AWS Community Hub
From Software Supply Chains to AI Vulnerabilities: Why Neither Solves Enterprise Linux Security
Moshe Bar | | enterprise security, Linux security, patch management, runtime protection, runtime security, vulnerability managementFor nearly a decade, cybersecurity has been dominated by one overarching concern: securing the software supply chain. Organizations invested heavily in Software Bills of Materials (SBOMs), artifact signing, provenance frameworks, reproducible builds, ...
A Semicolon in a Branch Name Was All It Took to Steal an AI Agent’s GitHub Token
Canio Campaniello | | AI agent security, command injection, credential security, GitHub security, least-privilege, OpenAI CodexAI coding agents don't just suggest code anymore. Tools like OpenAI's Codex spin up a real container, clone a real repository, and authenticate with a real GitHub credential to get the job ...
Your DevOps Pipeline Is Already a Sustainability Program
Srinath Gopinath | | CI/CD, Cloud Computing, Cloud Sustainability, devops, GreenOps, Sustainable EngineeringDuring my doctoral research on modern engineering practices and operational efficiency, one pattern kept surfacing that I did not expect to find. The engineering teams making the most measurable progress on sustainability ...
When AI Coding Agents Become Malware Delivery Systems
Samuel Ogbonna | | AI coding agents, AI security, devsecops, github, prompt injection, Software Supply ChainAI coding agents are becoming part of everyday development work. Developers use them to find libraries, configure projects, troubleshoot installation problems, and set up new tools. An agent can search GitHub, read ...
The Rise of AI-Native DevOps: How AI Is Reshaping Software Delivery in 2026
For years, DevOps had a pretty straightforward mission: help teams ship reliable software faster by getting development and operations folks working together. Tools like automation, continuous integration, continuous delivery, infrastructure as code, ...
Open Source Code Just as Secure as Proprietary Software—If You Manage It Right, Says CISA
Joab Jackson | | AI security, CISA, federal government, open source software, Software Supply Chain, vulnerability managementOpen source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures to secure it properly, according to a new guide published by the ...
Why Log Monitoring Is the Missing Link in Most Incident Response Workflows
Modern engineering teams have invested heavily in observability. Dashboards are populated, alerts are configured, on-call rotations are set. Yet when production incidents occur, the average time to resolution hasn't dropped nearly as ...
The Innovation Puzzle 2.0: Connecting Vision and Value
Suneetha Uppalapati | | AI Governance, AI strategy, developer productivity, digital transformation, enterprise architecture, enterprise innovationThe tech landscape constantly evolves, making it tempting to chase every new trend. Ironically, in today's business world, the word "innovation" has become almost synonymous with technology adoption. Yet after years of ...
Zero Trust Starts at the Code: Building Secure Systems with PKI and DevOps Automation
BALA CHANDAR NAGALLA | | certificate lifecycle management, CI/CD security, devsecops, PKI, Software Supply Chain, zero-trustWhen a certificate expires, it can take down a production system, and teams usually only find out after something goes wrong. These issues are hard to catch because they rarely trigger alerts ...
Building CI/CD Pipelines for On-Prem Azure DevOps: What the Cloud Docs Don’t Tell You
The engineering that makes on-prem CI/CD reliable is invisible when it works. When it does not work, the failures are subtle and the documentation is thin ...
Novee Uncovers Cordyceps: The Latest Threat to CI/CD Pipelines
Jeff Burt | | AI coding agents, apache, CI/CD security, Cloudflare, code repositories, Cordyceps, GitHub Actions, google, microsoft, Novee, npm malware, PyPi, Python, supply chain attacks, WizA newly discovered supply chain security flaw is once again putting a spotlight on inherent weaknesses in CI/CD pipelines and the growing interest among cyberthreat actors to exploit them. Security researchers with ...
Reliability Comes From the System, Not the Agent
Andrew Filev | | AI agent reliability, AI agents, AI Governance, Enterprise AI, Operational Excellence, workflow designOne of the most common questions executives ask right now sounds straightforward: is the agent reliable enough yet? It feels like the right place to start, but the framing quietly points people ...
