Facilitating the Spread of Knowledge and Innovation in Professional Software Development

Unlock the full InfoQ experience

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources.

Don't have an InfoQ account?

Stay updated on topics and peers that matter to youReceive instant alerts on the latest insights and trends.
Quickly access free resources for continuous learningMinibooks, videos with transcripts, and training materials.
Save articles and read at anytimeBookmark articles to read whenever youre ready.

Logo - Back to homepage

News Articles Presentations Podcasts Guides

Topics

Development

Featured in Development

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Soroosh Khodami discusses why we aren't ready for the next Log4Shell. He shares live demos of dependency confusion and compromised builds, explaining how minor oversights gift hackers total system access. He explains the value of Software Bill of Materials (SBOM), dependency firewalls, and shifting security left to build resilient DevSecOps cultures that protect the modern software supply chain.

All in development

Architecture & Design

Featured in Architecture & Design

Panel: Taking Architecture Out of the Echo Chamber

Andrew Harmel-Law and a panel of expert architects discuss the shifting practice of architecture in 2025. They explain strategies for communicating technical debt to stakeholders, the benefits of decentralized decision-making through ADRs, and the career paths of modern leaders. The panel shares insights on bridging the gap between mobile and backend teams to ensure a holistic system.

All in architecture-design

AI Infrastructure

Featured in AI, ML & Data Engineering

Directing a Swarm of Agents for Fun and Profit

Adrian Cockcroft explains the transition from cloud-native to AI-native development. He shares his "director-level" approach to managing swarms of autonomous agents using tools like Cursor and Claude Flow. Discussing real-world experiments in BDD, MCP servers, and language porting, he discusses why the future of engineering lies in building platforms that orchestrate AI-driven development.

All in ai-ml-data-eng

Culture & Methods

Featured in Culture & Methods

The Principal Engineer’s Path: Skills, Strategies, and Lessons Learned

Sophie Weston explains that technical careers are winding journeys, not straight ladders. Drawing on 30 years of experience, she shares how senior ICs can become "broken combs" by broadening skills in systems thinking and strategy. She discusses the vital role of organizational flexibility and explains how public speaking and community engagement create feedback loops for career success.

All in culture-methods

DevOps

Featured in DevOps

Securing the AI Stack: From Model to Production

This eMag explores the shift from AI experimentation to production, where legacy defenses fall short. We dive into the critical trifecta of AI-driven phishing, model poisoning, and cloud governance. By rethinking security as a lifecycle responsibility, this issue provides a roadmap for securing the machine age through layered tactics, robust MLOps, and responsible deployment frameworks.

All in devops

Events

Helpful links

Choose your language

InfoQ Architect Certification

Join Luca Mezzalira for this 5-week online cohort. Master socio-technical architecture leadership.

Register Now.

QCon AI Boston

Learn how leading engineering teams run AI in production—reliably, securely, and at scale.

Early Bird ends April 14.

QCon San Francisco

Learn what's next in AI and software, from teams already doing it.

Early Bird ends April 14.

InfoQ Homepage log4j Content on InfoQ

Presentations

RSS Feed

Development

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Soroosh Khodami shares a "horror story" on supply chain attacks. He explains how one Maven or npm command can gift hackers a reverse shell and shares critical strategies like SBOMs to defend teams.

Soroosh Khodami
on Mar 30, 2026

Icon

51:51

Unlock the full InfoQ experience

Don't have an InfoQ account?

Topics

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Panel: Taking Architecture Out of the Echo Chamber

Directing a Swarm of Agents for Fun and Profit

The Principal Engineer’s Path: Skills, Strategies, and Lessons Learned

Securing the AI Stack: From Model to Production

Helpful links

Choose your language

Presentations

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

GitHub Will Use Copilot Interaction Data from Free, Pro, and Pro+ Users to Train AI Models

QCon London 2026: Team Topologies as the ‘Infrastructure for Agency’ with AI

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Panel: Taking Architecture Out of the Echo Chamber

Replacing Database Sequences at Scale Without Breaking 100+ Services

Github Integrates AI to Improve Accessibility Issue Management and Automate Feedback Triage

How to Handle Trusts and Psychological Safety When Scaling Organizations

The Principal Engineer’s Path: Skills, Strategies, and Lessons Learned

Agentic AI Patterns Reinforce Engineering Discipline

Directing a Swarm of Agents for Fun and Profit

Optimization in Automated Driving: from Complexity to Real-Time Engineering

ProxySQL Introduces Multi-Tier Release Strategy with Stable, Innovative, and AI Tracks

Open Source Security Tool Trivy Hit by Supply Chain Attack, Prompting Urgent Industry Response

PyPI Supply Chain Attack Compromises LiteLLM, Enabling the Exfiltration of Sensitive Information

Kubernetes Autoscaling Demands New Observability Focus beyond Vendor Tooling

InfoQ Architect Certification

QCon AI Boston

QCon San Francisco

InfoQ Software Architects' Newsletter

Presentations