
Microsoft Field Engineers Built a Six-Agent Research Pipeline in VS Code That Fact-Checks Its Own Output
Azure Global Black Belts Diego Casati and Ray Kao developed Project Nighthawk, a multi-agent system that automates deep technical research for AKS and ARO with 100% source-grounding

Survey Surfaces Increased Reliance on Open Source Software to Build Apps
Open source adoption is surging, with 49% of IT teams increasing usage. However, 47% of staff spend 75% of their time on maintenance. Explore the impact of AI threats and EU regulations like CRA and DORA.

How AI is Shaping Modern DevOps and DevSecOps
AI is reshaping DevOps and DevSecOps by improving CI/CD workflows, DORA metrics and security without adding unnecessary complexity.

Meta Researchers Show AI Agents Can Verify Code Without Running It — and Hit 93% Accuracy
Meta’s semi-formal reasoning enables AI agents to verify code without executing it, achieving 93% accuracy. Implications for code review and RL training costs.

GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents
GitHub’s March 2026 updates introduce secret scanning for AI agents via MCP, 37 new detectors, and expanded push protection. Learn how to secure AI-generated code.

Developers Using Anthropic Claude Code Hit by Token Drain Crisis
Anthropic’s Claude Code users report Max tier quotas exhausting in under 20 minutes. Explore the “Cache-22” of prompt caching, session limits, and why AI coding “opacity” is stalling developer workflows.

North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
The threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large “blast radius.”

AWS Makes Pair of AI Agents to Automate DevOps Tasks Available
Amazon Web Services (AWS) today made a pair of artificial intelligence (AI) agents to manage DevOps workflows and conduct penetration tests generally available. Neha Goswami, director of Agentic DevOps at AWS, said AWS DevOps Agent provides software engineering teams with an always-available assistant that can automatically optimize application reliability and performance in addition to automating […]

Harness Extends CD Platform to Address AI Coding Challenges
Harness expands its CD platform to tackle the “AI code explosion” with automated rollbacks, snowflake support, and warehouse-native feature management.

The Trust Tax Framework: Measuring Developer Confidence in CI/CD Systems
Is your re-run rate over 30%? Discover the “Trust Tax” killing your DevOps ROI. Learn to manage flaky tests through automatic quarantine, contextual reporting, and cultural shifts.

Why Governance Determines Whether Agentic AI Accelerates or Stalls Engineering
AI coding tools offer rapid productivity gains, but “governance debt” often slows delivery. Learn how to embed risk-based controls and auditability into agentic AI workflows to scale engineering capacity.

When Customer-Facing Systems Fail: How Incident Response and Observability Reduce MTTR
In a world of microservices and real-time interactions, MTTR is the ultimate metric for brand protection. Learn how observability and resilient architecture drive faster incident response.

Iceberg Won the Format War — Now Comes the Hard Part
Apache Iceberg has effectively won the open table format conversation. AWS, Google Cloud, Microsoft, Snowflake, Databricks — every major platform has thrown its weight behind it. If you work in data engineering or platform operations, the question is no longer whether Iceberg is the right foundation. It’s what it actually takes to run it day […]

Lightrun Adds Ability to Dynamically Pull Telemetry Data from Live Apps
Lightrun has added an ability to dynamically pull missing telemetry evidence from live application environments without having to deploy additional instrumentation to its namesake site reliability engineering (SRE) platform that is based on artificial intelligence (AI). Company CEO Ilan Peleg said the Lightrun AI SRE platform includes a sandbox deployed via a software development kit […]

GraphQL at Scale: Lessons From Building APIs That Thousands of Developers Actually Use
GraphQL adoption is set to double by 2027. Explore the operational shifts required for enterprise scale, including query complexity analysis, persisted queries, and Apollo-style federation.

Agentic Systems are Breaking Reliability Frameworks
Agentic AI systems introduce “silent failures” that bypass traditional SOC alerts. Learn why DevOps and Security teams must shift from deterministic assertions to distribution-based testing and runtime behavioral boundaries.

OpenTelemetry Gets Kotlin Multiplatform API & SDK
OpenTelemetry expands its observability reach with a native Kotlin Multiplatform API and SDK. Contributed by Embrace, this update enables vendor-neutral telemetry across JVM, iOS, and web, offering idiomatic Kotlin support and optimized performance for mobile and client-side applications.

Tekton Kubernetes-Native CI/CD Project Reaches CNCF Incubation
The CNCF TOC has voted to accept Tekton as an incubating project. As a Kubernetes-native framework for CI/CD, Tekton enables developers to build, test, and deploy across clouds by treating pipelines as standard K8s resources. Originally part of Knative, it now offers a modular ecosystem including Triggers and Chains for supply chain security, integrating deeply with Argo CD and Sigstore.

Five Great DevOps Job Opportunities
Explore this week’s top DevOps career opportunities featuring roles at SAP, Maximus, Inc., and Bellota Labs. Salaries range from $115k to $337k for senior and lead positions.

GitHub to Leverage User Code for AI Model Training, Allows Opt-Out
GitHub is preparing a significant change to how it trains the AI models behind its Copilot coding assistant. Beginning April 24, the Microsoft-owned platform will collect user interaction data by default to improve its AI systems, unless users actively disable the setting. The update applies to individuals using Copilot Free, Pro, and Pro+ tiers. Enterprise […]

Sysdig Adds Runtime to Secure AI Coding Agents
Sysdig this week at the RSA Conference (RSAC) revealed it has created a runtime that makes it possible to securely deploy artificial intelligence (AI) coding tools. Jonas Rosland, director of the open source program for Sysdig, said the runtime makes it possible to monitor the activity of AI coding agents in real time, including potential […]

Security as Code is Becoming the New Baseline: Continuous Compliance in DevOps
There was a time when compliance meant a quarterly ritual. Someone from security would walk over with a spreadsheet, ask a few questions, tick a few boxes and disappear until the next audit cycle. The infrastructure team would scramble to prove that yes, encryption was enabled, and no, that S3 bucket was not public anymore. Everyone felt relieved, […]

Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM
The supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand, with software development tools from Checkmarx and LiteLLM being the latest victims of the sophisticated campaign. The threat group behind it, TeamPCP, is using the attacks to create persistence and […]
