Code Signing in the DevOps Era: Silver Bullet or Security Theater?
In the race for speed and automation, code signing is treated as a silver bullet when it should be just one part of a deeper trust strategy.
Zero-Trust, Full Stack: Embedding Cybersecurity Principles Into Site Reliability Engineering Culture
These days, with digital threats everywhere, cybersecurity must evolve beyond just being a perimeter measure. Given the rapid delivery of software and the transient nature of infrastructure, security must be built into DevOps. This shift presents both a challenge and an opportunity for site reliability engineers (SREs) to apply zero-trust principles everywhere, starting with infrastructure […]
Cultural Debt vs. Technical Debt in Infrastructure Automation
While technical debt, the accumulated cost of quick fixes and legacy code, is a familiar concept, cultural debt often goes unnoticed.
4 application modernization trends for 2025 and beyond
Experts highlight four trends shaping the app modernization landscape to help you navigate the process more efficiently.
Cloud ROI is Broken. Agentic AI Might Be the Fix.
Cloud environments are more complex to manage than anticipated, and the associated costs have spiraled far beyond early projections.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
DevOps Tools Under Siege: New Cryptojacking Campaign Exploits Misconfigurations to Mine Cryptocurrency
Wiz Research uncovers the JINX-0132 cryptojacking campaign, which exploits DevOps tools such as Nomad, Consul, Gitea, and the Docker API through misconfigurations.
How to Elevate DevOps Training and Testing With Generative AI
Undoubtedly, GenAI can help organizations develop and validate the skills needed to build and maintain secure and reliable software.
Five Great DevOps Job Opportunities
Considering a career change? Johnson & Johnson, Sharetec and Meritore Technologies are just three of the highlighted DevOps jobs this week.
Shift-Left API Security Testing: A Strategic Move for Agile Enterprises
Shift-left API security testing is more than a mere development trend; it’s also a strategic business decision.
How DevOps Powers Boundless Automation in Industrial Environments
Industrial environments, once resistant to rapid technological change, are now embracing automation to streamline operations, reduce errors and enhance productivity.
Most DevOps Engineer Jobs Pay Upwards of $140K, Require Less In-Office Presence and Prefer Senior-Level Experience
If you would like to explore the DevOps realm or make a switch, it would be beneficial to understand the average pay, preferred experience level, offered working modes and more to make your decision easier.
Checkmarx Surfaces Malicious Effort to Compromise Software Supply Chains
Checkmarx, this week, reported it has discovered malicious software packages that, in addition to injecting malware capable of bypassing endpoint security to exfiltrate data, also provide persistent remote access and control of desktops and servers.
AWS Application Modernization Service Employs AI Agents to Refactor Code
Amazon Web Services (AWS) has made generally available a service that makes use of artificial intelligence (AI) agents to migrate and modernize infrastructure, applications and code. Sriram Devanathan, general manager for low-code/no-code AppBuilder service at AWS, said the AWS Transform service provides access to a natural language chat interface that makes it simpler to either […]
Futurum Group Survey Surfaces DevSecOps Progress on Multiple Fronts
A survey of 110 security leaders finds all are investing in software supply chain security, with application security posture management (ASPM) and DevSecOps automation and orchestration topping the priority list, followed closely by security composition analysis (SCA) tools, application programming interface (API) security and dynamic application security testing (DAST) tools. In addition, 30% of respondents […]
Efficient CI at Scale: Lessons From Uber
As commit velocity increases and the number of active contributors grows, monorepos also introduce significant CI challenges — such as an ever-growing queue of pending changes, frequent conflicts, long land times and the critical need to keep the mainline green.
How to Introduce DevOps Practices in a Small Development Team Without Overhead
Small teams can adopt DevOps without the restrictiveness or requirements of a maintained engineer if they focus on the backbone principle of collaboration, automation and continuous improvement.
Five Great DevOps Job Opportunities
Browse our weekly round-up of the latest posts in the DevOps jobs market for your perusal, including this week, roles at Google and SAP.
Java at 30 Years Old: An Industry Perspective
Java is 30. If that makes you feel old, cheer up. Remember how groundbreaking and appealing the Java software language and platform has been over the years, think about how it has helped nurture a huge proportion of enterprise open source development (not to mention how it has essentially underpinned the web itself) and – […]
Claude Opus 4: The AI Revolution That Could Transform DevOps Workflows
Claude Opus 4 transforms DevOps with 7-hour autonomous coding, revolutionizing CI/CD pipelines, infrastructure automation and monitoring workflows.
Rethinking AI Software Development With a Three-Tiered Framework
What’s emerging is not a world where AI builds all the software, but one where software gets built faster, better and more precisely.
How Microservices Guardrails Help Teams Move Faster
Although a microservices architecture offers agility and scalability, it often introduces new complexity that can become overwhelming if left unchecked.
Simplifying Authorization at Scale: The Importance of DevOps Workflows with Flexible, Scalable and Secure Access Control
DevOps has transformed how developers build, deploy, and manage infrastructure and applications, making automation, scalability and rapid iteration core to modern development workflows. While much of the software delivery process has evolved, authorization has largely remained stuck in legacy approaches. Many organizations still manage homegrown solutions with hardcoded permissions across services, custom policies by different teams, […]