Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM
The supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand, with software development tools from Checkmarx and LiteLLM being the latest victims of the sophisticated campaign. The threat group behind it, TeamPCP, is using the attacks to create persistence and […]
Akuity Adds Ability to Customize Kargo Pipelines
Akuity this week at the KubeCon + CloudNativeCon Europe conference revealed it has added an ability to customize the steps used to promote applications into a production environment using a Kargo orchestration engine it developed to manage software using a GitOps workflow. Company CEO Hong Wang said the Custom Steps capability added to Kargo will […]
LocalStack Revamps CLI for Emulating AWS Cloud Services on Local Machines
LocalStack at the KubeCon + CloudNativeCon Europe conference this week unveiled a revamped command line interface (CLI), dubbed 1stk, for its framework that enables emulations of Amazon Web Services (AWS) environments to be run on a local machine. The CLI in version 3 of the AWS 2026 edition of the framework, in addition to providing […]
PagerDuty Extends Scope and Reach of AI SRE Platform
PagerDuty has extended the capabilities and reach of its artificial intelligence (AI) agents to enable them to be invoked directly from within the Slack messaging platform. Additionally, the AI SRE Agent that is embedded within the PagerDuty Operations Cloud platform can now also leverage the Model Context Protocol (MCP) and an expanded library of application […]
Anthropic Extends Claude Code Into Messaging Apps, Challenging OpenClaw’s Lead
Anthropic has debuted a new capability for its Claude Code platform, called Channels, that enables a number of key improvements. Notably, it allows users to communicate with the coding assistant through messaging platforms like Telegram and Discord. More important, Channels is continuously available, so it is closer to an active collaborator. Clearly, Anthropic’s release of […]
Cloudsmith Brings Threat Intelligence to Software Artifacts
Cloudsmith this week at the KubeCon + CloudNativeCon Europe conference revealed it has added an ability to enrich packages with threat intelligence that enables DevSecOps teams to better evaluate the risk attached to downloading a software component. Nigel Douglas, head of developer relations for Cloudsmith, said this extension to the managed service it provides for […]
Azure DevOps Remote MCP Server Lands in Microsoft Foundry, Giving AI Agents Direct Access to Your DevOps Data
Microsoft launches the Azure DevOps Remote MCP Server and Foundry integration in 2026. Discover how this hosted, Entra-authenticated connection allows AI agents to query work items, pipelines, and repos through a single URL without local infrastructure.
Cursor Ships Composer 2: Frontier-Level Coding Performance at a Fraction of the Cost
Cursor releases Composer 2, achieving a 10x cost reduction and massive intelligence leaps. Discover how self-summarization and reinforcement learning for long-horizon tasks are redefining the Pareto frontier for AI coding agents and DevOps budgets in 2026.
Five Great DevOps Job Opportunities
Explore the latest DevOps.com weekly jobs report. Highlighting premier opportunities at Bank of America, Microsoft, and GEICO, with salary insights up to $300,000 for senior engineering and platform leadership roles.
