13 new critical holes in JavaScript sandbox allow execution of arbitrary code

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code to escape the container and do nasty things to IT environments. As a result, developers using this library in their applications are urged to update the software to the latest version, which is currently 3.11.2. The warnings…

Read More

OpenAI’s Symphony spec pushes coding agents from prompts to orchestration

OpenAI has released Symphony, an open-source specification for turning issue trackers such as Linear into control planes for Codex coding agents. Instead of asking an AI tool for help with one coding problem at a time, Symphony is designed to let agents pick up work from an issue tracker, run in separate workspaces, monitor CI,…

Read More

Microsoft brings C++ smarts to GitHub Copilot in Visual Studio Code

Microsoft has introduced C++ symbol context and CMake build configuration awareness for GitHub Copilot in Visual Studio Code. The C++ code understanding improvements were announced on February 19. The updates to GitHub Copilot in VS Code bring the same C++ intelligence as the Microsoft’s C/C++ and CMake Tools extensions directly into agent mode by surfacing…

Read More