Trending

Article: InfoQ Java Trends Report 2025

This report summarizes how the InfoQ Java editorial team and several Java Champions currently see the adoption of technology and emerging trends within the Java and JVM space in 2025. We focus on Java the language, as well as related languages like Kotlin and Scala, the Java Virtual Machine (JVM), and Java-based frameworks and utilities. By Michael Redlich, Erik Costlow, Karsten Silz, Trisha Gee, Marit van Dijk, Richard Fichtner, Bert Jan Schrijver

ASP.NET Core in .NET 10: Major Updates Across Blazor, APIs, and OpenAPI

Microsoft has detailed the major updates to ASP.NET Core arriving as part of last month's .NET 10 release. As reported, this version delivers extensive improvements across Blazor, Minimal APIs, OpenAPI generation, authentication, and general framework performance. By Almir Vuk

Five AI Security Myths Debunked at InfoQ Dev Summit Munich

Katharine Jarmul challenged five common AI security and privacy myths in her InfoQ Dev Summit Munich 2025 keynote: that guardrails will protect us, better model performance improves security, risk taxonomies solve problems, one-time red teaming suffices, and the next model version will fix current issues. She said that current approaches to AI safety rely too heavily on technical solutions. By Karsten Silz

Google Cloud Demonstrates Massive Kubernetes Scale with 130,000-Node GKE Cluster

The team behind Google Kubernetes Engine (GKE) revealed that they successfully built and operated a Kubernetes cluster with 130,000 nodes, making it the largest publicly disclosed Kubernetes cluster to date. By Craig Risi

Presentation: Securing AI Assistants: Strategies and Practices for Protecting Data

Andra Lezza explains the criticality of data security for AI copilots, detailing the OWASP AI Exchange threat model and the OWASP Top 10 LLM risks. She reviews two copilot architectures - independent (single domain) and integrated (multi-tenant) - listing specific threats, controls, and best practices like granular authorization, templates, and DevSecOps to secure the entire AI data supply chain. By Andra Lezza

Podcast: Platform Engineering for AI: Scaling Agents and MCP at LinkedIn

QCon AI New York Chair Wes Reisz talks with LinkedIn’s Karthik Ramgopal and Prince Valluri about enabling AI agents at enterprise scale. They discuss how platform teams orchestrate secure, multi-agentic systems, the role of MCP, the use of foreground and background agents, improving developer experience, and reducing toil. By Karthik Ramgopal, Prince Valluri

Durable Functions and Werner Vogels’ Last Keynote: Highlights of AWS re:Invent 2025

The 2025 edition of re:Invent recently took place in Las Vegas. As anticipated, AI was a significant focus of the keynotes, but the community was more intrigued by announcements in the serverless space, including Lambda Managed Instances and Lambda Durable Functions. The conference marked the final keynote for Amazon CTO Werner Vogels after 14 years. By Renato Losio

Patch Urgently - Critical Vulnerability CVE-2025-55182 in React Server Functions Actively Exploited

An unauthenticated remote code execution (RCE) vulnerability in React Server Components (RSC) was recently reported with the highest severity (10.0). Amazon threat intelligence teams report active exploitation attempts by multiple China state-nexus threat groups. The critical vulnerability affects React versions 19.0.0 through 19.2.0 and Next.js versions 15.x and 16.x when using App Router. By Bruno Couriol

Agentic Postgres: Postgres for Agentic Apps with Fast Forking and AI-Ready Features

Tiger Data, the company behind TimescaleDB, has launched Agentic Postgres, a Postgres-based database designed for both AI agents and developers. It extends Postgres with fast forking, an MCP server, native BM25 and vector search, and includes a CLI for terminal access. By Sergio De Simone

OpenAI's house of cards seems primed to collapse

Marco Rubio bans Calibri font at State Department for being too DEI

After NPR and PBS defunding, FCC receives call to take away station licenses | NPR and PBS stations targeted by conservative group 'Center for American Rights', a nonprofit law firm involved in FCC Chairman Brendan Carr’s news-distortion probes.

Australia's Under-16 Social Media Ban

You can now train LLMs 3x faster with 30% less memory! (<3.9GB VRAM)

Pneumatic-suction robot clears 75,000 lb of cargo an hour

Underwater arms race: How robot subs will outwit next-gen sonar

Rust in the Linux kernel is officially here to stay

Mistral AI drops 3x as many LLMs in a single week as OpenAI did in 6 years

medplum

Save item

medplum

Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications.

apache

Save item

kafka

Mirror of Apache Kafka

ethereum

Save item

ethereum-org-website

Ethereum.org is a primary online resource for the Ethereum community.

aquasecurity

Save item

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

microsoft

Save item

Swin-Transformer

This is an official implementation for "Swin Transformer: Hierarchical Vision Transformer using Shifted Windows".

calcom

Save item

cal.com

Scheduling infrastructure for absolutely everyone.

paperless-ngx

Save item

paperless-ngx

A community-supported supercharged document management system: scan, index and archive all your documents

apache

Save item

superset

Apache Superset is a Data Visualization and Data Exploration Platform

Mbed-TLS

Save item

mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.