Perplexity Bumblebee Shakes Loose Hidden Threats on Dev Desktops
The fight to maintain security has moved to the engineer’s messy desktop. Last week, AI search provider Perplexity open-sourced an internal tool, Bumblebee, for checking developer machines, either Linux or macOS, for vulnerable software. Continuous integration pipelines have baked security checks into them, with Software Bills of Materials (SBOMs) ensuring that the correct version of […]
OWASP Adopts CVE Lite CLI to Boost Dependency Scanning
Checking for dependency vulnerabilities in freshly developed software is usually done near the end of the build process. Remediation at that point can be tricky. Now, JavaScript and TypeScript developers can check for vulnerabilities themselves as they – or their agents – write their source code, using an open source project called CVE Lite CLI. […]
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Co-Developing an AI Native Observability Platform
Modern distributed hybrid enterprise environments are moving away from siloed monitoring toward AIOps platforms like Selector AI, which combine multi-domain data ingestion, domain-specific network language models, and co-development to enable autonomous, agentic network operations.
Attackers Can Exploit a Claude Code RCE Flaw to Take Command of System
A dangerous vulnerability found in Anthropic’s popular Claude Code developer model could have allowed bad actors to grab control of a victim’s system by luring them into clicking on a crafted malicious deeplink. Once in, the attacker could exploit the remote code execution (RCE) security flaw to execute arbitrary commands – such as shell commands […]
AI Agents in CI/CD Pipelines: Speed vs Control in Modern DevOps
The moment you push your code, deployment fires off on its own. The pipeline kicks in, the tests sail through, and within a few minutes your app is live in production. There is no manual sign-off and no one scanning through the final changes. Everything is running on the decisions of an AI agent plugged […]
Designing an AI-Powered DevSecOps Guardrail Pipeline Using GitHub Actions
By embedding AI-powered guardrails directly into CI/CD pipelines, organizations can detect vulnerabilities earlier, enforce security policies automatically and accelerate secure software delivery.
Modernizing DevOps Security With Intelligent KYC Enforcement Layers
This is where smart KYC enforcement layers fit in — not a compliance box, but an engineering control that is directly part of DevOps processes.
Eight Ways AI Will Reshape DevOps in 2026 and Beyond
In 2026 and beyond, AI will not just change how software is developed, but change the very fundamentals of how people work.
OpenTelemetry Achieves CNCF Graduated Project Status
The Cloud Native Computing Foundation (CNCF) today announced that the open source OpenTelemetry (OTel) project has officially graduated a little more than seven years after its initial adoption. Announced at the Observability North America Summit, OpenTelemetry was first donated to the CNCF in 2019 following the merger of separate OpenTracing and OpenCensus projects that sought […]
Low-Code/No-Code in Microsoft 365: How Power Platform is Redefining Enterprise DevOps
Low-code and no-code platforms like Microsoft Power Platform are reshaping enterprise DevOps. When combined with cloud architecture, DevOps discipline, and AI-driven assistance, they enable organizations to deliver solutions faster without sacrificing control.
CI/CD Supply Chain Security: Hardening Artifacts, Dependencies, and Delivery Pipelines
Modern CI/CD pipelines have become one of the most attractive attack surfaces in enterprise environments. As organizations push for faster releases, broader automation, and greater reuse of third-party components, the software supply chain has quietly expanded beyond the direct control of any single team. Source code is only one small piece of what ultimately runs in […]
The Evolving Role of Observability in DevOps
DevOps practices have fundamentally changed how software is delivered, operated, and improved. At their heart, DevOps methodologies seek to unify development and operations, enabling teams to ship changes more quickly while maintaining system reliability. The discipline has grown beyond simple CI/CD automation to encompass culture, observability, and intelligent workflows. As organizations scale, they face new […]
How to Create an AI Acceptable Use Policy
When teams know which tools are acceptable and which data are off-limits, AI becomes a disciplined advantage rather than a quiet source of risk.
Microsoft Open-Sources RAMPART and Clarity to Bring Agent Safety Into the Dev Workflow
Microsoft open-sources RAMPART and Clarity to help dev teams embed AI agent safety testing directly into CI pipelines and design workflows.
The “Day 2” AI Problem: Why Standard API Gateways Fail at GenAI Scale
Injecting GenAI into applications is deceptively easy. Need a new chatbot backed by an LLM? Grab an OpenAI API key and you can throw together an MVP in an afternoon. This is the pattern teams have used to push AI features into apps for the last few years. The problem, as with previous tech hype […]
CloudBees Survey Surfaces Increase in Production Issues Attributable to AI
A survey of 213 IT leaders, conducted by CloudBees, finds that while 93% report they are seeing productivity gains that are driven by increased adoption of artificial intelligence (AI) tools, a full 81% also report they have seen an increase in production issues attributable to AI-generated code. Shared this week at an Agentic DevOps World […]
GitHub Breach Tied to Malicious VS Code Extension Exposes Thousands of Internal Repositories
GitHub says attackers accessed thousands of internal repositories after a company employee’s device was compromised through a malicious Visual Studio Code extension, though the company said it has removed the malicious extension, isolated the compromised endpoint, and launched an investigation. The company confirmed that approximately 3,800 internal repositories were affected. GitHub stated that investigators have […]
The Automation Layer Wants to Own Enterprise AI
Organizations want AI systems capable of prioritizing alerts, routing workflows, coordinating across applications, initiating remediation steps, summarizing operational data and adapting dynamically based on changing context. The system is no longer following a rigid set of instructions. It is participating in operational decision-making. That changes the operational risk profile dramatically. When deterministic automation fails, the blast radius is usually constrained. Probabilistic systems introduce a completely different level of complexity because behavior can evolve dynamically during runtime.
OpenSSF’s CRob: ‘The Runway Is Rapidly Running Out’ on EU CRA Readiness
The EU’s Cyber Resilience Act kicks into high gear this September, and companies are still clueless about how they must obey its strictures. MINNEAPOLIS — At Open Source Summit North America, Christopher “CRob” Robinson, Chief Security Architect for the Open Source Software Foundation (OpenSSF), spoke about the European Union’s (EU) Cyber Resilience Act (CRA). CRob […]
1Password Allies With OpenAI to Secure Codex AI Coding Tool
DevSecOps teams can now manage coding agents as a tenant rather than another vault where secrets might be stored, ensuring credentials are never exposed to an AI agent or LLM as plain text. The MCP server does not read or return secret values through the MCP channel, allowing Codex to create environments and invoke applications while the values themselves never leave the 1Password vault.
We Spent 15 Years Automating Infrastructure. Now We’re Automating Decisions
As DevOps shifts from deterministic infrastructure automation to AI-driven probabilistic judgment, organizations face a profound transition from automating tasks to automating operational reasoning. Discover why this requires a fundamental evolution in platform engineering, trust, and governance.
Cursor’s Composer 2.5 Brings Smarter, More Reliable AI Coding Agents
AI-assisted coding tools are getting a meaningful upgrade. Cursor has released Composer 2.5, the latest version of its proprietary coding agent model, and the improvements go well beyond a version bump. Composer 2.5 is described as a substantial improvement in intelligence and behavior over its predecessor, Composer 2. It handles sustained work on long-running tasks […]