On Friday I gave the closing keynote at the WeAreDevelopers World Congress North America in San Jose. I tied together the key trends from the past year into a chronological …

A public scoreboard for vulnerability management and exploitation.

The 2026 DBIR reveals that vulnerability exploitation has surpassed stolen credentials as the top breach entry point.

An NCSC assessment highlighting the impacts on cyber threat from AI developments between now and 2027.

He said AI is helping workers produce more output, but the quality of it is so bad that their colleagues have to spend more time fixing it

A public scoreboard for vulnerability management and exploitation.

a short post

Mustafa Suleyman says he believes rival AI firm Anthropic is in effect teaching Claude it "may be conscious".

Mustafa Suleyman says he believes rival AI firm Anthropic is in effect teaching Claude it "may be conscious".

Contribute to humanlayer/advanced-context-engineering-for-coding-agents development by creating an account on GitHub.

Software engineering has never been cool, but the current level of executive excitement in software development process is scary

Meta wants more managers for its AI work

Make one button blue. Change nothing else. A short interactive comedy about agentic AI assistants that can never just do the thing.

After 25 years with TDD, we are now parting ways. The incremental TDD steps were great for human cognition, but didn't survive the transition to agentic coding.

Or, perhaps the problem isn't that AI has broken code review, maybe it’s that we've been using code review to solve the wrong problems

AI usage patterns in software teams: who is adopting AI, how it reshapes where teams spend their time, and how much more they ship.

Fences, not Sandboxes