Social – LinkedIn
Security Risks from AI Coding Agents Expand Beyond the Sandbox: Pillar
Jeff Burt | | AI code assistants, AI coding agents, AI Developers, AI sandbox, AI security risks, Cursor, Cymulate, Google Antigravity, Google Gemini, OpenAI Codex, Pillar Security, prompt injectionAI coding assistants have become an essential part of developers’ work, automating many of the repetitive tasks – think boilerplate coding and scaffolding – that in the past ate up a lot ...
Signed, Attested, and Malicious: The Software Supply Chain Has a Deepfake Problem
Nigel Douglas | | AI coding agents, AntV packages, behavioural analysis, continuous scanning, dependency security, Developer Security, GitHub Actions compromise, malicious packages, Miasma worm, Mini Shai-Hulud, npm malware, OIDC tokens, open source security, package provenance, package quarantine, policy as code, Red Hat npm attack, registry scanning, Shai-Hulud worm, SLSA provenance, software attestation, Software Supply Chain Security, TanStack compromise, trusted pipeline attacksA developer pulls a package from a reliable repo. It is signed, has provenance, and has been scanned. And then…it contains malware. That is no longer hypothetical. When the Miasma worm tore ...
Zero Trust Starts at the Code: Building Secure Systems with PKI and DevOps Automation
BALA CHANDAR NAGALLA | | certificate lifecycle management, CI/CD security, devsecops, PKI, Software Supply Chain, zero-trustWhen a certificate expires, it can take down a production system, and teams usually only find out after something goes wrong. These issues are hard to catch because they rarely trigger alerts ...
Harness Extends DevOps Reach to the Realm of AI Agents
Harness today extended the reach of its core continuous integration/continuous delivery (CI/CD) platform to enable DevOps teams to build and deploy artificial intelligence (AI) agents. At the core of that capability are ...
AI Moved the Bottleneck From Writing Code to Understanding and Trusting It
Ted Julian | | AI code generation, AI code security, AI coding tools, AI investment ROI, AI-generated code, application security, automated code review, code quality, code review, codebase visibility, compliance, dependency risk, developer productivity, devsecops, Engineering leadership, engineering metrics, engineering ROI, production incidents, pull request review, SCA, software composition analysis, software delivery, software development productivity, software governance, technical debtAI coding boosts velocity, but without stronger review, governance and codebase visibility, teams risk higher costs, security gaps and production failures. TL;DR ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos
Tom Smith | | AI agent governance, AI coding agent, Apache 2.0, credential exposure, developer privacy, devops security, github, Grok Build, open-source coding agent, Repository Security, source code security, xAIxAI has published the full source code for Grok Build, its terminal-based AI coding agent, on GitHub under an Apache 2.0 license. The release lands three days after a security researcher showed ...
HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform
Tom Smith | | Cloud Security, compliance automation, Hashicorp, HCL, HCP Terraform, infrastructure as code, Infrastructure Governance, OPA, Open Policy Agent, platform engineering, policy as code, Sentinel, Terraform, tfpolicyHashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks ...
AI-Generated Code Is Cheap But the Context Infrastructure Behind It Is Not
Saqib Jan | | AI coding, context engineering, Enterprise AI, RAG, retrieval-augmented generation, vector databasesThe cost curve for generating code with AI has moved in one direction, and it has moved fast. What used to require a senior engineer's full attention for an afternoon can now ...
Why You Need AI Agent Security Validation in Software Testing
Engineering teams have been racing for the last two years to deploy AI agents that can find bugs faster than any QA team ever could. Autonomous testing agents can crawl through codebases, ...
How AI in APM Spots Problems Before Users Do
A static alert at 80% CPU or a two-second response time threshold is an absolute judgment applied to a system that operates in relative terms. However, traffic patterns shift by hour, day, ...
Anaconda Acquires Kilo Code to Unify AI Development from First Prompt to Production
Jon Swartz | | acquisition, Agentic Workflows, AI agents, AI models, Anaconda, Enterprise AI, gitlab, JetBrains, Kilo Code, Metaflow, Outerbounds, VS CodeAnaconda Inc. has acquired Kilo Code, an open-source, model-agnostic platform that embeds artificial intelligence (AI) agents directly into developer workflows. The acquisition integrates Kilo’s rapid-growth community of over three million developers into ...
