The New Stack Podcast

The New Stack

The New Stack Podcast is all about the developers, software engineers and operations people who build at-scale architectures that change the way we develop and deploy software. For more content from The New Stack, subscribe on YouTube at: https://www.youtube.com/c/TheNewStack

  1. -3 ДН.

    How the EU’s Cyber Act Burdens Lone Open Source Developers

    The European Union’s upcoming Cyber Resilience Act (CRA) goes into effect in  October 2026, with the remainder of the requirements going into effect in December 2027, and introduces significant cybersecurity compliance requirements for software vendors, including those who rely heavily on open source components. At the Open Source Summit Europe, Christopher "CRob" Robinson of the Open Source Security Foundation highlighted concerns about how these regulations could impact open source maintainers. Many open source projects begin as personal solutions to shared problems and grow in popularity, often ending up embedded in critical systems across industries like automotive and energy. Despite this widespread use—Robinson noted up to 97% of commercial software contains open source—these projects are frequently maintained by individuals or small teams with limited resources. Developers often have no visibility into how their code is used, yet they’re increasingly burdened by legal and compliance demands from downstream users, such as requests for Software Bills of Materials (SBOMs) and conformity assessments. The CRA raises the stakes, with potential penalties in the billions for noncompliance, putting immense pressure on the open source ecosystem.   Learn more from The New Stack about Open Source Security: Open Source Propels the Fall of Security by Obscurity There Is Just One Way To Do Open Source Security: Together Join our community of newsletter subscribers to stay on top of the news and at the top of your game.

    20 мин.
  2. 5 СЕНТ.

    How Warp Went From Terminal To Agentic Development Environment

    In this week’sThe New Stack Agents, Zach Lloyd, founder and CEO of Warp, discussed the launch of Warp Code, the latest evolution of the Warp terminal into a full agentic development environment. Originally launched in 2022 to modernize the terminal, Warp now integrates powerful AI agents to help developers write, debug, and ship code. Key new features include a built-in file editor, project-structuring tools, agent-driven code review, and WARP.md files that guide agent behavior.  Recognizing developers’ hesitation to trust AI-generated code, Warp emphasizes transparency and control, enabling users to inspect and steer the agent’s work in real time through "persistent input" and task list updates. While Warp supports terminal workflows, Lloyd says it’s now better viewed as an AI coding platform. Interestingly, the launch announcement was delivered from horseback in a Western-themed ad, reflecting Warp’s desire to stand out in a crowded field of conventional tech product rollouts. The quirky “Code on Warp” (C.O.W.) branding captured attention and embodied their unique approach. Learn more from The New Stack about the latest in AI and Warp: Warp Goes Agentic: A Developer Walk-Through of Warp 2.0 Developer Review of Warp for Windows, an AI Terminal App How AI Can Help You Learn the Art of Programming Join our community of newsletter subscribers to stay on top of the news and at the top of your game.

    53 мин.
  3. 2 СЕНТ.

    The Linux Foundation In The Age Of AI

    In a recent episode of The New Stack Agents from the Open Source Summit in Amsterdam, Jim Zemlin, executive director of the Linux Foundation, discussed the evolving landscape of open source AI. While the Linux Foundation has helped build ecosystems like the CNCF for cloud-native computing, there's no unified umbrella foundation yet for open source AI. Existing efforts include the PyTorch Foundation and LF AI & Data, but AI development is still fragmented across models, tooling, and standards.  Zemlin highlighted the industry's shift from foundational models to open-weight models and now toward inference stacks and agentic AI. He suggested a collective effort may eventually form but cautioned against forcing structure too early, stressing the importance of not hindering innovation. Foundations, he said, must balance scale with agility. On the debate over what qualifies as "open source" in AI, Zemlin adopted a pragmatic view, acknowledging the costs of creating frontier models. He supports open-weight models and believes fully open models, from data to deployment, may emerge over time.  Learn more from The New Stack about the latest in AI and open source, AI in China, Europe's AI and security regulations, and more:  Open Source Is Not Local Source, and the Case for Global Cooperation  US Blocks Open Source ‘Help’ From These Countries  Open Source Is Worth Defending  Join our community of newsletter subscribers to stay on top of the news and at the top of your game./

    29 мин.
  4. 22 АВГ.

