AI
Arm Adds AI Tool to Optimize Workloads Using Runtime Data
Arm has made available a Dynamic Insights tool that leverages artificial intelligence (AI) models to generate recommendations for optimizing software running on its processors using actual data collected at runtime. Alex Spinelli, ...
The Agent Proposes, the Pipeline Disposes: Controls for AI-Authored Change
Veera Ravindra Divi | | agent permissions, agentic coding, AI change control, AI code review, AI coding agents, AI Governance, AI pull requests, AI software development, AI-authored code, AI-generated code security, autonomous coding agents, bounded-write agents, change-budget gates, CI/CD security, human-in-the-loop, in-toto, independent evals, least-privilege, policy as code, protected paths, provenance attestation, provenance verification, Secure DevOps, signed attestations, Sigstore, SLSA, Software Supply Chain Security, staged autonomyWhen agents write code and open pull requests faster than humans can read them, ‘the diff looked fine’ stops being a control. The durable controls live outside the agent’s reasoning loop ...
What You Cannot See Will Break Your LLM App: A Practitioner Guide to Production Observability
Gourav Singla | | AI monitoring, AI observability, AI quality monitoring, automated AI evaluation, Distributed Tracing, finish reason, hallucination monitoring, LLM cost observability, LLM latency, LLM monitoring, LLM observability, LLM tracing, model-graded evaluation, OpenTelemetry GenAI, OTel GenAI, production AI reliability, production LLMs, prompt failures, prompt regression, provider monitoring, quality drift, token budget alerting, token cost monitoringTraditional application observability was built around a simple mental model: Your code runs, metrics come out and when something breaks, the logs tell you why. Large language models (LLMs) break that model ...
LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK
Jeff Burt | | AI infrastructure, AI supply chain attacks, AI-driven CI/CD pipelines, Aqua Security Trivy, CloudSEK, code repositories, FBI, information stealing, LiteLLM, malware, Mini Shai-Hulud, PyPi, TeamPCPThe massive supply-chain attack that compromised LiteLLM in the spring affected more than 2,500 companies and exposed about 434,000 CI/CD pipelines, with victims ranging from top-tier IT and AI companies to cybersecurity ...
Survey Surfaces Rising Tide of Production Issues Traced Back to AI Code
A survey of 400 business and engineering executives finds 80% have traced a production incident, outage, or customer-impacting defect to code generated by artificial intelligence (AI) tools in the past 12 months ...
The Rise of AI-Native DevOps: How AI Is Reshaping Software Delivery in 2026
For years, DevOps had a pretty straightforward mission: help teams ship reliable software faster by getting development and operations folks working together. Tools like automation, continuous integration, continuous delivery, infrastructure as code, ...
Microsoft’s New Testing Agent Tackles the Trust Gap in AI-Generated Code
AI coding assistants write code fast. Whether that code can be trusted is a separate question, and it's becoming a more urgent one. Surveys this year put average developer trust in AI-generated ...
‘Flooding Dropper’ Is Hitting npm With a Tidal Wave of Malicious Packages
Jeff Burt | | Flooding Dropper, linux, macOS, malicious npm packages, Microsoft Windows, naming conventions, open source threats, OpenSourceMalware, sonatypeThreat researchers at Sonatype are warning developers of an expanding campaign that is generating a wide range of npm accounts and dropping small numbers of malicious packages from each one, essentially flooding ...
HackerOne Extends Platform Reach to Remediate Source Code Vulnerabilities
HackerOne has added a remediation capability to its H1 Platform that reduces the amount of time required to remediate validated vulnerabilities and other weaknesses affecting specific lines of source code. Nidhi Aggarwal, ...
Why Reliability Guardrails Are Needed in Every AI Coding Pipeline
Kolton Andrus | | ai, AI agents, chaos engineering, CI/CD, reliability, site reliability engineeringWe’re in the middle of a reliability reckoning. Thanks to AI, companies are shipping code much faster than before. But if there’s anything to learn from the surge in high-profile outages over ...
Meta Launches AI Coding Agent to Challenge OpenAI and Anthropic
In an effort to catch up with OpenAI and Anthropic in one of AI's fastest-growing markets, Meta has launched its first AI coding agent, Muse Code, alongside an updated coding-focused AI model ...
AWS Extends DevSecOps Reach to AI Coding Tools from Anthropic and OpenAI
Amazon Web Services (AWS) this week at the Black Hat USA conference revealed it is working with both Anthropic and OpenAI to integrate their respective coding tools with a service it has ...
