DevOps Onramp
How AI is revamping DevSecOps processes
Umashankar Kotturu | | AI DevSecOps, CI/CD, devsecops, policy as code, security automation, Software Supply ChainArtificial Intelligence is pushing DevSecOps into a new phase where security is no longer just about detecting vulnerabilities, but increasingly about resolving them automatically within the flow of software delivery. As many ...
Platform Engineering vs. DevOps: Why This Is the Wrong Question
DevOps has done what it was supposed to do. It broke down the wall between development and operations, it made continuous delivery a normal expectation, it made shared ownership of production a ...
AI Is Exposing a Growing Blind Spot in Open Source Security
Aaron Mitchell | | ai, application security, open source, software development, Software Supply Chain, technical debtWith AI, teams across organizations are now building internal applications faster than ever, often pulling in open source libraries and frameworks without much thought about long-term support, lifecycle management, or security ownership ...
Why Your Observability Stack Is Costing You More Than Your Cloud Bill
There's a pattern playing out across engineering teams right now that nobody talks about openly: the tool meant to reduce operational complexity has quietly become one of the biggest line items on ...
Why Your AI Agent is a Black Box and How to fix it With OpenTelemetry
You built the agent. It works in testing. Then it hits production and starts giving wrong answers, timing out or burning through your token budget, and you have no idea why. This is ...
GitHub Breach Tied to Malicious VS Code Extension Exposes Thousands of Internal Repositories
GitHub says attackers accessed thousands of internal repositories after a company employee’s device was compromised through a malicious Visual Studio Code extension, though the company said it has removed the malicious extension, ...
OpenSSF’s CRob: ‘The Runway Is Rapidly Running Out’ on EU CRA Readiness
The EU's Cyber Resilience Act kicks into high gear this September, and companies are still clueless about how they must obey its strictures. MINNEAPOLIS — At Open Source Summit North America, Christopher ...
Why DevOps Is Critical for Modern Business Resilience
Today’s business world operates in a state of constant change. What the customer wants to buy changes quickly, new competitors appear overnight, and cyber threats are changing faster than ever. In this ...
Migration Observability: Measure Meaning, Not Movement
Traditional operational observability focuses on latency, errors, throughput and saturation. Migration observability needs a different category: Semantic drift ...
How Open Source Dependency and Repo Attacks Compromise DevOps Pipelines and How to Stay Safe
Alex Vakulov | | CVE, Dependency Governance, log4j, Malicious Code Injection, open source security, Package Managers, SBoM, secure development, supply chain risk, typosquattingModern applications rely on open source components for up to 90% of their code, creating a vast attack surface dominated by inhemalicious supply chain injections. High-profile incidents like Log4j and the sabotage ...
The Observability Bill is Coming Due – and AI Wrote Most of It
Alan Shimel | | agentic telemetry, AI in development, AIOps, APM (Application Performance Management), CI/CD (Continuous Integration/Continuous Deployment), data management, data quality, devops, instrumentation, Logging Standards, observability, Sawmills, Signal-to-Noise Ratio, software engineering, technology innovation, telemetry management, Telemetry OptimizationObservability has always had a data quality problem. AI coding agents just made it catastrophically worse. Shimmy sits down with the co-founders of Sawmills to dig into why unmanaged telemetry is the ...
Claude Code Security Finds the Bugs That Static Analysis Can’t — and Wall Street Noticed
Claude Code Security scans code like a human researcher, not a rule engine. Anthropic found 500+ decade-old bugs — and cybersecurity stocks felt it ...