    MCP Security Risks Multiply With Each New Agent Connection

    Anthropic's Model Context Protocol (MCP) has become the standard for connecting AI agents to tools and data, but its security has lagged behind. In The New Stack Agents podcast, Tzvika Shneider, CEO of API security startup Pynt, discussed the growing risks MCP introduces. Shneider sees MCP as a natural evolution from traditional APIs to LLMs and now to AI agents. However, MCP adds complexity and vulnerability, especially as agents interact across multiple servers.  Pynt’s research found that 72% of MCP plugins expose high-risk operations, like code execution or accessing privileged APIs, often without proper approval or validation. The danger compounds when untrusted inputs from one agent influence another with elevated permissions. Unlike traditional APIs, MCP calls are made by non-deterministic agents, making it harder to enforce security guardrails. While MCP exploits remain rare for now, most companies lack mature security strategies for it. Shneider believes MCP merely highlights existing API vulnerabilities, and organizations are only beginning to address these risks.   Learn more from The New Stack about the latest in Model Context Protocol:  Model Context Protocol: A Primer for the Developers  Building With MCP? Mind the Security Gaps  MCP-UI Creators on Why AI Agents Need Rich User Interfaces Join our community of newsletter subscribers to stay on top of the news and at the top of your game.

    47 мин.
  5. 21 АВГ.

    Why Your ‘Data Exhaust’ Is Your Most Valuable Asset

    Rahul Auradkar, executive VP and GM at Salesforce, grew up in India with a deep passion for cricket, where his love for the game sparked an early interest in data. This fascination with statistics laid the foundation for his current work leading Salesforce’s Data Cloud and Einstein (Unified Data Services) team. Auradkar reflects on how structured data has evolved—from relational databases in enterprise applications to data warehouses, data lakes, and lakehouses. He explains how initial efforts focused on analyzing structured data, which later fed back into business processes.  Eventually, businesses realized that the byproducts of data—what he calls "data exhaust"—were themselves valuable. The rise of "old AI," or predictive AI, shifted perceptions, showing that data exhaust could define the application itself. As varied systems emerged with distinct protocols and SQL variants, data silos formed, trapping valuable insights. Auradkar emphasizes that the ongoing challenge is unifying these silos to enable seamless, meaningful business interactions—something Salesforce aims to solve with its Data Cloud and agentic AI platform. Learn more from The New Stack about the evolution of structured data and agent AI:  How Enterprises and Startups Can Master AI With Smarter Data Practices  Enterprise AI Success Demands Real-Time Data Platforms Join our community of newsletter subscribers to stay on top of the news and at the top of your game.

    31 мин.
  6. 15 АВГ.

    The Top AI Tool for Devs Isn’t GitHub Copilot, New Report Finds

    In this week’s episode ofThe New Stack Agents, Scott Carey, editor-in-chief of LeadDev, discussed their first AI Impact Report, which explores how engineering teams are adopting AI tools. The report shows that two-thirds of developers are actively using AI, with another 20% in pilot stages and only 2% having no plans to use AI — a group Carey finds particularly intriguing. Popular tools include Cursor (43%) and GitHub Copilot (37%), with others like OpenAI, Gemini, and Claude following, while Amazon Q and Replit lag behind. Most developers use AI for code generation, documentation, and research, but usage for DevOps tasks like testing, deployment, and IT automation remains low. Carey finds this underutilization frustrating, given AI's potential impact in these areas. The report also highlights concern for junior developers, with 54% of respondents expecting fewer future hires at that level. While many believe AI boosts productivity, some remain unsure — a sign that organizations still struggle to measure developer performance effectively. Learn more from The New Stack about the latest insights about the AI tool adoption:  AI Adoption: Why Businesses Struggle to Move from Development to Production 3 Strategies for Speeding Up AI Adoption Among Developers AI Everywhere: Overcoming Barriers to Adoption Join our community of newsletter subscribers to stay on top of the news and at the top of your game.

    37 мин.
4,3
из 5
Оценок: 31

Об этом подкасте

The New Stack Podcast is all about the developers, software engineers and operations people who build at-scale architectures that change the way we develop and deploy software. For more content from The New Stack, subscribe on YouTube at: https://www.youtube.com/c/TheNewStack

Еще от провайдера «The New Stack»

Вам может также понравиться