Editorial Calendar
Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable
Jeff Burt | | Aqua Security Trivy, CI/CD cyberthreats, exposed secrets, GitHub Actions, IANS Research, malicious code, microsoft, OWASP Top 10, remote code execution, software development security, software supply chain attacks, software vulnerabilities, TenableA critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, ...
From Code to Cloud: How Full-Stack Developers are Taking Over DevOps
Full-stack developers are taking on DevOps, using CI/CD, Docker and Terraform to own the software lifecycle from code to cloud ...
CloudBees Delivers on AI Promise to Improve Application Testing
CloudBees has made generally available an add-on for continuous integration/continuous deployment (CI/CD) platforms that uses artificial intelligence (AI) to determine which tests should be run first based on the likelihood there will ...
Survey Surfaces Rising Tide of Investments in Observability
A survey of 628 enterprise IT leaders conducted by the Futurum Group finds well over a third (36%) plan on spending more than $1 million on observability in 2026, with 7% planning ...
Apica Extends Scope and Reach of Platform for Managing Telemetry Data
Apica today updated its Ascent platform to add support for synthetic data that is increasingly being used by artificial intelligence (AI) agents to observe application environments. Version 2.16 of the platform adds ...
VibeCode Meets DevOps: Accelerating Low-Code Innovation
AI-assisted low-code tools like VibeCode speed app development, but DevOps teams must ensure security, quality and CI/CD integration ...
How AI is Shaping Modern DevOps and DevSecOps
AI is reshaping DevOps and DevSecOps by improving CI/CD workflows, DORA metrics and security without adding unnecessary complexity ...
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
Jeff Burt | | Axios, CI/CD, Google Threat Intelligence Group, JavaScript dependencies, Mandiant, North Korea, remote access trojan (RAT), Socket, sonatype, supply chain attack, TeamPCPThe threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large "blast radius." ...
The Trust Tax Framework: Measuring Developer Confidence in CI/CD Systems
Vignesh Sundaram | | Automated Testing Culture, CI/CD Trust, continuous integration, Developer Experience (DevEx), DevOps metrics, flaky tests, Infrastructure Ownership, Mean Time to Confidence, Override Rate, Re-run Rate, Test QuarantineIs your re-run rate over 30%? Discover the "Trust Tax" killing your DevOps ROI. Learn to manage flaky tests through automatic quarantine, contextual reporting, and cultural shifts ...
Lightrun Adds Ability to Dynamically Pull Telemetry Data from Live Apps
Lightrun has added an ability to dynamically pull missing telemetry evidence from live application environments without having to deploy additional instrumentation to its namesake site reliability engineering (SRE) platform that is based ...
OpenTelemetry Gets Kotlin Multiplatform API & SDK
Adrian Bridgwater | | Android Development, application development, automation, Client-side Monitoring, cloud-native, CNCF, continuous delivery, cross-platform development, devops, Embrace, JVM Interoperability, KubeCon 2026, Logging API, mobile observability, observability, Telemetry data, Tracing APIOpenTelemetry expands its observability reach with a native Kotlin Multiplatform API and SDK. Contributed by Embrace, this update enables vendor-neutral telemetry across JVM, iOS, and web, offering idiomatic Kotlin support and optimized ...
Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM
Jeff Burt | | AI (Artificial Intelligence), AI supply chain attacks, Aqua Security Trivy, Checkmarx, Cloud Security, credentials, exposed secrets, GitHub Actions, LiteLLM, microsoft, Palo Alto Networks, Sysdig, TeamPCPThe supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand, with software development tools from Checkmarx and ...
