DevSecOps
Importance of Observability in the DevSecOps Pipeline: Enhancing Security, Compliance, and Collaboration
In today's rapidly developing software world, security cannot be an afterthought. DevSecOps, the integration of security practices into every phase of DevOps, requires continuous monitoring and actionable insights to detect and mitigate ...
Attackers Testing New Strain of Shai-Hulud on npm: Aikido
Jeff Burt | | Aikido Security, GitHub repositories, information stealing, JavaScript, leaked secrets, npm registry, Shai-Hulud wormThreat actors behind the virulent Shai-Hulud worm that wreaked havoc in open npm repositories toward the end of 2025 apparently are trying out a new strain that comes with slight modifications. Security ...
Surprise! Everybody Uses AI Tools for Software Development, Few Do So SecurelyÂ
Teri Robinson | | AI security, AI-generated code, appsec, code security automation, Dependency Management, devsecops, SBoM, secure coding, software supply chain riskAI is generating code faster than teams can secure it, widening software supply chain risk and exposing major gaps in AppSec and governance ...
Crates.io Removes Malicious Rust Package Targeting Web3 Developers
Jeff Burt | | cryptocurrency, Cybersecurity, Ethereum Virtual Machine, Rust programming, supply chain attackA malicious Rust package that was found to be downloading payloads aimed at stealing cryptocurrency was removed from the crates.io Rust package registry, along with another package by the same author that ...
It’s Time to Rethink Access Control for Modern Development Environments
As development environments evolve at breakneck speed, our approach to securing them remains stuck in the past. I've watched countless organizations implement robust Identity and Access Management (IAM) solutions, deploy Identity Governance ...
What Fuels AI Code Risks and How DevSecOps Can Secure Pipelines
Nitin Garg | | AI code risks, AI code security, devsecops, SBoM, secure pipeline, zero-trust securityModern development teams are under constant pressure to deliver fast, innovate continuously, and stay clear of security threats; all at the same time. Every new feature, every accelerated release, carries the hidden ...
How Cybersecurity Teams Can Work Better with DevOps
Samuel Ogbonna | | CI/CD, cloud security best practices, cyber security, devsecops, security automationDevOps teams move fast, but security can lag without the right approach. Often, cybersecurity and DevOps teams work separately, and that could lead to problems. To fix this, organizations must shift from ...
Survey Surfaces Rising Tide of Vulnerabilities in Code Generated by AI
A survey of 450 IT professionals in the U.S. and Europe finds 69% of organizations have discovered vulnerabilities in code generated by artificial intelligence (AI) tools, with 20% reporting there has been ...
The Silent Technical Debt: Why Manual Remediation Is Costing You More Than You ThinkÂ
Bob Shaker | | ActiveState report, continuous remediation, cybersecurity efficiency, Dependency Management, developer productivity, devsecops, engineering performance, innovation tax, intelligent remediation, KubeCon 2025, manual remediation, Mean Time to Remediate, mttr, open source security, remediation debt, security automation, software vulnerabilities, technical debt, transitive dependencies, vulnerability managementManual vulnerability remediation drains time, innovation, and security. Learn how intelligent remediation eliminates hidden technical debt and accelerates DevSecOps ...
Survey Surfaces Widespread Adoption of AI to Improve DevSecOps
A global survey of 1,015 IT professionals with responsibility for application security finds more than three quarters (77%) are using artificial intelligence (AI), with another 13% considering adoption. Conducted by Fastly, a ...
Git Services Need Better Security. Here’s How End-to-End Encryption Could Help
Tom Smith | | code security, devops security, end-to-end encryption, GitLab security, repository protection, secure development practices, Software Supply Chain SecurityA new study from the University of Sydney, UESTC, and Google introduces efficient end-to-end encryption for Git services like GitHub and GitLab. Learn how this breakthrough could secure your code repositories without ...
Whose Ops is it Anyway? How IDPs, AI and Security are Evolving Developer Culture
Olivier de Turckheim | | AI and ML workloads, AI in DevOps, AI infrastructure, AI-driven operations, AIOps, automation in DevOps, continuous delivery, Cycloid plug-ins, developer experience, devops culture, devops evolution, DevOps scalability, DevOps security integration, DevOps transformation, devsecops, digital transformation DevOps, gitops, IDP, intelligent automation, internal developer platforms, MLOps, modern DevOps strategy, operational resilience, platform engineering, platform governance, secure CI/CDIt was only a few years ago that perhaps the biggest hurdle for DevOps advocates was convincing leadership that it was worth the investment. That conversation has since shifted. In most organisations ...
