Author: drweb

Black Duck today added a tool for analyzing and remediating code that is directly integrated into artificial intelligence (AI) coding tools. Company CEO Jason Schmitt said Black Duck Signal makes it possible to discover issues as application developers increasingly rely on AI coding tools to generate more code faster, which paradoxically also typically contains more […]

Read More

Most discussions about Model Context Protocol infrastructure ask how to govern thousands of AI tools and monitor which MCP servers are running. This question is table stakes but undershoots the possibilities. A better question is how we can unleash MCP to drive developer creativity from a trusted foundation. The first question produces a phone book of curated, controlled, static resources. The second points toward an AI playground where agents and developers interact and learn from each other. What if private catalogs of MCP servers become composable playlists that encourage mixing, reshaping, and myriad combinations of tool calls? This requires treating…

Read More

ChatGPT is great at answering questions and generating code. But here’s what it can’t do: execute that code, query your actual database, create a GitHub repo with your project, or scrape live data from websites. It’s like having a brilliant advisor who can only talk, never act. Docker MCP Toolkit changes this completely.  Here’s what that looks like in practice: You ask ChatGPT to check MacBook Air prices across Amazon, Walmart, and Best Buy. If competitor prices are lower than yours, it doesn’t just tell you, it acts: automatically adjusting your Stripe product price to stay competitive, logging the repricing…

Read More

Insider threats have always been difficult to manage because they blur the line between trusted access and risky behavior.  With generative AI, these risks aren’t tied to malicious insiders misusing credentials or bypassing controls; they come from well-intentioned employees simply trying to get work done faster. Whether it’s developers refactoring code, analysts summarizing long reports, or marketers drafting campaigns, the underlying motivation is almost always productivity and efficiency. Unfortunately, that’s precisely what makes this risk so difficult to manage. Employees don’t see themselves as creating security problems; they’re solving bottlenecks. Security is an afterthought at best.  This gap in perception…

Read More

Azul this week acquired Payara, a provider of a Java-based application server and microservices framework that extends the scope of the company’s portfolio beyond Java runtimes. The two companies were previously allied in 2018 when Payara embedded the Azul Platform Core into Payara Server Enterprise. In addition, both companies have a long history of contributing […]

Read More

Docker Joins the Agentic AI Foundation Today, the Linux Foundation launched the Agentic AI Foundation with three founding projects: Anthropic’s Model Context Protocol (MCP), Block’s goose agent framework, and OpenAI’s AGENTS.md standard. The foundation brings together the companies building the infrastructure layer for agents: Anthropic, Block, OpenAI, Amazon, Google, Microsoft, Cloudflare, and Bloomberg, alongside key tooling and platform companies.  Docker is…

Read More

As cloud-native architectures scale and regulatory pressure intensifies, organizations are finally recognizing that their logging pipelines contain sensitive. Logs fuel observability, debugging, compliance investigations, and incident response, yet they also remain one of the least governed data streams in the enterprise. Despite years of progress in DevSecOps, true privacy-safe logging, logs that remain operationally useful […]

Read More

Modern Linux development has moved beyond the traditional approach of installing everything directly on your system. You now have access to tools that help you create isolated development environments without dealing with the overhead of full virtual machines or the complexity of manual container management. This is where Fedora Toolbx comes into the picture – a tool that makes it simple to spin up containerized development environments while keeping the experience as seamless as working directly on your host system. In this guide, you’ll learn how to set up and use Fedora Toolbx to create development environments that are isolated,…

Read More