Editorial Calendar
Survey Surfaces Rising Tide of Investments in Observability
A survey of 628 enterprise IT leaders conducted by the Futurum Group finds well over a third (36%) plan on spending more than $1 million on observability in 2026, with 7% planning ...
Apica Extends Scope and Reach of Platform for Managing Telemetry Data
Apica today updated its Ascent platform to add support for synthetic data that is increasingly being used by artificial intelligence (AI) agents to observe application environments. Version 2.16 of the platform adds ...
VibeCode Meets DevOps: Accelerating Low-Code Innovation
AI-assisted low-code tools like VibeCode speed app development, but DevOps teams must ensure security, quality and CI/CD integration ...
How AI is Shaping Modern DevOps and DevSecOps
AI is reshaping DevOps and DevSecOps by improving CI/CD workflows, DORA metrics and security without adding unnecessary complexity ...
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
Jeff Burt | | Axios, CI/CD, Google Threat Intelligence Group, JavaScript dependencies, Mandiant, North Korea, remote access trojan (RAT), Socket, sonatype, supply chain attack, TeamPCPThe threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large "blast radius." ...
The Trust Tax Framework: Measuring Developer Confidence in CI/CD Systems
Vignesh Sundaram | | Automated Testing Culture, CI/CD Trust, continuous integration, Developer Experience (DevEx), DevOps metrics, flaky tests, Infrastructure Ownership, Mean Time to Confidence, Override Rate, Re-run Rate, Test QuarantineIs your re-run rate over 30%? Discover the "Trust Tax" killing your DevOps ROI. Learn to manage flaky tests through automatic quarantine, contextual reporting, and cultural shifts ...
Lightrun Adds Ability to Dynamically Pull Telemetry Data from Live Apps
Lightrun has added an ability to dynamically pull missing telemetry evidence from live application environments without having to deploy additional instrumentation to its namesake site reliability engineering (SRE) platform that is based ...
OpenTelemetry Gets Kotlin Multiplatform API & SDK
Adrian Bridgwater | | Android Development, application development, automation, Client-side Monitoring, cloud-native, CNCF, continuous delivery, cross-platform development, devops, Embrace, JVM Interoperability, KubeCon 2026, Logging API, mobile observability, observability, Telemetry data, Tracing APIOpenTelemetry expands its observability reach with a native Kotlin Multiplatform API and SDK. Contributed by Embrace, this update enables vendor-neutral telemetry across JVM, iOS, and web, offering idiomatic Kotlin support and optimized ...
Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM
Jeff Burt | | AI (Artificial Intelligence), AI supply chain attacks, Aqua Security Trivy, Checkmarx, Cloud Security, credentials, exposed secrets, GitHub Actions, LiteLLM, microsoft, Palo Alto Networks, Sysdig, TeamPCPThe supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand, with software development tools from Checkmarx and ...
Future Proofing the Foundation for AI-Ready Security Operations
Last December, the International Telecommunication Union (ITU), the United Nations’ (UN) body for information and communication technologies, supported Open Cybersecurity Schema Framework (OCSF) for ratification as an international standard by June 2026. Standardization is ...
PagerDuty Extends Scope and Reach of AI SRE Platform
PagerDuty has extended the capabilities and reach of its artificial intelligence (AI) agents to enable them to be invoked directly from within the Slack messaging platform. Additionally, the AI SRE Agent that ...
Two Malicious npm Packages Aim to Steal Credentials and Other Secrets
Jeff Burt | | API Keys, CI/CD pipelines, credential theft, Data Exfiltration, exposed secrets, GitHub repositories, maintainer account, malicious npm packages, sonatypeBad actors took over a npm maintainer account and have published two malicious packages designed to steal credentials, API keys, and other secrets from the computers of victims who download them from ...
