Features
Survey Surfaces Rising Tide of Investments in Observability
A survey of 628 enterprise IT leaders conducted by the Futurum Group finds well over a third (36%) plan on spending more than $1 million on observability in 2026, with 7% planning ...
Apica Extends Scope and Reach of Platform for Managing Telemetry Data
Apica today updated its Ascent platform to add support for synthetic data that is increasingly being used by artificial intelligence (AI) agents to observe application environments. Version 2.16 of the platform adds ...
Bad Actor Drops 36 Malicious Packages in npm, Targets Guardarian Users
Jeff Burt | | credentials, cryptocurrency, docker containers, Guardarian, kubernetes, Lazarus Group, npm malware, Python, Redis, SafeDep, Secrets, Shai-Hulud, software supply chain attacks, sonatype, StrapiThe npm code repository is again being used by a bad actor to launch a supply chain attack that includes three dozen malicious packages that appear as Strapi CMS plugins but deliver ...
Five Great DevOps Job Opportunities
Mike Vizard | | Agentic AI Engineering, Capital Markets DevOps, Cloud Engineer Salaries, DevOps Jobs 2026, DevOps Manager Hiring, Remote DevOps Careers, Senior DevOps Engineer Roles, Tech Salary Trends 2026Explore this week’s top DevOps and Platform Engineering roles. From $300k Cloud Engineering in Maryland to cutting-edge Agentic AI positions at T-Mobile ...
Latest Typosquatting Attack Targeting VS Code Tools Hits Windsurf IDE
Cybersecurity researchers from Bitdefender, a provider of an endpoint detection and response (EDR) platform, have discovered an extension to the Windsurf integrated development environment (IDE) that steals credentials and data after code ...
Microsoft Field Engineers Built a Six-Agent Research Pipeline in VS Code That Fact-Checks Its Own Output
Tom Smith | | Agent Handoff Pattern, Azure Kubernetes Service (AKS), Azure Red Hat OpenShift (ARO), Fact-Checking AI, GitHub Copilot Agents, Global Black Belts (GBB), Grounding, MCP Server, multi-agent systems, Project Nighthawk, Technical Research Automation, VS Code Agent SkillsAzure Global Black Belts Diego Casati and Ray Kao developed Project Nighthawk, a multi-agent system that automates deep technical research for AKS and ARO with 100% source-grounding ...
Survey Surfaces Increased Reliance on Open Source Software to Build Apps
Mike Vizard | | AI-Driven Vulnerabilities, Cyber Resilience Act (CRA), DevOps maintenance, DevSecOps best practices, DORA Compliance, Enterprise Open Source Adoption., Open Source Software (OSS), OpenLogic Survey, Software Supply Chain Security, vendor lock-inOpen source adoption is surging, with 49% of IT teams increasing usage. However, 47% of staff spend 75% of their time on maintenance. Explore the impact of AI threats and EU regulations ...
Meta Researchers Show AI Agents Can Verify Code Without Running It — and Hit 93% Accuracy
Tom Smith | | Agentic Code Reasoning, AI coding agents, Code Equivalence Verification, Defects4J Benchmark, DevOps Code Review, Execution-Free Reward Signals, Meta Research, Reinforcement Learning Training, RubberDuckBench, Semi-Formal Reasoning, software lifecycle engineering, static analysisMeta's semi-formal reasoning enables AI agents to verify code without executing it, achieving 93% accuracy. Implications for code review and RL training costs ...
GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents
Tom Smith | | AI coding agents, automated remediation, Credential Leakage, DeepSeek, devops security, GitHub MCP Server, GitHub Secret Scanning, LangChain, Push Protection, secret detection, Snowflake, Software Supply Chain, Token Validity Checks, VercelGitHub's March 2026 updates introduce secret scanning for AI agents via MCP, 37 new detectors, and expanded push protection. Learn how to secure AI-generated code ...
Developers Using Anthropic Claude Code Hit by Token Drain Crisis
Adrian Bridgwater | | ai, AI coding assistant, Anthropic, automation, Claude Code, CLI Coding, cloud, Developer Velocity, developers, devops, Max Subscription, Prompt Caching, Quota Exhaustion, Token Tracking Bug, Usage LimitsAnthropic’s Claude Code users report Max tier quotas exhausting in under 20 minutes. Explore the "Cache-22" of prompt caching, session limits, and why AI coding "opacity" is stalling developer workflows ...
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
Jeff Burt | | Axios, CI/CD, Google Threat Intelligence Group, JavaScript dependencies, Mandiant, North Korea, remote access trojan (RAT), Socket, sonatype, supply chain attack, TeamPCPThe threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large "blast radius." ...
AWS Makes Pair of AI Agents to Automate DevOps Tasks Available
Amazon Web Services (AWS) today made a pair of artificial intelligence (AI) agents to manage DevOps workflows and conduct penetration tests generally available. Neha Goswami, director of Agentic DevOps at AWS, said ...
