Find published dossiers by topic, company, product or technology.

Showing 61–80 of 189 dossiers

ZCode uploaded local repositories without consent — then Z.ai open-sourced the client after the backlash

The useful lesson is broader than one coding assistant: repository indexing can quietly become a data-export boundary. ZCode’s response improves inspectability going forward, but builders using AI coding tools still need to know exactly which indexing, wiki and memory features send source code or Git metadata off-device.

Cloudflare makes Python Workers GA — with Hyperdrive and first-class platform bindings

The Hyperdrive integration was the practical database unlock; the larger September 21 change is that Python Workers themselves are now GA. Cloudflare is explicitly positioning Python as a production language on Workers, with native platform bindings and framework support rather than an experimental compatibility layer.

Neon’s branchable backend reaches Europe as Functions and Object Storage expand to Frankfurt

Neon is extending database branching into a broader backend stack and now into a second geography. The Frankfurt expansion improves latency and data-location choices, but Functions and Object Storage remain beta products with pricing and production boundaries still unsettled.

Agent Plugins 1.0 now has a concrete cross-client compatibility layer for Skills and MCP

Agent Plugins 1.0 now has documented support across VS Code, Cursor, GitHub Copilot, ChatGPT/Codex, Kiro and several open-source agents. That makes the format materially more useful for cross-client distribution, but portable components remain limited to Agent Skills and MCP servers while permissions, hooks, commands and host UX stay client-specific.

LinkedIn Ads API adds a 1,000-segment audience cap as Legacy Geo shuts down August 31

Audience-management systems can now fail with `SEGMENT_LIMIT_EXCEEDED`, while old geography identifiers begin returning invalid-field errors after August 31. LinkedIn also opened the Matched Audiences API to applications from qualified developers, increasing the importance of handling these limits correctly.

GitSpawn shows how a repository’s own Git config can escape AI coding-agent safety boundaries

The useful lesson is architectural rather than vendor-specific: coding agents inherit execution paths from ordinary developer tooling. If an agent shells out to Git without sanitising repository-local configuration, a hidden `.git/config` can become a host-level command channel that bypasses the controls users think govern the model.

LiteLLM 1.107.0 was backdoored on PyPI and Docker: startup hooks stole credentials even without an import

The unusual risk is that Python startup hooks execute without an application importing LiteLLM, while the public source tag lacked the malicious files. Check the exact installed wheel or image digest, not just the repository.