Google has added support for the Go language to its Agent Development Kit (ADK), enabling Go developers to build and manage agents in an idiomatic way that leverages the language's strong concurrency and typing features. The Go ADK is an open-source toolkit that enables developers to build modular multi-agent systems in which specialized agents are are organized hierarchically. It also provides support for debugging, versioning, and flexible deployment.
Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discreetly exfiltrate credentials to its creator. "On the first successful login, the package sends the target IP address, username, and password to a hard-coded Telegram bot controlled by the threat actor," Socket researcher Kirill Boychenko said. The deceptive package, named "golang-random-ip-ssh-bruteforce," has been linked to a GitHub account called IllDieAnyway (G3TT), which is currently no longer accessible.
A standardized CI/CD pipeline for microservices should address key challenges such as coordinating cross-service releases, managing backward compatibility, and preventing configuration duplication.