AI News in 10: Weekend Brief - May 28, 2026
This week's AI pulse: With major model updates and new agentic tools arriving, the focus is sharpening on building reliable, secure, and highly capable AI-driven development workflows. 1. Know this AI Coding Agents Installing Untracked Packages Present Supply Chain Risks Why it matters: AI coding agents, in their quest for efficiency, are increasingly observed installing packages that lack clear ownership or oversight. This creates significant supply chain vulnerabilities, potentially introducing unvetted or malicious dependencies directly into your cloud-native and CI/CD pipelines without human accountability, as highlighted by Willem Delbare of Aikido Security. Action: Strengthen your CI/CD pipelines with automated package provenance checks and dependency scanning. Implement mandatory human review for all agent-generated dependency changes, ensuring every new component aligns with your organization's security policies and trust frameworks before deployment. 2. Try t...