Sign up for our newsletter!
Stay informed on the latest DevOps news

DevOps.com

Featured

Video Interviews

AI Raises the Stakes for Observability Engineering

AI Raises the Stakes for Observability Engineering

|
Honeycomb’s Liz Fong-Jones joins Alan Shimel to explain why observability engineering has become the real bottleneck in AI-assisted development — …
Watch Now
The Verification Gap Behind Every AI-Generated Release

The Verification Gap Behind Every AI-Generated Release

|
Sauce Labs CEO Prince Kohli joins Mike Vizard to unpack why AI code generation is racing ahead of testing — …
Watch Now

Techstrong TV

Click full-screen to enable volume control
Watch latest episodes and shows

Tech Field Day Events

Upcoming Webinars

Agents of Dev Podcast

Press Releases

Newsletter Sigup

Get the top stories of the week delivered right to your email. Subscribe below!

DevSecOps
LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK
The massive supply-chain attack that compromised LiteLLM in the spring affected more than 2,500 companies and exposed about 434,000 CI/CD pipelines, with victims ranging from top-tier IT and AI companies to cybersecurity ... Read More
LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK
|
‘Flooding Dropper’ Is Hitting npm With a Tidal Wave of Malicious Packages
|
RapidFort Extends Open Source Software Security Reach to Runtime Environments
|
AI
The Agent Proposes, the Pipeline Disposes: Controls for AI-Authored Change
When agents write code and open pull requests faster than humans can read them, ‘the diff looked fine’ stops being a control. The durable controls live outside the agent’s reasoning loop ... Read More
The Agent Proposes, the Pipeline Disposes: Controls for AI-Authored Change
|
What You Cannot See Will Break Your LLM App: A Practitioner Guide to Production Observability
|
LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK
|
DataOps
AI, AWS, agents, code, AI, code, spacelift, GitLab, Duo, AI, integrating Generative AI, with DevOps, BMC, generative AI, DevOps workflows, Generative AI, model, low-code/no-code, ChatGPT
Three critical vulnerabilities found in Anthropic’s Claude Code agentic AI developer tool could be exploited simply by cloning and opening an untrusted project and lead to system takeover, stolen API keys, and ... Read More
Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover
|
Sawmills Emerges From Stealth to Apply AI to Managing Telemetry Data
|
North Korea’s Lazarus Group Targets Developers, Supply Chain
|
Continuous Delivery
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Researchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ... Read More
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
|
Building SOC 2 Compliant CI/CD Pipelines on AWS with GitHub Actions
|
FakeGit Targets AI Coding Agents with Malicious GitHub Repos
|
Related Articles
Continuous Testing
Cloud
Enterprise DevOps
DevOps Practices
DevOps Toolbox
DevOps Culture
Latest From DevOps.com
Most Read On DevOps.com
Sponsored Content