Social – Facebook
GitHub API Abuse, ‘Ghost’ Accounts Part of Malicious Efforts to Map Organizations
Jeff Burt | | Cofense, Data Exfiltration, data mapping, data scraping, datadog, Fortran, GitHub API, GitHub ghost accounts, gitlab, GraphQL, personal tokens, REST APIsDatadog researchers uncover months-long overlapping campaigns to scrape data about companies and their developers ...
Why Developer Workstations Have Become a Critical Part of the Software Supply Chain
Samuel Ogbonna | | CI/CD security, Developer Security, Developer Workstations, devsecops, open source security, Software Supply ChainFor years, software supply-chain security discussions focused on centralized infrastructure such as build servers, package registries, and CI/CD systems. Recent attacks suggest that this view is incomplete. The Megalodon campaign injected malicious ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
‘HalluSquatting’ Compromises AI Coding Agents to Install Malware, Create Botnets
Jeff Burt | | AI coding agents, AI hallucinations, AI security agents, Cursor, devops, GitHub Copilot, Google Gemini, HalluSquatting, indirect prompt injection, LLM, OpenClaw, promptwareHallucinations have been an ongoing problem since OpenAI first introduced its ChatGPT chatbot in November 2022, highlighting generative AI’s tendency to generate plausible but false or misleading information and its inability to ...
IBM Bob Gets Multi-Agent Muscle and a Cost Dashboard for Enterprise Coding
IBM Bob adds multi-agent coordination, cost analytics, and modernization workflows for IBM Z, IBM i, and Java as AI governance takes center stage ...
GitHub’s Redesigned PR Inbox Tackles the Review Bottleneck AI Created
GitHub's redesigned pull requests dashboard is now GA, adding Inbox, saved views, and smarter filters as PR review queues grow ...
SpaceXAI’s Grok 4.5 Undercuts Anthropic and OpenAI on Coding Agent Pricing
SpaceXAI's Grok 4.5 undercuts Opus 4.8 on price, matching it on key coding benchmarks, and adds new safeguards against cybersecurity risks ...
Enterprise Smart Contracts Have a Cryptography Problem. EY Just Built a Way Around It
The business case for smart contracts is building fast. Major financial institutions are using programmable, code-based agreements to underpin financial workflows, supply chain operations, and tokenization initiatives. Developers are being asked to ...
IBM and Red Hat Launch Lightwell Catalog to Automate Remediation
IBM and Red Hat this week revealed that Lightwell Network, a catalog of more than 6,500 application-layer dependencies that drives an automated vulnerability remediation service, is now generally available. At the same ...
GhostApproval Flaw Featuring Decades-Old Feature Found in Six AI Coding Tools
Jeff Burt | | Adversa AI, AI coding agents, AI security risks, Amazon Q Developer, Anthropic Claude Code, Augment, CodeSignal, Cursor, GhostApproval, Google Antigravity, human in the loop coding, OpenAI Codex, SSH keys, symlinks, Unix, Windsurf, WizA security flaw found in six popular AI coding agents can let attackers abuse a decades-old feature in Unix to trick an AI agent into giving them control of a developer’s system ...
Multi-Model AI Debate: The New Way to Design Software Systems
How agentic workflows can automate architecture debates, compare tradeoffs and produce stronger software designs ...
How to Build a DevSecOps CI/CD Pipeline on Azure With GitHub Actions
Fix security problems when they’re cheap to fix, which is before the code is deployed. A pipeline that enforces this automatically is what makes that principle real ...
