Why You Need AI Agent Security Validation in Software Testing
Engineering teams have been racing for the last two years to deploy AI agents that can find bugs faster than any QA team ever could. Autonomous testing agents can crawl through codebases, identify vulnerabilities, and generate test coverage reports while developers finally get to take a breath. The irony is that while development teams enjoy […]
SmartBear Tightens Integration Between AI Coding and Testing Tools
SmartBear this week revealed it is narrowing the divide between coding and testing by integrating its platform with artificial intelligence (AI) coding tools. Sheryl Koenigsberg, senior vice president of product marketing at SmartBear, said integrations with AI coding tools from Anthropic, Atlassian, GitHub, and Amazon Web Services (AWS) will make it simpler for application developers […]
From AI Hype to AI Assurance: How Engineering Teams Can Safely Ship AI-Enabled Software
AI has moved very quickly from experimentation to production. A few years ago, many organizations were still asking whether AI could improve their products or internal workflows. Today, the question is different: how can teams ship AI-enabled software safely, reliably, and responsibly? That shift matters because AI is no longer just a research project or […]
GitHub API Abuse, ‘Ghost’ Accounts Part of Malicious Efforts to Map Organizations
Datadog researchers uncover months-long overlapping campaigns to scrape data about companies and their developers.
‘HalluSquatting’ Compromises AI Coding Agents to Install Malware, Create Botnets
Hallucinations have been an ongoing problem since OpenAI first introduced its ChatGPT chatbot in November 2022, highlighting generative AI’s tendency to generate plausible but false or misleading information and its inability to just say “I don’t know.” They can lead to embarrassing or uncomfortable moments. However, security researchers in Israel have found that the large […]
How to Build a DevSecOps CI/CD Pipeline on Azure With GitHub Actions
Fix security problems when they’re cheap to fix, which is before the code is deployed. A pipeline that enforces this automatically is what makes that principle real.
North Korea Expands the Reach of PolinRider Supply Chain Attack Campaign
The North Korean-sponsored threat groups behind the long-running fake interview scams targeting developers are expanding the PolinRider supply chain campaign that has escalated over the past several months. Reports from cybersecurity vendors Socket and Rescana found that two groups linked to the Democratic People’s Republic of Korea (DPRK) have published at least 108 malicious packages […]
‘GitLost’ Flaw Lets Attackers Trick GitHub AI Agent Into Leaking Private Repos
Noma researchers again show how easy it is to manipulate AI agents with malicious commands via indirect prompt injection attacks.
Novee Uncovers Cordyceps: The Latest Threat to CI/CD Pipelines
A newly discovered supply chain security flaw is once again putting a spotlight on inherent weaknesses in CI/CD pipelines and the growing interest among cyberthreat actors to exploit them. Security researchers with Novee, an AI penetration testing platform provider, wrote about Cordyceps, an exploitable pattern in the open source supply chain that can allow attackers […]
Your AI Testing Framework Might Be Passing Tests It Should Be Failing
Engineering teams are not evaluating whether AI belongs in their testing workflows anymore, but are discovering, sometimes painfully, that the architectural decisions they made when integrating it are the ones that will determine whether it improves their release confidence or quietly erodes it.
Security Flaw in Claude Code Illustrates the Risk of AI in Developer Workflows
AI coding agents are reshaping software development—but they’re also expanding the attack surface. Researchers uncovered a now-patched vulnerability in Anthropic’s Claude Code GitHub Action that could have enabled prompt injection attacks to expose CI/CD secrets, API keys, and credentials. As AI agents gain autonomy in development workflows, organizations must treat untrusted inputs as hostile and rethink CI/CD security models. Natural language is becoming executable code—and attackers know it.
SmartBear Adds Computer Vision Capability to Testing Platform
SmartBear this week extended its ability to apply artificial intelligence to application testing with the addition of a computer vision capability that can be used to detect objects in applications. Prashant Mohan, vice president of product at SmartBear, said the company’s TestComplete platform now combines computer vision and optical character recognition to help automate the […]
Why DIY Test Automation Succeeds Its Way Into a Problem
Ask any engineering team if they can build their own test automation framework, and the answer is almost always “yes.” With modern AI tools involved, that answer arrives faster and with more confidence than ever before. In 30 days, a capable team can spin up scripts, automate flows, generate test cases, and show a demo […]
Regression Testing Tools in the Age of AI-Assisted Development: What Has Changed
For most of the past decade, the conversation around regression testing tools was fairly stable. The tools got faster, the integrations got smoother, and the underlying approach stayed largely the same: write tests, run them in CI, fix failures. The fundamental model did not change much because the problem did not change much. AI-assisted development […]
Observability-Driven Continuous Testing in Cloud-Native DevOps
Observability transforms continuous testing from quality gates into reliability signals. Cloud-native teams ship faster because they know their systems better — traces reveal bottlenecks, synthetics catch regressions and security telemetry prevents breaches.
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
The threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large “blast radius.”
Can QA Reignite its Purpose in the Agentic Code Generation Era?
AI-generated code is accelerating development but it exposes a deeper issue. Why deterministic infrastructure is becoming the foundation of agentic QA.
Test Automation Strategy for Growing Software Teams
Build a scalable test automation strategy that improves release speed, reduces defects, and supports growing software teams.
AI-Driven Performance Testing: A New Era for Software Quality
Discover how AI and large language models (LLMs) are revolutionizing performance testing—shifting from reactive load testing to predictive, continuous assurance powered by intelligent agents and automation.
DevOps Workflow: The Key Elements and Tools Involved
What does a modern DevOps workflow look like? Click to learn about the essential elements, tools, and practices involved in the effective work process.
From Firefighting to Forward-Thinking: My Real-World Lessons in DevOps and Cloud Engineering
Tools change, but the fundamentals stay — plan for failure, treat infra and pipelines like code and make observability a first-class citizen.
Continuous Testing Strategies That Actually Prevent Production Bugs
Construct a resilient testing framework that prevents defects from boarding the release train in the first place, enabling code to leave the station reliably and quickly.
Accelerating DevOps Pipelines With AI-Native Testing
An in-depth look at AI-native testing and the capability it has of pushing things through the DevOps pipeline, faster.