This week's security roundup covers the Anubis web AI firewall, AI exploit generation, a vulnerability in CodeRabbit, the potential illegality of adblocking in Germany, a Microsoft Copilot audit log issue, and a disputed Elastic EDR vulnerability.
This article explores how AI agents are reshaping software development and the impact they have on a developer’s workflow. It introduces a practical approach to staying in control while working with these tools by adopting key best practices from the discipline of software architecture, including defining an implementation plan, splitting tasks, and so on.
Guidance on choosing the best AI model for GitHub Copilot projects, considering speed, depth, cost, and task complexity. Models discussed include GPT-4.1, GPT-4o, Claude 3.5 Sonnet, o4-mini, o3, Gemini 2.0 Flash, and GPT-4.5.
This article explores a framework for evaluating AI models for use with GitHub Copilot, considering factors like recentness, speed, accuracy, and how to test them within your workflow. It highlights the benefits of using different models for chat versus code completion, and reasoning models for complex tasks.
A repository containing extracted system prompts and tools for various AI models including FULL v0, Cursor, Manus, Same.dev, Lovable, Devin, Replit Agent, Windsurf Agent, and VSCode Agent. It offers insights into the structure and functionality of these models and includes a security notice for AI startups.
GitHub Copilot now features instant semantic code search indexing, dramatically reducing the time it takes for Copilot to understand and reference your codebase, making development workflows more efficient.
This blog post introduces the Semantic Telemetry project at Microsoft Research, which uses a data science approach to analyze how people interact with AI systems, specifically focusing on Copilot in Bing usage. It discusses the complexity of human-AI interactions and how they differ from traditional search.
- Topics: Copilot in Bing chats were analyzed for topic categorization. Technology (21%) was the most common topic, followed by Entertainment (12.8%), Health (11%), and others. Within technology, programming and scripting were prominent subtopics.
- Platform Differences: Mobile users tend to use Copilot for personal tasks, while desktop users engage in more professional activities.
- Topics: Copilot in Bing chats were analyzed for topic categorization. Technology (21%) was the most common topic, followed by Entertainment (12.8%), Health (11%), and others. Within technology, programming and scripting were prominent subtopics.
- Platform Differences: Mobile users tend to use Copilot for personal tasks, while desktop users engage in more professional activities.
GitHub Copilot Extensions allow developers to use natural language to query documentation, generate code, retrieve data, and execute actions on external services without leaving their IDEs. They support public extensions from companies like Docker, MongoDB, Sentry, and allow developers to create their own extensions for internal libraries or APIs.
Augment Code is an AI coding assistant aimed specifically at professional software engineers and large codebases, offering features like project summaries, code improvements, and real-time code completions. It is designed to enhance productivity by understanding the context and style of your project, providing useful suggestions and improvements.
Introducing agent mode for GitHub Copilot in VS Code, announcing the general availability of Copilot Edits, and providing a first look at the SWE agent codenamed Project Padawan.
