While developers ask, “How do I make this work?”, hackers ask, “What else can I make this do?”

That’s the thinking that led developer and security specialist Isaac Lewis to demonstrate that he could weaponize a new zero-click exploit. By targeting the Cursor AI editor, Lewis reprogrammed an AI agent to speak only Spanish, all while remaining invisible within the UI. Lewis said it could be launched in other code editors, including VS Code.

The real sting? This could be used to create a “distributed persistent threat.” Once a single programmer is hit, the exploit can hitchhike through the codebase, infecting the entire team and all repos.

Read my story to learn more about the AI agent attack and how developers can address it.

We’re also talking clusters and containers today:

• Analyst and regular contributor Janakiram MSV describes five major enhancements in Kubernetes version 1.35 that create more reliable and resilient clusters.
• One of the headaches of Docker containers is troubleshooting, according to TNS contributor Jack Wallen. He’s shares how to use open source Dozzle to ease the pain.

The discussion around AI often focuses on content creation, software development and financial management. However, one of the business processes being transformed fastest is the go-to-market (GTM) process, where marketing, sales, and product align to generate revenue. For years, the formula to acquire and upsell customers relied on the "demand generation funnel,"

Join us on February 3 for a spirited discussion on why copying CI/CD templates creates technical debt and leads to operational paralysis. We’ll explore why the future of DevOps scaling isn’t about copying YAML; it’s about inheriting it.