Facilitating the Spread of Knowledge and Innovation in Professional Software Development

Unlock the full InfoQ experience

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources.

Don't have an InfoQ account?

Stay updated on topics and peers that matter to youReceive instant alerts on the latest insights and trends.
Quickly access free resources for continuous learningMinibooks, videos with transcripts, and training materials.
Save articles and read at anytimeBookmark articles to read whenever youre ready.

Logo - Back to homepage

News Articles Presentations Podcasts Guides

Topics

Development

Featured in Development

Accelerating Performance by Incrementally Integrating Rust into Existing Codebase

Lily Mara explains how to avoid high-risk software rewrites through incremental FFI refactoring. She shares how engineering teams can replace Python bottlenecks with Rust via PyO3, demonstrating how to achieve dramatic function-level speedups, seamless integration testing, and meaningful infrastructure cost savings without microservice overhead.

All in development

Architecture & Design

Featured in Architecture & Design

APIs for Agents: Rethinking API Programs in the MCP Era

Jim Gough and Andreea Niculcea explain how Morgan Stanley uses Architecture as Code with CALM to modernize its API program. They demonstrate integrating Model Context Protocol (MCP) and Agent-to-Agent (A2A) communications, enforcing automated governance through deployment gates, and executing zero-downtime platform upgrades to safely scale enterprise AI and agentic workflows.

All in architecture-design

AI Infrastructure

Featured in AI, ML & Data Engineering

The Agent Harness: Control Planes, Invariants, and Approval Boundaries for Production AI Agents

OpenAI’s Vinoth Govindarajan discusses why production AI agents fail beyond model hallucination. Using real-world case studies like OpenClaw, he explains the key principles of reliable agent harnesses: establishing explicit state ownership, serializing concurrent state mutations, scoping execution authority, and validating actions at the user-visible edge.

All in ai-ml-data-eng

Culture & Methods

Featured in Culture & Methods

Maximizing Success with Limited Time, Resources, and Energy: Lessons from Startup Engineering

David Gudeman discusses battle-tested architectural patterns for resource-constrained engineering teams. Drawing from over a decade of startup experience, he explains how pairing GCP, Firebase, and Cloud Run accelerates product-market fit. Learn how to eliminate redundant frontend state, structure event-driven backends, and maintain lean DevOps while building for long-term scalability.

All in culture-methods

DevOps

Featured in DevOps

Securing AI Agents: Identity, Authorization, and the DPACT Framework

In this episode, Sahil Agarwal talks about the critical challenges of identity, authorisation, and security in the age of AI agents. Sahil introduces the DPACT framework (Delegation, Policy, Auditability, Context, and Time) as a blueprint for building responsible, guardrailed agentic systems, moving away from simple token-based access toward bounded, delegated authority.

All in devops

Events

Helpful links

Choose your language

Architect Certification

Distributed systems, decentralized decisions, platform engineering, and AI architecture.
Online. Register Now.

AI Security & Privacy Engineering Certification

Secure and govern production AI systems, from sensitive data to guardrails, evals, and audits.
Online. Register now.

AI-Assisted Engineering Certification

Your coding agent moves fast. Who checks whether it's making the codebase better?
Online. Register Now.

High-Performing Teams Certification

Compare team design, delivery flow, AI roles, and metrics with experienced practitioners.
Online. Register Now.

QCon San Francisco

What's working across AI, architecture, and leadership, from the teams doing it.
Register. Early bird ends Oct 13.

QCon AI New York

Production AI across agents, context, evals, security, and infrastructure, from the senior engineers building it.
Register. Early bird ends Oct 13.

QCon London

What early-adopter teams have proven in production, across 15 engineering tracks.
Register. Early bird ends Oct 13.

InfoQ Homepage Zero Day Vulnerability Content on InfoQ

News

RSS Feed

AI, ML & Data Engineering

Un-Mused: How a Single Debug Setting Bypassed macOS Security in Meta’s AI Client

Security researcher Patrick Wardle revealed an unpatched zero-day vulnerability in Meta's Muse desktop client for macOS. This flaw lets unprivileged software manipulate the assistant's extensive permissions, compromising input confidentiality and account security. Despite a hotfix from Meta, the vulnerability raises significant concerns about platform trust and security boundaries.

Olimpiu Pop
on Sep 24, 2026

Unlock the full InfoQ experience

Don't have an InfoQ account?

Topics

Accelerating Performance by Incrementally Integrating Rust into Existing Codebase

APIs for Agents: Rethinking API Programs in the MCP Era

The Agent Harness: Control Planes, Invariants, and Approval Boundaries for Production AI Agents

Maximizing Success with Limited Time, Resources, and Energy: Lessons from Startup Engineering

Securing AI Agents: Identity, Authorization, and the DPACT Framework

Helpful links

Choose your language

News

Un-Mused: How a Single Debug Setting Bypassed macOS Security in Meta’s AI Client

Apple Reference Image Signs Photos at the Sensor, Moving Provenance Trust Away from C2PA

Andrew Kelley Interview: Why He Built Zig, Banned AI Contributions, and Moved Zig off GitHub

Cloudflare Introduces the Agent Development Lifecycle Stack to Replace Traditional SDLC

Cloudflare Cuts 100 TB of Memory from 1.1.1.1 DNS Cache

APIs for Agents: Rethinking API Programs in the MCP Era

Uber Redesigns M3DB Sharding with Subclusters to Limit Failure Impact

InfoQ Launches High-Performing Teams Certification Program

Building a Collaborative Platform Culture in a Bank

Maximizing Success with Limited Time, Resources, and Energy: Lessons from Startup Engineering

Un-Mused: How a Single Debug Setting Bypassed macOS Security in Meta’s AI Client

Graphify: Unifying Codebase Context to Streamline Agentic Software Engineering

Beyond Kubernetes at Modal: How to Scale 1 Million Concurrent Sandboxes in Seconds

GitLab Duo Expands Self-Hosted AI Options through Microsoft Foundry

Securing AI Agents: Identity, Authorization, and the DPACT Framework

Kubernetes 1.37 Released: Stable Metrics API and Rootless Kubelet in Beta

Online InfoQ Architect Certification

Online InfoQ AI Security & Privacy Engineering Program

Online InfoQ AI-Assisted Engineering Certification

Online InfoQ High-Performing Teams Certification

QCon San Francisco

QCon AI New York

QCon London 2027

InfoQ Software Architects' Newsletter

News