Chainguard Debuts a Security-First Agent Platform
Open source security company Chainguard has released Workspaces, a service designed to provide a safe space for agents to do their thing without disrupting the security of existing operations. The market for platforms to host agents is large and growing daily, though Chainguard’s expertise in security solves a major problem with running agents, namely managing […]
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
From Static Scans to Runtime Awareness: The Next Phase of Software Supply Chain Security
A growing wave of software supply chain attacks, including Shai-Hulud, Axios and LiteLLM, is exposing weaknesses in conventional security tooling. Malicious open-source packages can execute harmful code during installation, often before traditional security checks take effect. Despite high confidence in existing defenses, many organizations lack proactive controls such as package cooldown periods, pre-ingestion scanning and continuous threat intelligence evaluation.
OpenCode Breach Puts Spotlight on AI Distillation Threats
An attack using the technique on the open source coding agent’s Console hub exposed third party API keys from OpenAI, Anthropic, and Google
Dean Hall Open Sources Brutal to Give Game Studios a Way Out of Engine Lock-In
DayZ creator Dean Hall has unveiled Brutal, a free C# framework designed to give game developers greater control over their technology and reduce dependence on commercial engines. Already used in projects including RimWorld’s new engine, Brutal promises flexibility and performance while raising familiar questions about licensing, maintenance and open source sustainability.
Blitzy Adds Chat-to-Prompt Interface to Agentic AI Engineering Platform
Blitzy this week added a chat interface to a platform that enables DevOps teams to employ artificial intelligence (AI) agents by expressing their intent in natural language. Dr. Neeraj Deshmukh, Field CTO for Blitzy, said the Chat to Prompt interface makes it possible for a software engineer to describe a desired outcome that is then […]
ScienceLogic Extends Observability Reach and Control Deeper into AI Agents
ScienceLogic has added additional tools and capabilities to its observability platform that provide deeper visibility and control over artificial intelligence (AI) agents that are being used to automate IT operations. The latest 2.7 update to the Skylar AI platform provides visibility into agent routing and tool selection via a catalog that uses traces to surface […]
Figma Gives AI Agents a Spec Sheet and Developers a Shared Canvas
Figma introduces Specs, code layers and expanded MCP tools to connect AI agents, designers and developers while improving design-to-code workflows.
Claude Platform Now Sends Agent Traces Straight to Your Observability Stack
Anthropic is making it easier to see what Claude-based agents do in production. The company has added OpenTelemetry trace export to the Claude Platform. Developers can now send traces from the Messages API, Claude Managed Agents, and the Claude SDKs to the observability tools they already use. The feature launched in public beta on October […]
Apple Brings Whole-Program C++ Hardening to Clang
Apple has added a new tool to the upstream LLVM project that could change how teams harden large C++ codebases. The clang-ssaf-driver, merged into LLVM Git this week, analyzes an entire project as it builds and then rewrites source code based on what it finds. The driver is part of Clang’s Scalable Static Analysis Framework […]
One Bill for Grok, Cursor, and X: What SpaceX’s Bundle Means for Developers
SpaceX wants to be the single line item for your AI coding tool, your chatbot, and your social media account. On October 12, SpaceX Super Intelligence (SpaceXSI), the AI unit formerly known as xAI, introduced The X Subscription. It folds Grok, the Grok Bot agent, the Cursor AI code editor, and X Premium into one […]
BAND Desktop Application Streamlines Management of AI Coding Agents
BAND today made available a desktop application through which application developers can more easily manage and collaborate with multiple coding agents. Company CEO Arick Goomanovsky said the BAND for Developers application, in addition to providing more context and coordinating handoffs between disparate AI agent sessions, also makes it simpler for developers to intervene whenever an […]
GitLab Fixes CVSS 10 Flaw in CI/CD Regex Engine, Plus 23 Other Vulnerabilities
GitLab is telling every self-managed customer to upgrade now. On October 12, the company shipped versions 19.4.2, 19.3.5, and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE). The releases fix 24 security vulnerabilities. One has a CVSS score of 10.0, the highest rating possible. GitLab.com already runs the patched code. GitLab Dedicated customers […]
GitHub Narrows App Permissions to Pull Teams Off Classic PATs
GitHub is giving DevOps teams more ways to limit an automation job to only the access it needs. A batch of GitHub Apps updates released Oct. 13 adds narrower permissions, relaxes a long-standing install restriction for repository administrators, and makes it easier to move users to expiring tokens. GitHub says the goal is to help […]
npm Puts a 48-Hour Clock on Unused Trusted Publishing Configurations
GitHub has added an expiration date to unused npm trusted publishing configurations. Any configuration that doesn’t complete a successful publish within 48 hours of creation now expires and can no longer authorize a release. It’s a small change. But it closes a gap that matters to anyone who publishes packages from a CI/CD pipeline. How […]
Anthropic Builds Its Own Source Control After AI Agents Outgrow Git
Anthropic has moved its internal monorepo off Git and onto a version control system it built from scratch. The reason is simple. Its AI agents now write code faster than Git-based infrastructure can handle it. In a post on its engineering blog, the company said it averaged about 2,500 merged code changes a day in […]
Noma Security Discloses Claude Code Desktop Exploit
Security researchers at Noma Security uncovered SneakPeek, a vulnerability in Anthropic’s Claude Code Desktop that allowed malicious JavaScript embedded in large HTML files to bypass sandbox protections and silently steal sensitive local data. The flaw exposed credentials, API tokens and Kubernetes configurations through the application’s preview pane. Although Anthropic has released a security update addressing the exploit, the discovery highlights growing software supply chain risks as AI coding tools become embedded in developer workflows without sufficient security oversight.
GitHub Ties Every Commit to the Account That Pushed It
GitHub has introduced push attribution in limited public preview for Enterprise customers, adding authenticated pusher identities to commits alongside author and committer information. A new repository rule can also block pushes when committer details don’t match the authenticated account, helping DevOps teams combat identity spoofing, improve audit trails and strengthen software supply chain security.
AI Is Automating Code. The Job Is Engineering
AI is automating coding, but software engineering still requires human judgment. Explore what shifting developer demand means for DevOps, QA and software delivery.
Cloudflare Brings the Deno Team In to Make Self-Hosted Workers Practical
Cloudflare brings Deno’s team aboard to expand self-hosted Workers and Durable Objects as Deno Deploy winds down and runtime support enters its final year.
LocalStack Extends Emulation Reach to Microsoft Azure Services
LocalStack has made available a public beta of its platform that enables application developers to emulate Microsoft Azure cloud services on their local machines. Colin Neagle, head of marketing for LocalStack, said LocalStack now enables application developers to build software locally that can run across more than 40 Azure services. Following initial support for cloud […]
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
The Agent Failure Your Approval Gate Can’t Catch
An agent that does the wrong thing leaves evidence — a bad diff, a malformed record, a customer complaint. An agent that does nothing and reports success leaves a green checkmark, and green is the one signal your incident process is built to trust. Worry more about the second failure, because everything a DevOps team […]
Showing the 24 most recent articles. Additional archive pages are not yet available.