Editorial Calendar
‘PackageGate’ Vulnerabilities Can Let Attackers Bypass Shai-Hulud Defenses
Jeff Burt | | Aikido Security, Bun, Git dependency, github, Koi Security, microsoft, npm registry, PhantomRaven, PNPM, remote code execution, Shai-Hulud worm, supply chain attack, VLTIn the wake of the massive Shai-Hulud supply chain attack that ripped through npm late last year and compromised more than 700 packages and exposed 25,000 repositories, developers in the JavaScript world ...
Harness Adds AI Agent to Help Investigate Incidents
Harness today added an artificial intelligence (AI) agent to its portfolio that has been specifically trained to help DevOps teams investigate events that occurred prior to an incident. Tina Huang, vice president ...
Snowflake Plans $1B Acquisition of Observe to Expand AI-Powered Observability
Snowflake has signed an agreement to acquire observability startup Observe, moving to fold AI-driven telemetry analysis directly into its AI Data Cloud as enterprises grapple with the operational complexity created by large-scale ...
Survey Sees Growing Interest in Switching Observability Platforms
A survey of 100 VP+ IT decision-makers published today finds 62% plan to increase spending on observability initiatives over the next 12 to 24 months, with only 4% planning to decrease spending ...
7 Cybersecurity Tips for 2026 No One Will Tell You About
Alexander Williams | | attack surface management, breach prevention strategies, CI/CD pipeline security, cybersecurity 2026, DevSecOps culture, human factors in cybersecurity, incident response training, infrastructure security habits, modern security threats, operational security risks, security documentation best practices, security hygiene, security process failures, security resilience, shadow IT integrations, vendor default risks, workflow securityNothing about 2026 feels stable anymore, especially in security. Attacks move faster than your monitoring stack, AI tools leak data behind your back and everyday convenience apps quietly turn into intrusion points. The biggest threats aren’t the ...
Best of 2025: How AI Agents are Reshaping the Developer Experience
AI agents are helping to shift developers' focus from long hours of manual coding to high-value problem-solving, architecture and decision-making processes. ...
Best of 2025: GitLab Extends Scope and Reach of Core CI/CD Platform
GitLab Inc. has updated its core continuous integration/continuous delivery (CI/CD) platform to natively provide more artificial intelligence (AI) capabilities, along with built-in software artifact management capabilities and more robust security tools ...
Best of 2025: CloudBees Moves to Unify Management of Multiple DevOps Platforms
CloudBees today launched a software-as-a-service (SaaS) platform for centralizing the management of multiple DevOps environments, including GitHub, GitLab and the open source Jenkins continuous integration/continuous delivery (CI/CD) platforms ...
Best of 2025: GitHub Action Compromise Risks Data Leaks for 23,000 Repositories
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories ...
Best of 2025: Integrating Generative AI Into DevOps Pipelines
Generative AI, a subset of AI, is a new technology that can create content in different forms, such as text, images and videos. Integrating generative AI into DevOps practices can benefit an ...
Best of 2025: The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece
If you work in DevOps, you’ve heard it a thousand times: “Do more with less.” More automation, more security, more reliability—but with the same (or fewer) people. Meanwhile, your development teams keep ...
Best of 2025: Survey: AI Tools are Increasing Amount of Bad Code Needing to be Fixed
Survey findings include respondents noted that AI tools are increasing the blast radius of the amount of bad code that needs to be debugged ...
