Pencil.dev focuses on design-to-code speed versus static tools; upcoming reusable component libraries are planned for 2026.

Builderius page builder announced an experimental AI integration that can read and apply changes directly inside the builder.

Cloudflare’s experimental AI-built Next.js alternative, vinext, has been released with critical security flaws, escalating a feud with Next.js maintainer, Vercel.

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users from legitimate sign‑in pages to attacker‑controlled infrastructure.