The New Stack

Developer-focused cybersecurity platform Aikido Security has announced that it has acquired Root, a company that patches known vulnerabilities directly into the open source package version a team is already running, instead of forcing them to upgrade to a newer release. The $70 million deal folds Root’s patching technology into a new product dubbed Aikido Libraries.

Amazon EKS runs hundreds of thousands of Kubernetes clusters across more than thirty AWS regions. Operating at that scale has taught us something that has shaped how we build the service and that we think is useful to anyone running Kubernetes at scale: most availability problems do not stem from a component failing. They come from a component reacting to a problem in a way that makes it worse. A cache that goes stale and serves wrong answers.

Developers weren’t happy when identity and access control software company Duende commercialized its open source IdentityServer product in December 2022, while also initially deleting its supporting documentation from GitHub. Rock Solid Knowledge (RSK), a software development company based in Bristol, UK, is a longstanding contributor to the IdentityServer community and is now dedicated to ensuring that open authentication infrastructure platform services continue to live on.

Base44 bets a narrow model beats frontier AI for vibe coding Base44, an AI-powered app-building platform, has launched its first proprietary AI model, dubbed Base One. It is a fine-tuned open-source LLM trained specifically for vibe coding web applications. The company is claiming it as an industry first: the first app-creation platform to launch its own model. The claim carries an asterisk, though.

JetBrains, the Czech developer tools company behind the IntelliJ IDEA IDE, announced Monday that it’s sunsetting Kotlin Notebook, the interactive coding plugin it first launched in July 2023. Starting with IntelliJ IDEA 2026.2, the plugin will be unbundled from the IDE and handed to the open-source community under the Apache 2.0 license — the first time its source code has been made publicly available.

Building with AI has, until recently, meant calling up someone else’s model. But wiring an app to an API from OpenAI, Anthropic, or Google is a poor fit for government and operators of critical infrastructure. When data legally or operationally cannot leave a secured network, a hosted endpoint in someone else’s cloud is a non-starter, regardless of whether the workload is intelligence analysis, grid operations, or patient records.

Workday, the payroll and HR data platform, has been pursuing AI and agents for a while, but while other businesses may allow a little room for error, getting a payroll run in Workday 99% right is not exactly good enough. Gabe Monroy, Workday’s chief technology officer, tells The New Stack that enterprise AI has to clear this bar before anyone will let it near their HR and finance data.

Okta has made its AI agent governance platform generally available for FedRAMP- and HIPAA-regulated environments, becoming what it claims is the first independent identity platform to extend AI agent lifecycle management inside the compliance boundaries federal agencies and healthcare organizations already trust. The product, Okta for AI Agents – Core, elevates AI agents to first-class identities managed alongside human and machine workforces.

The industry has recognized that shipping agent code at scale requires runtime verification, and it is moving that way fast. However, the scope of that verification remains limited for most teams. A consensus is forming in agentic development: To ship code from agents at scale, you have to enable them to verify their code at runtime. Static verification, reading the diff and running unit tests against mocks, is not enough.

Some of the engineers who made vibe coding possible have decided it’s a problem. Last month, The Wall Street Journal’s Christopher Mims interviewed Armin Ronacher and Mario Zechner, the engineers behind the Pi engine that powers OpenClaw. These engineers have been instrumental in popularizing these agentic tools, and their assessment was blunt: The tools are flooding the world with bad, sometimes dangerous code. “Eventually it will catch up to us,” Zechner told Mims. They’re referring to vibe slop.