360SOFTY

Insights

Engineering Insights

Practical writing on software architecture, SaaS products, AI automation, legacy modernisation, and the business of building reliable systems.

RSS

Curated links from external sources — not 360Softy original articles.

ExternalFrontend Development
Vercel Blog

Building secure AI agents

An AI agent is a language model with a system prompt and a set of tools. Tools extend the model's capabilities by adding access to APIs, file systems, and external services. But they also create new paths for things to go wrong. The most critical security risk is . Similar to SQL injection, it allows attackers to slip commands into what looks like normal input. The difference is that with LLMs, there is no standard way to isolate or escape input. Anything the model sees, including user input, se

Vercel BlogRead original
ExternalFrontend Development
Vercel Blog

v0-1.5-md & v0-1.5-lg now in beta on the Models API

Beta access is now available for (128K token context) and (512K token context) on our Models API.v0-1.5-mdv0-1.5-lg For full details and examples, see the Models API docs: https://vercel.com/docs/v0/api Read more

Vercel BlogRead original
ExternalFrontend Development
Vercel Blog

Observability added to AI Gateway alpha

The , currently in alpha for all users, lets you switch between ~100 AI models without needing to manage API keys, rate limits, or provider accounts.AI Gateway now includes a dedicated AI section to surface metrics related to the AI Gateway. This update introduces visibility into:Vercel Observability You can view these metrics across all projects or drill into per-project and per-model usage to understand which models are performing well, how they compare on latency, and what each request would

Vercel BlogRead original
ExternalAI
OpenAI News

Scaling security with responsible disclosure

OpenAI introduces its Outbound Coordinated Disclosure Policy to guide how it responsibly reports vulnerabilities in third-party software—emphasizing integrity, collaboration, and proactive security at scale.

Security
OpenAI NewsRead original
ExternalCloud
Cloudflare Changelog

Rules - More flexible fallback handling — Custom Errors now support fetching assets returned with 4xx or 5xx status codes

Custom Errors can now fetch and store assets and error pages from your origin even if they are served with a 4xx or 5xx HTTP status code — previously, only 200 OK responses were allowed. What’s new: You can now upload error pages and error assets that return error status codes (for example, 403, 500, 502, 503, 504) when fetched. These assets are stored and minified at the edge, so they can be reused across multiple Custom Error rules without triggering requests to the origin. This is especially

Rules
Cloudflare ChangelogRead original
ExternalCloud
Cloudflare Changelog

Rules - Match Workers subrequests by upstream zone — cf.worker.upstream_zone now supported in Transform Rules

You can now use the cf.worker.upstream_zone field in Transform Rules to control rule execution based on whether a request originates from Workers, including subrequests issued by Workers in other zones. What's new: cf.worker.upstream_zone is now supported in Transform Rules expressions. Skip or apply logic conditionally when handling Workers subrequests. For example, to add a header when the subrequest comes from another zone: Text in Expression Editor (replace myappexample.com with you

Rules
Cloudflare ChangelogRead original
ExternalCloud
Cloudflare Changelog

WAF - WAF Release - 2025-06-09

This week’s update spotlights four critical vulnerabilities across CMS platforms, VoIP systems, and enterprise applications. Several flaws enable remote code execution or privilege escalation, posing significant enterprise risks. Key Findings WordPress OttoKit Plugin (CVE-2025-27007): Privilege escalation flaw allows unauthenticated attackers to create or elevate user accounts, compromising WordPress administrative control. SAP NetWeaver (CVE-2025-42999): Remote Code Execution vulnerability enab

WAF
Cloudflare ChangelogRead original
ExternalCloud
Cloudflare Changelog

Workers - Workers native integrations were removed from the Cloudflare dashboard

Workers native integrations were originally launched in May 2023 to connect to popular database and observability providers with your Worker in just a few clicks. We are changing how developers connect Workers to these external services. The Integrations tab in the dashboard has been removed in favor of a more direct, command-line-based approach using Wrangler secrets. What's changed Integrations tab removed: The integrations setup flow is no longer available in the Workers dashboard. Manual sec

Workers
Cloudflare ChangelogRead original

Work with 360Softy

Building a SaaS product, AI system, or business platform?

Book a free consultation and we will tell you honestly whether we can help.

Book a consultationView our services →