JFrog CEO: AI Agents Require Practices Beyond Security, Traceability
NAPA, Calif. — A new persona in software development, artificial intelligence (AI) agents rather than human developers, has made it imperative that foundational platforms incorporate agentic practices alongside security, traceability, and visibility to succeed in the AI era. “Every foundational platform requires a single system of record,” Ben Haim told the crowd. “If you don’t […]
Survey: Most IT Teams Not Prepared to Manage AI Workloads
A ControlMonkey survey of 300 IT leaders finds most organizations are unprepared to scale AI workloads, citing automation gaps, reliability, skills shortages, and cost challenges. Modernizing infrastructure management with IaC is critical to meeting demand.
Empromptu Unveils Vibecoding Platform for Building Enterprise-Class Apps
Empromptu has launched its AI coding platform for building enterprise-class applications, featuring RAG, LLMOps, explainability, and SOC-2 compliance. Designed for scalability, accuracy, and predictable pricing, it aims to outperform vibecoding tools and accelerate enterprise AI app development.
Perforce Adds Small Language Model to Create Synthetic Data for App Testing
Perforce has added AI to its Delphix platform, enabling DevOps teams to use small language models (SLMs) for secure synthetic data testing—even in air-gapped, regulated environments. The update automates data masking, supports compliance, and advances AI-driven DevOps workflows.
Nominations Are Open: DevOps Dozen 2025
The DevOps Dozen 2025 awards are open. Celebrate community leaders and tools shaping DevOps, from AI to platform engineering and supply chain security.
Five Great DevOps Job Opportunities
Browse our weekly DevOps jobs report, spotlighting top roles, salaries and trends to help professionals advance their careers.
Kong Acquires OpenMeter for API Metering and Billing
Kong acquires OpenMeter to add usage-based API metering and billing to Kong Konnect—critical for managing AI, LLM, and cloud service costs securely
Malicious Nx Packages Used in Two Waves of Supply Chain Attack
The Nx build system was hit by a supply chain attack dubbed “s1ngularity,” leaking thousands of secrets and exploiting AI tools for data theft.
Survey Surfaces Raft of AI Coding Issues Involving Embedded Systems
A new survey of 785 development and security professionals reveals that 89% of organizations are using AI coding assistants for embedded systems, but concerns over security, licensing risks, and governance remain. Python leads as the top programming language, while SBOM adoption and SCA scans rise across industries.
System Initiative Adds AI Agents to Infrastructure Automation Platform
System Initiative introduces autonomous AI agents to its infrastructure automation platform, using digital twins to help DevOps teams safely optimize and manage IT environments.
Qwiet AI Extends Microsoft Support in Platform for Fixing Vulnerabilities
Qwiet AI extends its AI-driven application security platform with deeper Microsoft DevOps integrations, enhanced automation, and expanded AutoFix capabilities to proactively remediate code vulnerabilities.
Harness Delivers on AI Promise for DevOps
Harness launches an AI-powered DevOps platform that uses knowledge graph–driven agents to automate pipelines, testing and operations across the software delivery lifecycle.
Copado Extends AI Reach to Surface Relationships Between Salesforce Code
Copado’s module maps Salesforce object relationships, cutting discovery time and boosting reuse, impact analysis, and DevOps best practices.
Sentry Adds Tool for Monitoring MCP Servers to APM Platform
Sentry today added an ability to monitor Model Context Protocol (MCP) servers to its application performance monitoring (APM) platform.
Survey Traces Large Amount of Breaches Back to Vulnerable Code
A survey of 1,519 application security stakeholders finds nearly all (98%) work for organizations that have experienced a security breach attributable to vulnerable code, with 81% acknowledging their organization has shipped code with known vulnerabilities into production environments. Conducted by Censuswide on behalf of Checkmarx, the survey also finds more than a quarter of organizations […]
Eclipse Foundation Publishes Toolkit to Simplify CRA Compliance
The Eclipse Foundation has launched the OCCTET project, offering open-source compliance tools to help smaller organizations meet the EU’s new Cyber Resilience Act requirements.
Sonar Surfaces Multiple Caveats When Relying on LLMs to Write Code
New SonarSource research shows LLMs like GPT-4o, Claude Sonnet 4, and Llama-3.2 produce highly functional yet risky code — with frequent high-severity vulnerabilities, hard-coded credentials, and messy “code smells” that raise long-term tech debt.
How Gemini CLI GitHub Actions is Changing Developer Workflows
Google’s new Gemini CLI GitHub Actions transforms repository management with AI-powered automation for issue triage, code reviews and collaboration.
ArmorCode Extends AI Tool to Generate Code Fixes for Specific Runtime Environments
ArmorCode, this week at the Black Hat USA 2025 conference, revealed it has extended its Anya artificial intelligence (AI) tool to generate suggested code fixes that are customized for specific runtime environments.
Black Duck Software Extends AI Reach to IDE to Better Secure Code
Black Duck Software, this week at the Black Hat USA 2025 conference, revealed it has now integrated its artificial intelligence (AI) tool for securing software, dubbed Black Duck Assist, into the company’s plug-in for integrated developer environments (IDEs).
Cycode Delivers AI Agent to Assess How Exploitable Vulnerabilities Are
Cycode has added an artificial intelligence (AI) agent to its application security posture management (ASPM) platform that has been specifically trained to determine how exploitable a specific vulnerability found in an application actually is.
BMC Extends Scope and Reach of DevOps Mainframe Workflows
BMC has extended its DevOps analytics tool for mainframe environments, dubbed BMC AMI zAdviser Enterprise, to now be able to collect Git usage data to make it simpler to identify bottlenecks and other workflow issues in addition to making available in beta a BMC AMI Assistant tool that enables IT teams to via a natural language interface chat with a generative artificial intelligence that BMC has trained to help optimize operations.
Survey Surfaces Multiple Persistent DevSecOps Challenges
A survey of leaders based in North America finds 62% work for organizations that knowingly release insecure code to meet delivery deadlines.