Editorial Calendar
Veracode Extends Package Firewall Reach to Microsoft Artifacts
Veracode has extended the reach of a Package Firewall that applies policies that limit what types of code can be downloaded from a repository to Azure Artifacts from Microsoft. Additionally, DevSecOps teams ...
Why Data Contracts Need Apache Kafka and Apache Flink
Data contracts prevent breaking schema changes in data pipelines. Learn how Kafka and Flink help specify, implement and enforce them ...
The Problem’s Not Your Monitoring Tools, It’s Your Workflow
Dan Roy | | alert fatigue, DevOps workflows, incident response, on-call management, Unified ObservabilityThe real cost of poor observability isn’t just downtime; it’s lost trust, wasted engineering hours, and the strain of constant firefighting. But most teams are still working across fragmented monitoring tools, juggling ...
‘PackageGate’ Vulnerabilities Can Let Attackers Bypass Shai-Hulud Defenses
Jeff Burt | | Aikido Security, Bun, Git dependency, github, Koi Security, microsoft, npm registry, PhantomRaven, PNPM, remote code execution, Shai-Hulud worm, supply chain attack, VLTIn the wake of the massive Shai-Hulud supply chain attack that ripped through npm late last year and compromised more than 700 packages and exposed 25,000 repositories, developers in the JavaScript world ...
Harness Adds AI Agent to Help Investigate Incidents
Harness today added an artificial intelligence (AI) agent to its portfolio that has been specifically trained to help DevOps teams investigate events that occurred prior to an incident. Tina Huang, vice president ...
Snowflake Plans $1B Acquisition of Observe to Expand AI-Powered Observability
Snowflake has signed an agreement to acquire observability startup Observe, moving to fold AI-driven telemetry analysis directly into its AI Data Cloud as enterprises grapple with the operational complexity created by large-scale ...
Survey Sees Growing Interest in Switching Observability Platforms
A survey of 100 VP+ IT decision-makers published today finds 62% plan to increase spending on observability initiatives over the next 12 to 24 months, with only 4% planning to decrease spending ...
7 Cybersecurity Tips for 2026 No One Will Tell You About
Alexander Williams | | attack surface management, breach prevention strategies, CI/CD pipeline security, cybersecurity 2026, DevSecOps culture, human factors in cybersecurity, incident response training, infrastructure security habits, modern security threats, operational security risks, security documentation best practices, security hygiene, security process failures, security resilience, shadow IT integrations, vendor default risks, workflow securityNothing about 2026 feels stable anymore, especially in security. Attacks move faster than your monitoring stack, AI tools leak data behind your back and everyday convenience apps quietly turn into intrusion points. The biggest threats aren’t the ...
Best of 2025: How AI Agents are Reshaping the Developer Experience
AI agents are helping to shift developers' focus from long hours of manual coding to high-value problem-solving, architecture and decision-making processes. ...
Best of 2025: GitLab Extends Scope and Reach of Core CI/CD Platform
GitLab Inc. has updated its core continuous integration/continuous delivery (CI/CD) platform to natively provide more artificial intelligence (AI) capabilities, along with built-in software artifact management capabilities and more robust security tools ...
Best of 2025: CloudBees Moves to Unify Management of Multiple DevOps Platforms
CloudBees today launched a software-as-a-service (SaaS) platform for centralizing the management of multiple DevOps environments, including GitHub, GitLab and the open source Jenkins continuous integration/continuous delivery (CI/CD) platforms ...
Best of 2025: GitHub Action Compromise Risks Data Leaks for 23,000 Repositories
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories ...
