More Than 3,000 ‘Ghost’ Accounts Spreading Malware on GitHub
GitHub and similar open-source code and project repositories have become a common target of cybercriminals looking to lure developers into unknowingly downloading malicious scripts.
Backslash Security Adds Simulation and Generative AI Tools to DevSecOps Platform
Backslash Security today added an ability to simulate upgrades to a higher version of an application to its application security platform for scanning code and creating software bills of materials (SBOMs).
Survey Surfaces Mass Open Source Java Migration
A global survey of 663 IT professionals with Java expertise finds 86% are migrating some portion of their applications to an open-source edition of the Java platform or have already migrated (25%).
Survey Surfaces Wide Generative AI Adoption Among Software Engineers
A survey of 509 software engineers finds nearly three-quarters (72%) are leveraging generative artificial intelligence (AI) capabilities somewhere in a software development process, with nearly half (48%) reporting they use these tools every day.
Five Lessons Learned the Hard Way From the Global Blue Screen of Death
Don’t wait until the pain is unbearable. Invest in people, processes and tools to ensure that you will never be put in the position of explaining why a bug in one small file impacted the entire world.
Coralogix Extends Reach of Observability Platform to Mobile Applications
Coralogix this week extended the reach of its observability platform to add real-time user monitoring (RUM) capabilities for mobile applications.
CrowdStrike: Faulty Test Software Led to Global Windows Crash
A tool for validating Rapid Response Content updates to the Falcon software improperly let one with “problematic content” get through.
Unlocking Better DevEx: Four Areas to Improve and KPIs
No matter how comprehensive a plan to improve DevEx is, there is still no silver bullet. But these focus areas and KPIs will provide structure to your approach.
DevOps for Machine Learning and Artificial Intelligence
DevOps for machine learning and artificial intelligence, known as MLOps, evolves to meet the demands of the AI landscape.
Secure Code Warrior Unveils Agent to Manage Commit Permissions
Secure Code Warrior (SCW) today added an agent to its portfolio of application security that assesses the security competency of developers as they commit code to a repository.
Image Recognition
An NVIDIA H100 card, typical for AI work, costs $29,449.95 on Amazon. Go figure.
Five Great DevOps Job Opportunities
Our weekly report of some great job opportunities for DevOps professionals, including engineer roles at Google and Walmart.
CrowdStrike Software Update Sparks Microsoft Outage, Global Chaos
Airlines, hospitals, banks and other businesses were disrupted when a faulty software update knocked Windows users of their systems.
Quali Bakes Generative AI into Environment as Code Platform
Quali has added a generative artificial intelligence (AI) capability to its Torque platform for managing infrastructure-as-code that enables DevOps teams to use natural language to describe a template, that is then automatically created and implemented.
AI-Powered Solutions for Azure DevOps Pipelines
The integration of artificial intelligence (AI) into Azure DevOps pipelines transforms the manual software development and delivery process.
Survey Surfaces Troubling Signs of Software Supply Chain Insecurity
A survey of software engineering professions has uncovered disconcerting signs of software supply chain insecurity.
Pair of Surveys Surface Primary Developer Productivity Challenges
A survey of 900 developers finds well over two-thirds (69%) said developers are losing eight or more hours of their working week to inefficiencies created by, for example, technical debt, insufficient documentation and flawed build processes.
4 Reasons Why Tech Leaders Should Prioritize the Testing & Mocking Phase for Better Development
Automated testing and mocking need to be the most prioritized area in your SDLC to eliminate friction for your developer team.
Implementing Threat Modeling in a DevOps Workflow
Integrating threat modeling into the DevOps workflow is essential to identify and mitigate potential security threats.
Valory Unveils AI Software Engineer for Building Multiple Types of Agents
Valory has launched an artificial intelligence (AI) agent, dubbed Propel Genie, that is specially designed to act as a software engineer for building multiple types of agents.
Tricentis Acquires SeaLights to Map Code Changes to Tests
Tricentis today revealed it has acquired SeaLights, a provider of a software-as-a-service (SaaS) platform that uses machine learning algorithms to keep track of changes to code.
Real-Time Monitoring of Third-Party APIs: Benefits and Implementation
Exploring the benefits of real-time API monitoring for third-party integrations and provides a guide on implementing it effectively.
The Cyber Resilience Act: A New Era for Mobile App Developers
The European Union’s Cyber Resilience Act (CRA) is a new law set to go into effect soon and serves as a framework designed to enhance the security of “products with digital elements.” It’s now clear the new law includes mobile apps.