Ryan Daws, Author at Developer Tech News

NPM supply chain attack uses Ethereum blockchain

Ryan Daws — Mon, 04 Nov 2024 15:26:36 +0000

Checkmarx researchers have detected a unique supply chain attack within the NPM ecosystem that uses the Ethereum blockchain. The malicious package, dubbed “jest-fet-mock,” targets developers with a multi-platform malware employing Ethereum smart contracts for command-and-control (C2) operations. This marks a convergence of blockchain technology with traditional attack vectors—a method not yet observed in NPM packages. ... Read more »

The post NPM supply chain attack uses Ethereum blockchain appeared first on Developer Tech News.

EMERALDWHALE exploits vulnerable Git configuration files

Ryan Daws — Fri, 01 Nov 2024 15:35:46 +0000

Sysdig’s Threat Research Team (TRT) has uncovered a global operation known as EMERALDWHALE, which has stolen over 15,000 cloud service credentials by exploiting exposed Git configuration files. EMERALDWHALE utilised multiple private tools to exploit several misconfigured web services, resulting in the theft of credentials from more than 10,000 private repositories. Though the operation’s primary targets... Read more »

The post EMERALDWHALE exploits vulnerable Git configuration files appeared first on Developer Tech News.

GitHub Copilot now supports multiple LLMs

Ryan Daws — Wed, 30 Oct 2024 17:33:52 +0000

GitHub is bringing more flexibility and choice to Copilot through the integration of multiple large language models (LLMs). Since its inception, GitHub Copilot has utilised different LLMs for varied uses. The journey began with the deployment of Codex, an early iteration of OpenAI’s GPT-3, that was fine-tuned specifically for coding tasks. The evolution continued with... Read more »

The post GitHub Copilot now supports multiple LLMs appeared first on Developer Tech News.

GitHub Copilot users gain access to Stack Overflow knowledge

Ryan Daws — Tue, 29 Oct 2024 16:10:02 +0000

Stack Overflow has launched an extension for GitHub Copilot that promises to improve how developers find solutions. The extension allows users to pose questions directly within the AI-driven coding assistant and receive summarised responses informed by Stack Overflow’s extensive knowledge base. GitHub and Stack Overflow’s partnership aims to aid developers in tackling their most challenging... Read more »

The post GitHub Copilot users gain access to Stack Overflow knowledge appeared first on Developer Tech News.

Web framework Svelte delivers ‘most significant release’ yet

Ryan Daws — Fri, 25 Oct 2024 16:09:03 +0000

Svelte 5 has been released, marking what the team behind the web framework describes as the “most significant release in the project’s history” and follows 18 months of intensive development. The latest iteration of the web framework arrives as a ground-up rewrite, promising improved performance, reduced bundle sizes, and enhanced reliability. Despite these substantial changes,... Read more »

The post Web framework Svelte delivers ‘most significant release’ yet appeared first on Developer Tech News.

JetBrains launches AI model for software development tasks

Ryan Daws — Wed, 23 Oct 2024 12:48:04 +0000

JetBrains has announced the launch of Mellum, its own AI model specifically engineered for software development tasks. Mellum has been integrated exclusively into JetBrains’ AI Assistant, reporting dramatic improvements in both speed and accuracy of code completions compared to previous implementations. Unlike more extensive language models, Mellum has been purposefully designed with a smaller footprint... Read more »

The post JetBrains launches AI model for software development tasks appeared first on Developer Tech News.

Holistic’s open-source tools counter AI development risks

Ryan Daws — Wed, 23 Oct 2024 09:27:35 +0000

Holistic has unveiled an open-source library to help counter AI development risks and build fairer and more responsible systems. The library – dubbed Holistic AI OSL – arrives at a crucial moment when organisations are increasingly deploying AI systems across sensitive domains including recruitment, healthcare, and financial services. Recent studies suggest that 65% of AI... Read more »

The post Holistic’s open-source tools counter AI development risks appeared first on Developer Tech News.

Android’s CameraX library gets dual camera functionality boost

Ryan Daws — Fri, 18 Oct 2024 16:24:48 +0000

Android developers are set to benefit from an update to the CameraX library that improves its Dual Concurrent Camera feature. The enhancement, introduced in the 1.5.0-alpha01 release, simplifies the implementation of simultaneous streaming from two different cameras. Donovan McMurray, Developer Relations Engineer at Google, wrote in a blog post: “CameraX will now handle the composition... Read more »

The post Android’s CameraX library gets dual camera functionality boost appeared first on Developer Tech News.

Unity 6 launches amid ongoing effort to rebuild trust

Ryan Daws — Thu, 17 Oct 2024 16:05:57 +0000

Unity 6 has launched and is being touted as the most stable and high-performing version of the game development platform to date. Matt Bromberg, President and CEO of Unity, revealed the launch in a blog post, emphasising the company’s commitment to developer-centric improvements and long-term support. Bromberg, who recently took the helm from John Riccitiello... Read more »

The post Unity 6 launches amid ongoing effort to rebuild trust appeared first on Developer Tech News.

Zscaler highlights security trends challenging developers

Ryan Daws — Tue, 15 Oct 2024 15:28:37 +0000

Zscaler has released its annual ThreatLabz report, highlighting security challenges that should be on every developer’s radar. The 2024 Mobile, IoT, and OT Threat Report – covering June 2023 to May 2024 – highlights critical vulnerabilities in mobile applications, IoT devices, and operational technology (OT) systems that demand immediate attention from the development community. One... Read more »

The post Zscaler highlights security trends challenging developers appeared first on Developer Tech News.