
Pilot or Telephone Operator? Forecasts of Software Developer Demise Are Absurd
AI will profoundly change the software engineering profession, but those changes will mostly drive inventive and capable developers to greater innovation.

Veracode Report Shines Spotlight on Massive Application Security Debt
In an analysis of more than a million applications, Veracode found 42% contained flaws that remained unfixed for longer than a year.

Squaring the Circle: How to Make Public APIs Private
Many API attacks are effectively zero-day, novel attacks that exploit recent and unique changes to specific APIs. Here’s how to stop them.

Legit Security Adds Sensors to Detect Usage of Gen AI Tools to Write Code
Legit Security updated its ASPM platform with the ability to detect when developers use generative AI tools to write code.

Akamai Launches Gecko Edge Computing Services
Akamai’s Gecko initiative promises to make it simpler to centrally manage and deploy application workloads on edge computing platforms.

The Practicalities of Open Sourcing
If you’re contemplating the daring act of open sourcing your projects, here are some things to know before you set out.

Improve Efficiency With Smaller Code Reviews
Breaking down code reviews into more manageable portions can yield great benefits including efficiency, security and accuracy.

Survey: Cyberattacks Aimed at Software Supply Chains are Pervasive
A survey found the vast majority of respondents work for organizations that experienced a software supply chain incident in the past 12 months.

Five Great DevOps Job Opportunities
Looking for a great new DevOps job? Check out these available opportunities at JP Morgan Chase, The Pokémon Company and more!

GitGuardian Allies With CyberArk to Better Protect App Secrets
GitGuardian has allied with CyberArk to streamline secrets detection and management by making it easier to share insights.

How Can DevOps Teams Use Customer Intelligence Data?
DevOps can use the insights drawn from customer intelligence in addition to its use informing business strategy, product development and marketing.

API Management: A Weak Link in the Cloud-Native Chain
Traditional API management strategies fall short for modern environments. Here’s what it takes to manage APIs in a better way.

F5 Looks to Streamline Application Networking
F5 announced a SaaS edition of its NGINX application networking portfolio, which are now all available under a single enterprise license.

Survey Surfaces Raft of Ongoing Agile Development Challenges
While most software developers are using agile development methodologies in the SDLC, only 44% said it is working very well (11%) or somewhat well (33%).

OpenText Extends Tool for Auditing Source Code Using Machine Learning
OpenText updated a static analysis code auditing tool using machine learning algorithms to provide deeper insights into on-premises IT environments.

10 Key Features of AI Code Assistants
Here are 10 key features to look for when choosing an AI coding assistant to help automate the tedious aspects of software development.

Salesforce Adds Ability to Apply Custom Security Policies to APIs
Salesforce added the ability to customize API security policies to the Mulesoft Anypoint API management platform.

Does Using AI Assistants Lead to Lower Code Quality?
AI assistants are changing the way code gets made, and much of this is for the better. But what’s the impact on code quality?

Graylog Makes Free API Security Tool Available to Developers
A free version of Graylog’s API security platform is intended to encourage developers to adopt best practices to secure APIs.

Why Startups are Betting Big on Low-Code/No-Code
It is exhaustive — from infrastructure to app delivery, from data to applications — to modernize your practices, processes and providers to ensure you have the underlying foundation to take advantage of whatever comes next. Two or three years ago, apps created through low-code/no-code platforms were not usually as detailed under the surface as software […]

How to Get Platform Engineering Just Right
Getting platform engineering right helps organizations create an environment that drives their teams to develop solutions more efficiently.

OX Security Optimizes DevSecOps to Improve Application Security
OX Security updated its ASPM platform to enable DevSecOps teams to instantly identify applications with vulnerable code.

Cycode Discloses GitHub Actions Vulnerability in Google Bazel Project
Cycode discovered a command injection vulnerability in the way GitHub Actions updated Google’s open source Bazel project.
