Most Read
Most read news & articles within last 7 days
More JFrog Artifactory Bugs Are Under Attack, and All Three Have Patches
Tom Smith | | administrative tokens, artifact repositories, authentication bypass, build pipeline security, CI/CD security, CVE-2026-42016, CVE-2026-42018, CVE-2026-82329, Cybersecurity, devsecops, Groovy plugins, JFrog Artifactory, patch management, privilege escalation, Repository Security, Rust backdoors, Software Supply Chain, vulnerability management, web shellsAttackers are actively exploiting three JFrog Artifactory flaws, exposing how slow patching can turn artifact repositories into software supply chain attack paths ...
GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing
Tom Smith | | access control, API security, CI/CD security, credential theft, CVE-2026-85706, CVE-2026-87719, CVSS 10.0, Cybersecurity, devops security, devsecops, gitlab, GitLab Duo, GitLab security, GraphQL security, patch management, Repository Security, self-managed GitLab, Software Supply Chain, vulnerability managementGitLab patches two critical flaws, including a CVSS 10.0 unauthenticated file-read vulnerability, putting self-managed instances under urgent pressure to upgrade ...
Factory Raises $200M as It Builds Agents Across the Software Lifecycle
Jaime Hampton | | AI agents, AI coding, AI Software Engineering, devops, factory, generative AI, software developmentEnterprise coding agent startup Factory announced it has raised $200 million at a $5 billion valuation, more than tripling its valuation from its last funding round five months ago. Founded in 2023, ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
LocalStack Acquires WonderTwin AI to Gain SaaS App Emulation Platform
LocalStack this week revealed it has acquired WonderTwin AI, a provider of an emulator of software-as-a-service (SaaS) applications that is used to build custom applications for those platforms. Colin Neagle, vice president ...
Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence
Tom Smith | | AI security, critical patch updates, enterprise applications, enterprise Java, FIPS 140-3, harvest now decrypt later, Helidon 27, Java 27, Java security, JavaFX 27, JDK 11, JDK 17, JDK 21, JDK 25, JDK 27, JDK 8, ML-KEM, OpenJDK, Oracle Java, Oracle Jipher, post-quantum cryptography, quantum security, TLS 1.3, virtual threadsJava 27 strengthens enterprise security with monthly critical patch updates and post-quantum TLS 1.3 support, helping organizations prepare for AI-driven threats and future quantum risks ...
Splunk Preps Second Open Source LLM for Telemetry Data
Splunk is gearing up to make an artificial intelligence (AI) model for analyzing log data available on Hugging Face under an open source license. Additionally, Splunk at its .conf26 conference this week ...
Stop Chasing 100% Test Coverage: Why DevOps Teams Need to Test Smarter, Not More
Adonis Celestine | | AI testing, application security, CI/CD, continuous testing, devops, PRisMA, Product Risk Management, QA, QFD, Quality Assurance, Quality Functional Deployment, Rapid Risk Assessment, regression testing, release management, risk-based testing, RRA, software development, software quality, software testing, test automationEvery software team eventually runs into the same question: How much testing is enough? For years, the default answer has been "more." More automated tests. More regression suites. More environments. More devices ...
Can Rust Improve Real Django API Performance? Testing Django-Bolt Beyond Synthetic Benchmarks
Dmitry Orlyakov | | Actix Web, API benchmarks, API performance, backend development, database performance, devops, Django, Django performance, Django-Bolt, msgspec, PyO3, Python, Python performance, REST APIs, Rust, serialization, web performanceDjango-Bolt uses Rust to accelerate Django request handling, but real-world gains depend on database work, authentication, serialization and where an API actually spends its time ...
StackHawk Delivers Wingman to Fix Vulnerabilities as Developers Write Code
StackHawk this week launched Wingman, an artificial intelligence (AI) tool that makes it possible for application developers to automatically fix vulnerability issues as code is being written. Wingman is designed to install ...
