WhiteCobra Targets Developers with Dozens of Malicious Extensions
A threat group is dropping two dozen malicious extensions into the VSCode and Open VSX marketplaces, targeting developers using the VSCode, Cursor, and Windsurf source code editing tools with the goal of draining cryptocurrency wallets. Researchers with security firm Koi Security have been tracking WhiteCobra’s activities for more than a year as the bad actors […]
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Oasis Security Identifies Security Weakness in Cursor AI Coding Tool
Oasis Security this week warned application developers of a security flaw in the Cursor artificial intelligence (AI) code editor developed by Anysphere, Inc. that potentially could be used to allow a maliciously crafted code repository to execute code as soon as it’s opened using Cursor. Erez Schwartz, threat research engineer at Oasis Security, said that […]
OpenTelemetry Extensions to Enable Observability of AI Agents
OpenTelemetry is extending support for AI agents, enabling unified observability across apps and intelligent automation of IT tasks. Discover how Cisco and Splunk are driving this next phase of telemetry innovation.
Survey Surfaces Software Engineering Challenges Following Adoption of AI
A survey of 101 senior engineering leaders published this week finds while 87% believe their organization is “prepared” or “very prepared” to adopt artificial intelligence (AI). It’s also clear that several hurdles remain, most notably making sure application development teams have the quality assurance skill and expertise needed to validate AI outputs (66%). Conducted by […]
Warp Embeds AI Agents into a CLI to Provide Better Feedback Loop
Warp has added a version of its artificial intelligence (AI) agent for writing code that integrates directly within a command line interface (CLI). Company CEO Zach Lloyd said rather than working with AI agents within the context of an integrated development environment, Warp Code embeds AI agents with a CLI that is likely to prove […]
What Makes Vulnerability Scanning Effective in Fast-Moving DevSecOps Pipelines Today?
Traditional vulnerability scanning can’t keep pace with CI/CD. Learn how real-time, context-aware scanning reduces noise, speeds fixes, and enables secure DevSecOps at scale.
Hush Security Emerges to Eliminate Need for Application Secrets
Hush Security today emerged from stealth to provide an alternative approach to protecting application secrets using a platform that is designed to continuously discover them and then apply access controls based on policies defined by an IT team. Fresh off raising $11 million in funding, company CEO Micha Rave said the Hush Security platform eliminates […]
DevGovOps, A New Play on DevOps, or is It?
DevGovOps is emerging as the next evolution of DevOps, embedding governance into software delivery pipelines. At JFrog’s SwampUP 2025, governance, AI supply chains, and compliance took center stage—positioning DevGovOps as essential for responsible AI adoption.
JFrog CEO: AI Agents Require Practices Beyond Security, Traceability
NAPA, Calif. — A new persona in software development, artificial intelligence (AI) agents rather than human developers, has made it imperative that foundational platforms incorporate agentic practices alongside security, traceability, and visibility to succeed in the AI era. “Every foundational platform requires a single system of record,” Ben Haim told the crowd. “If you don’t […]
Cisco to Add AI Agents to Splunk Observability Platforms
Cisco today at its Splunk .Conf25 conference previewed a series of artificial intelligence (AI) agents for the Splunk Observability platform that are capable of automating the collection of telemetry data using open source OpenTelemetry software, detecting issues, identifying root causes, and applying fixes. At the same time, Cisco also launched Cisco Data Fabric, a platform […]
JFrog Unveils DevOps Platform for the Agentic AI Era
JFrog at its annual swampUP conference unfurled a DevOps platform, dubbed JFrog Fly, designed to enable application developers to more easily integrate artificial intelligence (AI) agents within workflows at scale. Via the Model Context Protocol (MCP) developed by Anthropic, JFrog Fly is designed to integrate with multiple AI repos and platforms such as Cursor, GitHub […]
JFrog Continues Leaping at swampUP
Every year, JFrog’s swampUP conference gives us a look at what’s next in DevOps, software delivery, and increasingly, AI. This year’s event in Napa did not disappoint. If you’ve followed JFrog over the years, you know they have never been shy about leading the conversation on how software is built, secured, and shipped. At swampUP […]
Survey: Most IT Teams Not Prepared to Manage AI Workloads
A ControlMonkey survey of 300 IT leaders finds most organizations are unprepared to scale AI workloads, citing automation gaps, reliability, skills shortages, and cost challenges. Modernizing infrastructure management with IaC is critical to meeting demand.
Empromptu Unveils Vibecoding Platform for Building Enterprise-Class Apps
Empromptu has launched its AI coding platform for building enterprise-class applications, featuring RAG, LLMOps, explainability, and SOC-2 compliance. Designed for scalability, accuracy, and predictable pricing, it aims to outperform vibecoding tools and accelerate enterprise AI app development.
Perforce Adds Small Language Model to Create Synthetic Data for App Testing
Perforce has added AI to its Delphix platform, enabling DevOps teams to use small language models (SLMs) for secure synthetic data testing—even in air-gapped, regulated environments. The update automates data masking, supports compliance, and advances AI-driven DevOps workflows.
Nominations Are Open: DevOps Dozen 2025
The DevOps Dozen 2025 awards are open. Celebrate community leaders and tools shaping DevOps, from AI to platform engineering and supply chain security.
Five Great DevOps Job Opportunities
Browse our weekly DevOps jobs report, spotlighting top roles, salaries and trends to help professionals advance their careers.
Making Observability Actionable: Turning Metrics, Logs, and Traces into Better Business Outcomes
Discover how actionable observability connects metrics, logs & traces to real business outcomes—driving revenue, reliability & customer satisfaction.
What is the Secret Sauce Behind Atlassian’s $610M Buy of The Browser Company
Atlassian’s $610M acquisition of The Browser Company signals the rise of AI-first browsers and a new battleground for DevOps and enterprise workflows.
Report: ChatGPT-5 Coding Gains Come at a Higher Cost
A report published this week by Sonar finds the GPT-5 platform released by OpenAI has the potential to generate better code but at significantly higher costs. Based on over 4,400 Java tasks, the report finds that depending on which of the four levels of reasoning capabilities that OpenAI now makes available, the overall quality of […]
Kong Acquires OpenMeter for API Metering and Billing
Kong acquires OpenMeter to add usage-based API metering and billing to Kong Konnect—critical for managing AI, LLM, and cloud service costs securely
Can Vibe Coding Work on an Enterprise Level?
Vibe coding promises AI-generated apps in seconds, but is it enterprise-ready? Explore risks, governance needs, and productivity potential.