Sign up for our newsletter!
Stay informed on the latest DevOps news

DevOps.com

Featured

Video Interviews

AI Code Generation Raises New Quality Risks

AI Code Generation Raises New Quality Risks

|
Mladen Lazic, CTO of Scopic, joins Mike Vizard to explain why AI-generated code is outpacing review capacity — and why …
Watch Now
Why Agentic Coding Needs Governance at Scale

Why Agentic Coding Needs Governance at Scale

|
CloudBees CEO Moritz Plassnig joins Alan Shimel to explain why agentic coding is exposing every unfinished piece of the DevOps …
Watch Now

Techstrong TV

Click full-screen to enable volume control
Watch latest episodes and shows

Tech Field Day Events

Upcoming Webinars

Agents of Dev Podcast

Press Releases

Newsletter Sigup

Get the top stories of the week delivered right to your email. Subscribe below!

DevSecOps
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Researchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ... Read More
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
|
FakeGit Targets AI Coding Agents with Malicious GitHub Repos
|
Security Risks from AI Coding Agents Expand Beyond the Sandbox: Pillar
|
AI
AI is Coding Us Into a Corner
AI-powered patching and coding is putting us on a track towards a deepening dependency on future frontier models. The modern tools we use today to fix yesterday’s coding problems are quietly creating ... Read More
AI is Coding Us Into a Corner
|
So Agentic Systems Are Messing Up Your SLO Framework
|
N. Korea Group Behind Multiple Open Source Supply-Chain Attacks: Amazon
|
DataOps
AI, AWS, agents, code, AI, code, spacelift, GitLab, Duo, AI, integrating Generative AI, with DevOps, BMC, generative AI, DevOps workflows, Generative AI, model, low-code/no-code, ChatGPT
Three critical vulnerabilities found in Anthropic’s Claude Code agentic AI developer tool could be exploited simply by cloning and opening an untrusted project and lead to system takeover, stolen API keys, and ... Read More
Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover
|
Sawmills Emerges From Stealth to Apply AI to Managing Telemetry Data
|
North Korea’s Lazarus Group Targets Developers, Supply Chain
|
Continuous Delivery
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Researchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ... Read More
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
|
Building SOC 2 Compliant CI/CD Pipelines on AWS with GitHub Actions
|
FakeGit Targets AI Coding Agents with Malicious GitHub Repos
|
Related Articles
Continuous Testing
Cloud
Enterprise DevOps
DevOps Practices
DevOps Toolbox
DevOps Culture
Latest From DevOps.com
Most Read On DevOps.com
Sponsored Content