Cycode Adds AI Agent Teammates to Secure Software Supply Chains
Cycode, this week, added multiple artificial intelligence (AI) agents to its application security posture management (ASPM) capable of monitoring code and offering remediation suggestions. In addition, the company is adding an ability to, in real-time, monitor continuous integration processes running in memory. That capability makes it possible to thwart, for example, recent attacks that exploited […]
Endor Labs Adds AI Agents to Automate Application Security Reviews
Endor Labs today added a set of artificial intelligence (AI) agents to its platform, specifically trained to identify security defects in applications and suggest remediations. Fresh off raising an additional $93 million in funding, Endor Labs founder and CEO Varun Badhwar said going beyond simply identifying vulnerabilities in code, these AI agents are trained to […]
Veracode Extends Scope and Reach of DevSecOps Portfolio
Veracode today updated its risk management tool to provide integration with Kubernetes runtime environments, increased integration with code repositories to make it simpler to identify the origin of vulnerabilities and, available shortly, an ability to add tags and classifications to help streamline remediation efforts.
OpenAI’s CodexCLI: Transforming DevOps Through AI-Powered Terminal Integration
OpenAI’s new CodexCLI brings AI directly to your terminal, enabling DevOps teams to automate coding tasks and streamline workflows with natural language.
Grok Studio: xAI’s New Collaborative Workspace Transforms AI-Assisted Development
Explore Grok Studio, xAI’s split-screen collaborative workspace with eal-time code execution, Google Drive integration, and free accessibility for all users.
GitLab and AWS Deliver on Generative AI Integration Promise
GitLab this week made generally available a version of its generative artificial intelligence (AI) framework for software development that includes AI agents developed by Amazon Web Services (AWS).
Spacelift Applies Generative AI to Infrastructure Automation
Spacelift, this week, added generative artificial intelligence (AI) capabilities to its platform for automating the management of IT infrastructure provisioned using code.
Postman Adds Hub to Centralize Management of APIs
Postman this week added a Spec Hub platform to its portfolio that makes it possible to centralize the design, management and maintenance of application programming interface (API) specifications.
AI-Generated Code Packages Can Lead to ‘Slopsquatting’ Threat
AI hallucinations – the occasional tendency of large language models to respond to prompts with incorrect, inaccurate or made-up answers – have been an ongoing concern as the enterprise adoption of generative AI has accelerated over the past two years. They’re also an issue for developers using AI-based tools when building code, including generating names of packages […]
OpenAI in Talks to Buy Windsurf for $3 Billion: Report
OpenAI is in talks to acquire Windsurf for about $3 billion, a move that would put it in competition with AI coding assistant providers.
Symbiotic Security Unveils AI Coding Tool Trained to Identify Vulnerabilities
Symbiotic Security, this week, launched a tool that leverages a large language model (LLM) specifically trained to identify vulnerabilities via a chatbot as application developers write code.
Report: Commercial Software Just as Vulnerable as Open Source
An analysis published by ReversingLabs, a provider of tools for securing application development environments, suggests that commercial software used in software supply chains is just as vulnerable as open-source code.
Heroku Extends PaaS Reach to AI Application Development
Heroku, a subsidiary of Salesforce, is piloting support for inference capabilities within its platform-as-a-service (PaaS) environment in addition to tightening the level of integration it provides with artificial intelligence (AI) agents developed by its parent company.
AWS Adds Support for Multiple Languages to Amazon Q Developer
Amazon Web Services (AWS) has added multiple language support to the GenAI agents it makes available for application developers.
DeepCoder: Revolutionizing Software Development with Open-Source AI
DeepCoder-14B-Preview matches proprietary models with just 14B parameters, democratizing AI coding assistance through open-source reinforcement learning techniques.
GitHub Brings Together Security, Developers to Fix Code Flaws
GitHub is linking developers with security pros to reduce the number of vulnerabilities that may be hiding in code that already is in workflows. The highly popular Microsoft-owned code repository this week said its security campaigns, which were released in public preview in October 2024, are now generally available to GitHub Advanced Security and GitHub […]
Google Adds Raft of AI Agents and Platforms to Automate Software Development
Google this week previewed a bevy of artificial intelligence (AI) agents and platforms that enable application developers and the DevOps teams that support them to automate a wide range of software engineering tasks.
Atlassian Adds Bevy of AI Agents Across Software Development Lifecycle
Atlassian today added a series of AI agents that are specifically trained to automate a range of software engineering tasks.
Report: Bulk of Application Vulnerabilities Don’t Require Immediate Attention
An analysis of more than 101 million application security alerts conducted by OX Security, a provider of an application security posture management (ASPM) platform, finds only 2% to 5% require immediate action, with more than 95% considered informational.
GitHub Copilot Evolves: Agent Mode and Multi-Model Support Transform DevOps Workflows
GitHub Copilot adds Agent Mode with MCP support to all VS Code users, bringing agentic capabilities and multi-model choice that will revolutionize DevOps workflows.
env0 Adds AI Agents to IaC Platform for Automating Cloud Infrastructure Management
env0 this week added at the KubeCon + CloudNativeCon Europe 2025 conference an artificial intelligence (AI) agent to its platform for automating the management of infrastructure-as-code (IaC) workflows using open source Terraform tools.
Survey Surfaces Open Source Observability Gains
A survey of 1,255 observability practitioners and IT leaders finds that reliance on open-source software to enable observability continues to increase, with 76% of respondents now using open-source software tools and platforms such as OpenTelemetry and Prometheus.
JFrog Survey Surfaces Limited DevSecOps Gains
A global survey of 1,402 application developers, cybersecurity and IT operations professionals finds 71% work for organizations that, despite any potential vulnerabilities, still allow developers to download packages directly from the internet.