Continuous Testing
Why CI/CD Security Testing Is Going Autonomous (and Why It Should Stay Local)
mehdi boutayeb | | application security, autonomous security testing, CI/CD, devsecops, penetration testing, Software Supply ChainContinuous integration and delivery changed the tempo of software. Teams merge dozens of times a day, infrastructure is redefined on every commit, and a new build can reach production in minutes. Security ...
Survey Surfaces Rising Tide of Production Issues Traced Back to AI Code
A survey of 400 business and engineering executives finds 80% have traced a production incident, outage, or customer-impacting defect to code generated by artificial intelligence (AI) tools in the past 12 months ...
Sandbox Testing for API-Heavy Systems: What Changes When You Don’t Own the Dependency
Sandbox testing works well when your team controls both sides of the integration. You define the service, you define the mock, you know exactly what the sandbox should return. That setup holds ...
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Jeff Burt | | Aikido Security, AWS, credential theft, GitHub Actions, HashiCorp Terraform, npm malware, Shai-Hulud worm, supply chain attackResearchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ...
Tricentis Acquires Tabnine to Gain Knowledge Graph for AI Testing Agents
Tricentis today revealed it is acquiring Tabnine to gain access to a knowledge graph that will be used to provide context to AI agents that have been trained to automate a range ...
Validation Debt That Your Dashboards Are Not Showing
Saqib Jan | | AI coding assistants, devops, Enterprise AI, software quality, software testing, validation debtThe gap between how fast AI writes code and how reliably teams verify it is quietly becoming a balance-sheet risk. Enterprise leaders are learning to measure it before it forces repayment. Every ...
FakeGit Targets AI Coding Agents with Malicious GitHub Repos
Jeff Burt | | AgentBaiting, AI coding agents, AI supply chain risk, Anthropic Claude Code, fake repositories, FakeGit, github, Google Gemini, Island, MCP Server, OpenAI ChatGPT, SmartLoader, StealCThreat actors continue to find new ways to incorporate AI into schemes aimed at luring developers into downloading malware from fake repositories. The latest example involves almost 7,600 malicious GitHub repositories that ...
AI-Native Testing Is Now a Core Quality Engineering Discipline
Saqib Jan | | agentic AI, AI-native Testing, Model Context Protocol, Quality Engineering, software testing, test automationPredictions from some of the most prominent voices in the technology industry suggest that software engineering could become increasingly obsolete within a year, jolting the developer community in ways that are still ...
Why You Need AI Agent Security Validation in Software Testing
Engineering teams have been racing for the last two years to deploy AI agents that can find bugs faster than any QA team ever could. Autonomous testing agents can crawl through codebases, ...
SmartBear Tightens Integration Between AI Coding and Testing Tools
SmartBear this week revealed it is narrowing the divide between coding and testing by integrating its platform with artificial intelligence (AI) coding tools. Sheryl Koenigsberg, senior vice president of product marketing at ...
From AI Hype to AI Assurance: How Engineering Teams Can Safely Ship AI-Enabled Software
Olamilekan Lamidi | | AI assurance, AI Governance, AI testing, generative AI, MLOps, software engineeringAI has moved very quickly from experimentation to production. A few years ago, many organizations were still asking whether AI could improve their products or internal workflows. Today, the question is different: ...
GitHub API Abuse, ‘Ghost’ Accounts Part of Malicious Efforts to Map Organizations
Jeff Burt | | Cofense, Data Exfiltration, data mapping, data scraping, datadog, Fortran, GitHub API, GitHub ghost accounts, gitlab, GraphQL, personal tokens, REST APIsDatadog researchers uncover months-long overlapping campaigns to scrape data about companies and their developers ...
