DevSecOps
AI Agents in CI/CD Pipelines: Speed vs Control in Modern DevOps
The moment you push your code, deployment fires off on its own. The pipeline kicks in, the tests sail through, and within a few minutes your app is live in production. There ...
OpenSSF’s CRob: ‘The Runway Is Rapidly Running Out’ on EU CRA Readiness
The EU's Cyber Resilience Act kicks into high gear this September, and companies are still clueless about how they must obey its strictures. MINNEAPOLIS — At Open Source Summit North America, Christopher ...
AWS Security Agent Brings Full Repository Code Scanning to Preview
Security teams have long relied on static analysis tools to catch vulnerabilities before code ships. Those tools are useful, but they have a fundamental limitation: they match code against known patterns. They ...
Hacktron Plans to Build AI Platform to Test Code for Vulnerabilities
Hacktron revealed today it is developing a platform that leverages artificial intelligence (AI) to continuously test code for vulnerabilities. Fresh off raising $2.9 million in seed capital, Hacktron founder Zayne Zhang said ...
OpenAI’s Daybreak Challenges Anthropic in AI Cybersecurity Race
OpenAI has moved deeper into enterprise cybersecurity with the launch of Daybreak, a platform that identifies software vulnerabilities, validates fixes, and speeds up patching workflows using AI models and its Codex Security ...
Vercel’s deepsec Brings AI-Powered Security Scanning Into the Development Workflow
Security has long been the last item on the checklist. Code gets written, reviewed, merged—and then, somewhere down the line, a security team takes a look. That model worked when development moved ...
The Great Decoupling: Scaling the Outer Loop for the Agentic Era
Nassir Khan | | AI coding agents, AI-SDLC, compliance automation, devsecops, software development lifecycleThe "Inner Loop" of software development—the iterative cycle of writing, building, and debugging code—has just broken the sound barrier. With the emergence of agentic coding tools like Claude Code and GitHub Copilot ...
When AI Goes Really, Really Wrong: How PocketOS Lost All Its Data
Steven J. Vaughan-Nichols | | AI agent, AI coding agent, AI safety, Anthropic, Anthropic Claude, autonomous agents, backups, Claude, Cloud Security, Cursor, data loss, PocketOS, RailwayYou can't make this crap up. You just wish you could. Jer Crane, founder of the small vertical software company, PocketOS, reported on X that the AI Cursor coding agent and a ...
Microsoft Turns to Anthropic’s Mythos to Improve Cyber Defense
Microsoft has unveiled plans to incorporate Anthropic’s Claude Mythos Preview model and other AI models into its Security Development Lifecycle, embedding AI directly into the stages where code is written and tested ...
How to Manage Operations in DevOps Using Modern Technology
Samuel Ogbonna | | AIOps, infrastructure as code, observability, platform engineering, site reliability engineeringHow modern DevOps teams manage operations using automation, observability, AIOps and self-service to reduce toil and improve reliability ...
AI Agents in DevOps: Hype vs. Reality in Production Pipelines
The demos look super cool! An AI agent detects a failing deployment, rolls it back, opens a GitHub issue, and notifies Slack — all before the on-call engineer has finished reading the ...
Bad Actor Drops 36 Malicious Packages in npm, Targets Guardarian Users
Jeff Burt | | credentials, cryptocurrency, docker containers, Guardarian, kubernetes, Lazarus Group, npm malware, Python, Redis, SafeDep, Secrets, Shai-Hulud, software supply chain attacks, sonatype, StrapiThe npm code repository is again being used by a bad actor to launch a supply chain attack that includes three dozen malicious packages that appear as Strapi CMS plugins but deliver ...
