asymptote Labs raises $5.5M to watch and control AI agents at workGitHub has launched a package firewall in public preview that checks software packages before they install, aiming to stop malware from stealing logins on developer systems.
Read more: GitHub adds a filter that blocks malicious software packages
