Survey Traces Large Amount of Breaches Back to Vulnerable Code
A survey of 1,519 application security stakeholders finds nearly all (98%) work for organizations that have experienced a security breach attributable to vulnerable code, with 81% acknowledging their organization has shipped code with known vulnerabilities into production environments. Conducted by Censuswide on behalf of Checkmarx, the survey also finds more than a quarter of organizations […]
Eclipse Foundation Publishes Toolkit to Simplify CRA Compliance
The Eclipse Foundation has launched the OCCTET project, offering open-source compliance tools to help smaller organizations meet the EU’s new Cyber Resilience Act requirements.
Sonar Surfaces Multiple Caveats When Relying on LLMs to Write Code
New SonarSource research shows LLMs like GPT-4o, Claude Sonnet 4, and Llama-3.2 produce highly functional yet risky code — with frequent high-severity vulnerabilities, hard-coded credentials, and messy “code smells” that raise long-term tech debt.
Survey Surfaces Multiple Mobile Application Release Management Headaches
A survey of 300 mobile engineers in the U.S and the United Kingdom (UK) working for organizations with 500 to 10,000 employees finds, on average, respondents are spending five hours per release on low-value tasks involving manual steps, coordination issues and approval bottlenecks, translating into 130 wasted engineering hours annually per developer. Published by Runway, […]
Minimus Adds VEX Support to Managed Hardened Images Service
Minimus has extended its managed service for providing application developers with hardened images to include support for the Vulnerability Exploittability eXchange (VEX) format used to share data across multiple application security tools and platforms along with hardened Helm charts for securely deploying applications on Kubernetes clusters. Additionally, Minimus has added compliance dashboards and views, and […]
Five Great DevOps Job Opportunities
Our DevOps jobs report this week highlights industry roles at Sharetec, CodeRabbit , Block, Inc., Gerber Life Insurance and Optisources.
ArmorCode Extends AI Tool to Generate Code Fixes for Specific Runtime Environments
ArmorCode, this week at the Black Hat USA 2025 conference, revealed it has extended its Anya artificial intelligence (AI) tool to generate suggested code fixes that are customized for specific runtime environments.
Black Duck Software Extends AI Reach to IDE to Better Secure Code
Black Duck Software, this week at the Black Hat USA 2025 conference, revealed it has now integrated its artificial intelligence (AI) tool for securing software, dubbed Black Duck Assist, into the company’s plug-in for integrated developer environments (IDEs).
PlayerZero Adds Ability to Simulate Code to AI Platform
PlayerZero has extended its namesake platform that leverages artificial intelligence (AI) to analyze codebases by adding the ability to simulate code created using generative AI coding tools. Fresh off raising an additional $15 million in funding, PlayerZero CEO Animesh Koratana said CodeSim makes it possible to predict how that code will impact a codebase without […]
Survey Attributes Massive Economic Gains to Rise of AI in Software Development
A global survey of executives finds organizations are saving $28,249 per developer annually thanks to investments in AI.
Cycode Delivers AI Agent to Assess How Exploitable Vulnerabilities Are
Cycode has added an artificial intelligence (AI) agent to its application security posture management (ASPM) platform that has been specifically trained to determine how exploitable a specific vulnerability found in an application actually is.
Context on Tap: How MCP Servers Bridge AI Agents and DevOps Pipelines
Large language models can draft code or move artifacts, but without situational awareness they still trip over the basics. Cloudsmith CEO Glenn Weinstein tells Mike Vizard why a new piece of plumbing—the Model Context Protocol (MCP) server—is quickly becoming table stakes. Think of MCP as a receptionist for AI agents: it answers questions like “Which […]
Five Great DevOps Job Opportunities
The five job postings shared this week include remote DevOps roles at Hims and Hers Health, Credit Acceptance and Atlassian.
BMC Extends Scope and Reach of DevOps Mainframe Workflows
BMC has extended its DevOps analytics tool for mainframe environments, dubbed BMC AMI zAdviser Enterprise, to now be able to collect Git usage data to make it simpler to identify bottlenecks and other workflow issues in addition to making available in beta a BMC AMI Assistant tool that enables IT teams to via a natural language interface chat with a generative artificial intelligence that BMC has trained to help optimize operations.
Survey Surfaces Multiple Persistent DevSecOps Challenges
A survey of leaders based in North America finds 62% work for organizations that knowingly release insecure code to meet delivery deadlines.
Five Great DevOps Job Opportunities
From SRE to senior DevOps positions, check out our weekly DevOps job opportunities here, including roles this week at PMAT and Alembic.
R Systems Picks Anysphere to Build AI Coding Practice Around Cursor
R Systems International Limited, a global systems integrator, this week revealed it is building a coding practice based on Cursor, an artificial intelligence (AI) coding tool developed by Anysphere.
Survey Sees Argo CD Starting to Gain Significant Traction
A survey of 185 software development professionals who have adopted the Argo continuous delivery (CD) platform finds that 97% are now using it in production environments, with 60% running Argo for more than two years.
Survey Surfaces Widespread Adoption of AI to Build Software
A survey of 300 IT leaders finds 90% are leading teams that use artificial intelligence (AI) tools to develop applications, with 71% reporting they will not consider hiring application developers who lack AI and machine learning experience.
ControlMonkey Adds Dashboard to Manage IaC Risk
ControlMonkey today added a risk index dashboard to its automation platform for managing code created using infrastructure as code (IaC) tools based on open-source Terraform software.
Harness Extends AI Reach to Include Generating DevOps Pipelines
Harness today extended the artificial intelligence (AI) capabilities it provides in its DevOps platform to make it possible to use plain language to create pipelines that adhere to corporate standards.
Veracode Allies with Wiz to Bring More Context to DevSecOps Workflows
Veracode today revealed an alliance through which it will integrate its application security posture management (ASPM) platform with the cloud native application protection platform from Wiz.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]