News
Report: Bulk of Application Vulnerabilities Don’t Require Immediate Attention
An analysis of more than 101 million application security alerts conducted by OX Security, a provider of an application security posture management (ASPM) platform, finds only 2% to 5% require immediate action, ...
GitHub Copilot Evolves: Agent Mode and Multi-Model Support Transform DevOps Workflows
GitHub Copilot adds Agent Mode with MCP support to all VS Code users, bringing agentic capabilities and multi-model choice that will revolutionize DevOps workflows ...
env0 Adds AI Agents to IaC Platform for Automating Cloud Infrastructure Management
env0 this week added at the KubeCon + CloudNativeCon Europe 2025 conference an artificial intelligence (AI) agent to its platform for automating the management of infrastructure-as-code (IaC) workflows using open source Terraform ...
Survey Surfaces Open Source Observability Gains
A survey of 1,255 observability practitioners and IT leaders finds that reliance on open-source software to enable observability continues to increase, with 76% of respondents now using open-source software tools and platforms ...
JFrog Survey Surfaces Limited DevSecOps Gains
A global survey of 1,402 application developers, cybersecurity and IT operations professionals finds 71% work for organizations that, despite any potential vulnerabilities, still allow developers to download packages directly from the internet ...
AWS Brings Generative AI Capabilities to OpenSearch Service
Amazon Web Services (AWS) today revealed it is streamlining IT incident management by adding generative artificial intelligence (AI) capabilities to the Amazon OpenSearch service. Widely used to troubleshoot IT incidents involving AWS ...
Legit Security Adds Dashboard to ASPM Platform to Improve DevSecOps
Legit Security this week added a dashboard to its application security posture management (ASPM) platform that makes it simpler to correlate the creation of a vulnerability to a specific application development team ...
Microsoft’s Hyperlight Wasm: Bringing WebAssembly to Secure Micro-VMs
Microsoft expands its Hyperlight project with Hyperlight Wasm, enabling secure WebAssembly workloads in lightweight VMs across Windows, Linux, and macOS platforms ...
Pulumi Extends Security Reach to Include Managing Secrets and Policy-as-Code
Pulumi today extended the reach of its Environments, Secrets and Configurations (ESC) platform for managing infrastructure-as-code (IaC) into the realm of DevSecOps by adding the ability to manage secrets and implement policies ...
Imandra Extends Symbolic AI Model to Validate Source Code
Imandra today launched an artificial intelligence (AI) agent, dubbed CodeLogician, that uses symbolic models to transform source code into mathematical models that can then be validated and tested in a way that ...
ControlMonkey Adds Disaster Recovery Capability to IaC Platform
ControlMonkey today added a disaster recovery module to its namesake software-as-a-service (SaaS) platform for automating the management of infrastructure-as-code tools based on open-source Terraform software. Company CEO Aharon Twizer said that Automate ...
Google’s OSV-Scanner V2: Leveling Up Vulnerability Management for Developers
Google's OSV-Scanner V2.0.0 brings enhanced vulnerability scanning with container support, interactive visualizations, and innovative remediation features ...
