Sign up for our newsletter!
Stay informed on the latest DevOps news

DevOps.com

Featured

Video Interviews

AI Code Generation Raises New Quality Risks

AI Code Generation Raises New Quality Risks

|
Mladen Lazic, CTO of Scopic, joins Mike Vizard to explain why AI-generated code is outpacing review capacity — and why …
Watch Now
Why Agentic Coding Needs Governance at Scale

Why Agentic Coding Needs Governance at Scale

|
CloudBees CEO Moritz Plassnig joins Alan Shimel to explain why agentic coding is exposing every unfinished piece of the DevOps …
Watch Now

Techstrong TV

Click full-screen to enable volume control
Watch latest episodes and shows

Tech Field Day Events

Upcoming Webinars

Agents of Dev Podcast

Press Releases

Newsletter Sigup

Get the top stories of the week delivered right to your email. Subscribe below!

DevSecOps
‘Flooding Dropper’ Is Hitting npm With a Tidal Wave of Malicious Packages
Threat researchers at Sonatype are warning developers of an expanding campaign that is generating a wide range of npm accounts and dropping small numbers of malicious packages from each one, essentially flooding ... Read More
‘Flooding Dropper’ Is Hitting npm With a Tidal Wave of Malicious Packages
|
RapidFort Extends Open Source Software Security Reach to Runtime Environments
|
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
|
AI
AI-Native DevOps
For years, DevOps had a pretty straightforward mission: help teams ship reliable software faster by getting development and operations folks working together. Tools like automation, continuous integration, continuous delivery, infrastructure as code, ... Read More
The Rise of AI-Native DevOps: How AI Is Reshaping Software Delivery in 2026
|
Microsoft’s New Testing Agent Tackles the Trust Gap in AI-Generated Code
|
‘Flooding Dropper’ Is Hitting npm With a Tidal Wave of Malicious Packages
|
DataOps
AI, AWS, agents, code, AI, code, spacelift, GitLab, Duo, AI, integrating Generative AI, with DevOps, BMC, generative AI, DevOps workflows, Generative AI, model, low-code/no-code, ChatGPT
Three critical vulnerabilities found in Anthropic’s Claude Code agentic AI developer tool could be exploited simply by cloning and opening an untrusted project and lead to system takeover, stolen API keys, and ... Read More
Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover
|
Sawmills Emerges From Stealth to Apply AI to Managing Telemetry Data
|
North Korea’s Lazarus Group Targets Developers, Supply Chain
|
Continuous Delivery
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Researchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ... Read More
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
|
Building SOC 2 Compliant CI/CD Pipelines on AWS with GitHub Actions
|
FakeGit Targets AI Coding Agents with Malicious GitHub Repos
|
Related Articles
Continuous Testing
Cloud
Enterprise DevOps
DevOps Practices
DevOps Toolbox
DevOps Culture
Latest From DevOps.com
Most Read On DevOps.com
Sponsored Content