Checkmarx Acquisition of Tromzo Accelerates Plan to Apply AI to Application Security
Checkmarx accelerates its AI-driven DevSecOps strategy after acquiring Tromzo, integrating AI agents to automate application security across the software development lifecycle.
Analysis Surfaces Rising Wave of Software Defects Traced to AI Coding Tools
An analysis of 470 real-world open source pull requests published today finds code generated using artificial intelligence (AI) tools introduces significantly more defects across every major category of software quality, including logic, maintainability, security, and performance, compared to human-authored code. Conducted by CodeRabbit, a provider of a platform that employs AI to review code, the […]
New Relic AWS Integrations Go Deep on Root Cause Observability Analysis
New Relic expands its observability platform with deep AWS integrations to speed incident resolution and support AI-driven DevOps workflows.
VS Code Pushes Hard on AI Agents While Quietly Killing Free Code Completion
Microsoft’s VS Code update brings Agent HQ, TypeScript 7 preview, and kills free IntelliCode. What developers need to know about the latest changes.
Five Great DevOps Job Opportunities
Explore this week’s DevOps jobs report featuring Senior DevOps Engineer and Lead DevOps roles from top employers across tech and enterprise.
IBM HashiCorp Ends External Language Support for Terraform
IBM and HashiCorp end external language support for Terraform, pushing teams toward HCL. What this means for DevOps infrastructure management strategies.
Azul Acquires Payara to Add Java App Server to Portfolio
Azul this week acquired Payara, a provider of a Java-based application server and microservices framework that extends the scope of the company’s portfolio beyond Java runtimes. The two companies were previously allied in 2018 when Payara embedded the Azul Platform Core into Payara Server Enterprise. In addition, both companies have a long history of contributing […]
Harness Raises $240M: AI for Everything After Code and a New Era for DevOps
Alan breaks down Harness’s $240M raise, $5.5B valuation, and Jyoti Bansal’s AI-native platform reshaping the software delivery pipeline.
Malicious VS Code Extensions Take Screenshots, Steal Info
Developers were the targets of two new malicious Microsoft Visual Studio Code (VS Code) extensions created by a threat actor that security researchers believe is experimenting with methods for delivering information-stealing malware to the victims’ systems. The malicious extensions come posing as a harmless “premium dark theme” and an AI-powered coding assistant, but both – […]
Black Duck Adds AI Tool to Analyze and Fix Code in Real Time
Black Duck today added a tool for analyzing and remediating code that is directly integrated into artificial intelligence (AI) coding tools. Company CEO Jason Schmitt said Black Duck Signal makes it possible to discover issues as application developers increasingly rely on AI coding tools to generate more code faster, which paradoxically also typically contains more […]
Multi-Agent System Promises Faster Bug Detection and Resolution
IT outages cost companies over $14,000 per minute. IBM Research’s Project ALICE uses multiple AI agents to help engineers find bugs faster and restore systems. Software bugs are expensive. When a critical system goes down, every minute of downtime costs revenue, frustrates customers, and strains engineering teams scrambling to find the problem. The challenge isn’t […]
Five Great DevOps Job Opportunities
Our DevOps jobs report, top openings, salaries and insights to help DevOps professionals advance their careers in a tight talent market.
Anthropic Acquires Bun to Accelerate AI Coding Tools
Anthropic says it has acquired Bun, a high-performance JavaScript toolkit, to turbocharge its artificial intelligence (AI) coding capabilities — further underscoring a significant push into developer tooling as it scales Claude Code, its code-generation platform. Financial terms of the deal were not disclosed, but Anthropic emphasized that Bun will remain open source and MIT-licensed. The […]
Crates.io Removes Malicious Rust Package Targeting Web3 Developers
A malicious Rust package that was found to be downloading payloads aimed at stealing cryptocurrency was removed from the crates.io Rust package registry, along with another package by the same author that appeared benign but was dependent on the first. The crates.io team removed both packages this week after security researchers with Socket alerted it […]
Harness Allies with AWS to Integrate AI Agents for Software Engineering
Harness this week extended its alliance with Amazon Web Services (AWS) to integrate their respective artificial intelligence (AI) agents to automate DevOps workflows. Announced at the AWS re:Invent 2025 conference, Harness is now integrating the Model Context Protocol (MCP) server it added to its continuous integration/continuous delivery (CI/CD) platform with the Kiro AI coding tool […]
re:Invent Proves It: DevOps Isn’t Dead, Cloud Native Isn’t Fading, and Platform Engineering Isn’t a Fad
What a difference two or three days make. When I first landed in Las Vegas for re:Invent and saw the keynote previews, it looked like AWS was putting all its chips on one square: Agentic AI. Every sign, every teaser, every whisper pointed in the same direction. And yes, after the keynotes, that impression held […]
AWS Adds Specialized AI Agents to Kiro Coding Tool to Automate DevOps Tasks
Amazon Web Services (AWS) today at its re:Invent 2025 conference extended its Kiro artificial intelligence (AI) tool to provide access to a set of agents that have been trained to trigger specific actions as they observe the way code is being created. Adnan Ijaz, director of project management for Kiro at AWS, said these specialized […]
AWS Transform Modernizes Any Codebase, App, API or Runtime
Platforms, paradigms, processes and processing itself all evolve. Because the information technology industry crosses from one chasm to another on an apparently endless loop of perpetual change, applications and wider systems need to be almost continually modernized. Amazon Web Services wants to enable that process with AWS Transform, a service that now ships with new […]
Stack Overflow Makes Available AI Assistant for Verifying Code
Stack Overflow today made generally available an artificial intelligence (AI) tool that makes it possible to use natural language to search its repositories for code. Company CTO and chief product officer Jody Bailey said AI Assist provides developers with a conversational search and discovery tool that enables them to more easily find relevant online content […]
Five Great DevOps Job Opportunities
Post-holiday job search? Check out our weekly jobs report for inspiration, including roles at Alta IT Services and Belay Technologies.
What I’m Thankful for in DevOps This Year: Living Through Interesting Times
Alan reflects on a chaotic yet inspiring year in DevOps, highlighting the rise of AI in engineering, the maturation of DevSecOps, the evolution of hybrid work culture, the surge of platform engineering and IDPs, and the continued strength and inclusivity of the DevOps community — while acknowledging the talent crunch, tool sprawl and security theater that still challenge the industry.
Second Coming of Shai-Hulud Cyberattack Ravages JavaScript Repositories
A major expansion of the self-propagating Shai-Hulud cyberattack aimed at popular node package managers (npms) used by JavaScript application developers is creating a major headache for DevSecOps teams around the globe. Based on what is being described as the “Second Coming” of Shai-Hulud, this version affects a much wider range of npms and is much […]
Endor Labs Adds AI SAST Tool to Discover Vulnerabilities in Code
Endor Labs launches an agentic AI-powered SAST tool that drastically reduces false positives, identifies deeper code flaws and helps DevSecOps teams secure AI-generated code across 40+ languages.