CI/CD
North Korea Expands the Reach of PolinRider Supply Chain Attack Campaign
Jeff Burt | | AI supply chain attacks, APT37, Chrome Store, Contagious Interview, devops, devsecops, Famous Chollima, Go modules, Lazarus Group, malicious npm packages, North Korea, package registry malware, Packagist, PolinRider, Rescana, Socket, supply chainThe North Korean-sponsored threat groups behind the long-running fake interview scams targeting developers are expanding the PolinRider supply chain campaign that has escalated over the past several months. Reports from cybersecurity vendors ...
How AI is revamping DevSecOps processes
Umashankar Kotturu | | AI DevSecOps, CI/CD, devsecops, policy as code, security automation, Software Supply ChainArtificial Intelligence is pushing DevSecOps into a new phase where security is no longer just about detecting vulnerabilities, but increasingly about resolving them automatically within the flow of software delivery. As many ...
Block Details Builderbot Framework for Orchestrating AI Agents Across SDLC
The software engineers at Block have developed an orchestration layer they are using to manage artificial intelligence (AI) agents that have been trained to automate multiple tasks across their software development lifecycle ...
How Independent Service Deployments Expose the Limits of Conventional Regression Testing Tools
The architectural shift to independently deployable services was supposed to make software delivery faster and less risky. In many aspects, it has. Teams can ship a change to one service without coordinating ...
Lightrun Adds Ability to Assess Impact Pull Request Will Have in Production
Lightrun is providing early access to an ability to verify whether a pull request (PR) will actually run in a production environment as part of its artificial intelligence (AI) platform for automating ...
Harness Adds Autonomous AI Agents to Automate DevOps Workflows
Harness today is providing DevOps teams with an ability to build and deploy autonomous artificial intelligence (AI) agents that automate the delivery of code to production environments. Trevor Stuart, a senior vice ...
Modernization Is Not Migration
Modernization worked only if the platform became easier to change, easier to understand and safer to run under pressure. That is not a philosophical position — it is a measurable one ...
Salesforce vs Dynamics 365 CE DevOps: A Practical Comparison for Enterprise Teams
Damodhar Reddy Mutayalwad | | application lifecycle management, CI/CD, CRM, devops, Dynamics 365, SalesforceMost organizations running CRM platforms eventually face the same challenge: how to deploy changes safely, consistently, and quickly. While Salesforce and Dynamics 365 Customer Engagement (CE) support modern DevOps practices, they approach ...
Newly Appointed CloudBees CEO Charts Agentic AI Engineering Course
The newly appointed CEO of CloudBees, Mo Plassnig, says that as the agentic artificial intelligence (AI) era dawns, the time has come to reinvent software engineering in a way that moves beyond ...
Why AI Testing Must Live Inside Your CI/CD Pipeline
Here is a situation most engineering leaders recognize. You roll out AI coding tools. Features ship faster. Developers are more productive. Then, a few months in, you realize something unexpected: the engineers ...
Why Endpoint Protection Matters More than Ever in CI/CD Environments
Samuel Ogbonna | | CI/CD security, Developer Workstations, devsecops, Endpoint Security, Software Supply Chain SecurityCI/CD environments depend on far more than repositories and deployment infrastructure. Developer endpoints hold sensitive data: cloud credentials, SSH keys, deployment permissions, direct access to internal systems. Endpoint security and control are ...
AI Is Accelerating DevOps, Poor Integrations Are Slowing It Down
As AI speeds up software delivery, the real bottleneck isn't scanning or CI. It's how safely and predictably change moves across tools, teams, and companies. Something strange is happening in DevOps right ...
