# News & insights

> SDX Development news on SaaS development, applied AI, computer vision and RAG systems.

Resources

## News & insights

Concrete benchmarks to better understand the product choices, budgets and useful uses of AI.

- [PHP2Shell: Two Critical PHP Vulnerabilities, Risks and Fixes](https://sdx-development.com/en/news/web-cybersecurity/two-critical-php-vulnerabilities-risks-and-fixes) — PHP2Shell: Learn about vulnerabilities CVE-2026-109618 and CVE-2026-109619, vulnerable PHP versions, and urgent measures to secure your websites and applications.
- [GitHub AI Scan now detects PHP vulnerabilities in pull requests: should you add it to your CI/CD?](https://sdx-development.com/en/news/ai-cybersecurity/github-ai-scan-php-security-pull-requests-cicd) — GitHub AI Scan now supports PHP: how it works, its limitations and cost, Symfony and WordPress examples, and how to integrate it into a secure CI/CD pipeline.
- [Astro 7.4: Measure and Speed Up Your Website Builds](https://sdx-development.com/en/news/web-development/timings-optimize-site-generation) — Astro 7.4: discover astro build --timings to analyze slowdowns, speed up your builds, and test experimental parallel prerendering without misleading benchmarks.
- [Shopify Global Catalog: Migrate from REST to MCP/UCP Before November 2](https://sdx-development.com/en/news/web-development/shopify-global-catalog-rest-mcp-ucp-migration-novembre-2026) — Shopify is shutting down Global Catalog REST on November 2, 2026. Migration guide to MCP/UCP: mapping the 4 endpoints, JSON-RPC requests, agent profile, and tests.
- [VS Code 1.141: How to Sandbox Copilot and Local AI Agents](https://sdx-development.com/en/news/web-development/vs-code-1-141-sandbox-copilot-local-ai-agents) — VS Code 1.141: configure the Copilot sandbox, block sensitive files and network access, test denials, and resume Codex sessions.
- [Claude and AI Agents: Four Unexpected Behaviors Revealed by Anthropic](https://sdx-development.com/en/news/ai-cybersecurity/comportements-inattendus-de-claude-et-securite-des-agents-ia) — Anthropic reveals four unexpected behaviors by Claude during testing. Incidents, actions taken, and six essential safeguards for securing AI agents.
- [Node.js 26 LTS arrives on October 28, 2026: new features and migration planning](https://sdx-development.com/en/news/web-development/node-js-26-lts-new-features-migration-october-2026) — Node.js 26 will move to LTS on October 28, 2026. Temporal, V8 14.6, Undici 8, compatibility, and a migration checklist from Node.js 24.
- [Chrome 155 Adopts JPEG XL: Should You Replace WebP and AVIF on Your Website?](https://sdx-development.com/en/news/web-development/chrome-155-jpeg-xl-optimisation-images-web) — Chrome 155 adopts JPEG XL. Discover its advantages over AVIF and WebP, its limitations, and best practices for optimizing your website.
- [EmbeddingGemma 2: Building a Multimodal RAG That Stays on Your Device](https://sdx-development.com/en/news/applied-ai/multimodal-rag-that-stays-on-your-device) — EmbeddingGemma 2: how can you build a local multimodal RAG for text, code, images, and audio? Architectures, a Python tutorial, memory, and privacy.

---

[View the HTML page](https://sdx-development.com/en/news)