Two Malicious npm Packages Aim to Steal Credentials and Other Secrets
Bad actors took over a npm maintainer account and have published two malicious packages designed to steal credentials, API keys, and other secrets from the computers of victims who download them from the repository. Analysts with Sonatype’s Security Research Team wrote in a report that the two packages – sbx-mask and touch-adv – likely are […]
Secure Code Warrior AI Agent Applies Policies to AI Generated Code
Secure Code Warrior (SCW) this week added an artificial intelligence (AI) agent that both identifies code generated by an AI coding tool and automatically applies the appropriate governance policies. Company CEO Pieter Danhieux said the SCW Trust Agent makes it possible for DevSecOps teams to use AI to verify which AI models influenced specific commits, […]
OpenAI Bolsters AI Coding with Acquisition of Python Toolmaker Astral
OpenAI announced Thursday that it has reached an agreement to acquire Astral, the startup behind some of Python community’s most popular open-source developer tools. The acquisition marks further escalation in the rapidly evolving artificial intelligence (AI)-assisted development market, which has led to a coding war between OpenAI and its primary rivals, including Anthropic and the […]
Lineaje Adds Ability to Automatically Apply Governance Policies to AI Components
Lineaje this week unfurled a platform that automatically discovers the artificial intelligence components of an application, defines security and governance policies, and then autonomously generates guardrails. At the core of the Lineaje UnifAI platform are a set of artificial intelligence (AI) capabilities that are integrated with an orchestration framework for applying governance policies that has […]
Checkmarx Adds Orchestration Framework to DevSecOps Platform
Checkmarx this week revamped its DevSecOps platform to include an orchestration framework for managing tasks assigned to artificial intelligence (AI) agents. Additionally, the company has added two additional artificial intelligence (AI) agents trained to triage vulnerabilities and remediate them using code it generates for review while at the same time adding an ability to discover […]
Open SWE Captures the Architecture That Stripe, Coinbase and Ramp Built Independently for Internal Coding Agents
Explore Open SWE, the open-source framework by LangChain that codifies the internal AI coding agent architectures used by Stripe, Ramp and Coinbase. Released March 17, 2026, this MIT-licensed project offers a customizable foundation using isolated sandboxes, subagent orchestration, and deep workflow integration for modern DevOps teams.
Arcjet Extends Runtime Policy Engine to Block Malicious Prompts
Arcjet today added an ability to detect and block risky prompts before they are shared with a large language model (LLM) embedded within an application. The Arcjet AI prompt injection protection capability is based on an LLM that the company has been specifically training to detect patterns indicative of risky prompts that can then be […]
Google, Microsoft and Peers Donate to Support Overloaded Open Source Maintainers
A coalition of major tech companies has committed $12.5 million to strengthen the security of open source software, an effort aimed at coordinating responses to the growing pressures created by AI. The funding is provided by Anthropic, AWS, GitHub, Google, Microsoft and OpenAI. It will be administered by the Linux Foundation through its Alpha-Omega Project […]
Spacelift Intelligence Vibe-Codes Infrastructure
Whether the DevOps shops like it or not, they are feeling the pressure from AI. They’re expected to move more quickly, alongside their dev counterparts. The gruntwork that used to take weeks can be automated away, leaving time for fast prototyping, so the managers think. According to Google Cloud’s 2025 DORA State of AI-assisted Software […]
Komodor Extends Reach of AI SRE Orchestration Framework
Komodor today extended the reach of its orchestration framework for artificial intelligence (AI) agents by adding support for Model Context Protocol (MCP) servers and the OpenAPI specification. Company CTO Itiel Shwartz said those capabilities will make it possible for IT teams to more broadly orchestrate AI agents that are being used to investigate and remediate […]
Harness Extends AI Security Reach Across Entire DevOps Workflow
Harness today added an ability to automatically secure code as it is being written by an artificial intelligence (AI) coding tool in addition to adding a module to its DevOps platform that discovers, tests, and protects AI components within applications. Secure AI Coding is an extension of the static application security testing (SAST) and software […]
Sauce Labs Makes AI Agent for Creating and Running Tests Available
Sauce Labs today made generally available an artificial intelligence (AI) agent that translates a natural language intent into a set of executable test suites that can run anywhere. Company CEO Dr. Prince Kohli said the Sauce AI for Test Authoring agent closes a gap that has emerged between the rate at which code is being […]
Java 26 Arrives With AI Integration and a New Ecosystem Portfolio — What It Means for DevOps Teams
Overview of Java 26 emphasizing performance, concurrency, security, HTTP/3, and the new Java Verified Portfolio—positioning the JVM as a supported infrastructure layer for enterprise AI workloads and easing DevOps modernization of large Java estates.
When Code Becomes Cheap, Engineering Becomes Governance
AI agents can now generate in minutes what once took teams weeks, but the real shift is not faster coding. It is the collapse of code scarcity. As software production becomes industrialized, the job of engineers is moving from writing lines to governing systems, managing risk and deciding what should exist in the first place.