Spacelift Intelligence Vibe-Codes Infrastructure
Whether the DevOps shops like it or not, they are feeling the pressure from AI. They’re expected to move more quickly, alongside their dev counterparts. The gruntwork that used to take weeks can be automated away, leaving time for fast prototyping, so the managers think. According to Google Cloud’s 2025 DORA State of AI-assisted Software […]
Komodor Extends Reach of AI SRE Orchestration Framework
Komodor today extended the reach of its orchestration framework for artificial intelligence (AI) agents by adding support for Model Context Protocol (MCP) servers and the OpenAPI specification. Company CTO Itiel Shwartz said those capabilities will make it possible for IT teams to more broadly orchestrate AI agents that are being used to investigate and remediate […]
Report: Lower Performing Software Engineering Teams Benefit More from AI
An analysis of 2,000 organizations worldwide finds that historically lower performing software engineering teams are seeing nearly a 50% improvement in lead time to delivery, a four times greater rate of improvement over higher performing teams that have adopted AI coding tools. Conducted by Plandek, a provider of a developer productivity intelligence platform, the report […]
Why AI-Generated Code Is Raising the Stakes for Secrets Management
Following a $50 million funding round, GitGuardian CEO Eric Fourrier discusses why secrets security is becoming a much bigger problem in the age of AI-generated code and autonomous agents. As more organizations rush to deploy coding assistants and AI agents, Fourrier argues that the number of exposed credentials, API keys and tokens is rising just […]
Survey Sees DevOps Workflows Evolving in the Age of AI
A global survey of 820 IT decision makers and DevOps practitioners finds that half of respondents (53%) report that developers in the age of artificial intelligence (AI) are now authoring more tests directly. Conducted by Perforce, that shift also appears to be enabling a similar percentage of organizations (55%) to provide quality assurance (QA) teams […]
Codenotary Previews AI Platform to Autonomously Detect and Remediate IT Issues
Codenotary is previewing a software-as–a-service (SaaS) platform that enables artificial intelligence (AI) agents it has developed to autonomously detect, prioritize, and fix security, configuration, and performance issues. Company CEO Moshe Bar said the Codenotary Trust platform also enables continuous vulnerability tracking at both the Linux operating system and application level. Once an issue is detected, […]
Sonar Unfurls Framework for Managing DevOps Workflows in the Age of AI
Sonar this week launched an Agent Centric Development Cycle (AC/DC) framework that promises to modernize continuous integration (CI) in the age of artificial intelligence (AI) coding. Announced at an online Sonar Summit, the AC/DC framework incorporates multiple tools and platforms the company has developed to better secure software supply chains, including now in beta Sonar […]
When AI Gets It Wrong: The Insecure Defaults Lurking in Your Code
The arrival of generative AI in the software development lifecycle (SDLC) is arguably the biggest shift in coding in decades. For development teams, tools like GitHub, Copilot, and other AI assistants act as a massive force multiplier, automating boilerplate, suggesting complex logic, and significantly accelerating time-to-commit. But as organizations rush to equip their teams, a […]
Microsoft Executives Warn AI Could Limit the Developer Talent Pipeline
Generative AI is transforming software development at remarkable speed. But in a new paper written by two Microsoft executives, Azure CTO Mark Russinovich and Scott Hanselman, VP of the developer community, argue that the AI technology also risks eroding the profession’s training pipeline. In their paper, Redefining the Software Engineering Profession for AI, published in […]
AI-Fueled Development Pushes Open-Source Risk to Extremes: Report
Artificial intelligence has shortened the timeline for software development from months to days. But according to new research, that acceleration is creating significant risks for security and compliance issues. Black Duck’s 2026 Open Source Security and Risk Analysis (OSSRA), based on audits of 947 commercial codebases spanning 17 industries, shows that vulnerabilities inside enterprise applications […]
Malicious NPM Package Gets Downloaded 50K Times Before Discovery
A malicious package downloaded approximately 50,000 times from a node package manager (npm) is providing an object lesson for adopting more DevSecOps best practices. Security researchers from Tenable discovered a “ambar-src” package that was first published Feb. 13 and then updated again before being discovered. It is aimed at developers building JavaScript applications on Windows, […]
AWS Extends Agentic AI Capabilities of Kiro Developer Tool to Improve Code Quality
Amazon Web Services (AWS) has added two additional capabilities to its Kiro artificial intelligence (AI) coding tool that promise to make it simpler to both create higher quality software in the first place and fix any bugs that might have inadvertently been included. At the core of that capability is a specifications-based approach to enabling […]
Survey: Adoption of AI Software Testing Slowed by Trust Issues
A new global survey from Leapwork underscores a growing tension in software development: while AI is widely viewed as essential to the future of testing, many teams remain hesitant to rely on it for mission-critical workflows. Based on responses from more than 300 engineers and IT decision-makers, the research indicates that enthusiasm for AI-enabled testing is high. […]
GitHub Tests AI Agents to Handle Repository Upkeep
GitHub is introducing a new approach to streamline developer workflow, offering AI agents that can shoulder the repetitive tasks that accumulate inside code repositories. Known as Agentic Workflows, the feature is available in technical preview and is designed to embed AI into GitHub Actions as an integrated part of the production process. GitHub promotes Agentic […]
Cline CLI 2.0 Turns Your Terminal Into an AI Agent Control Plane
Cline CLI 2.0 brings full AI coding agents to the terminal with parallel execution, headless CI/CD mode, and ACP editor support. Open source, any model.
Prompt Injection Isn’t Just a Chat Problem — It’s a DevOps Threat
Prompt injection is evolving into a serious DevOps threat, enabling AI agents to misuse tools, leak secrets and execute unauthorized actions unless governed with least privilege, sandboxing and human approval.
Bridging the Dev–Security Gap With Smarter Authorization
Software teams have always lived with a built-in tension – developers push to ship fast, while security teams pump the brakes to assess risk. Now, with AI flooding the enterprise, that friction is spiking. One recent survey found a staggering 322% jump in privilege-escalation risks tied to AI-generated code. The root problem isn’t new – […]
CodeHunter API Integrates Deterministic AI Models into DevSecOps Workflows
CodeHunter, a provider of behavioral malware analysis and threat intelligence tools, today announced it is making available an application programming interface (API) to make it simpler to embed the capabilities it provides within a DevSecOps workflow. At its core, CodeHunter makes use of a set of deterministic AI models that it has developed to analyze […]
How AI Helps Teams Track Dependencies and Reduce Delivery Risk
AI is showing up everywhere in software delivery, but project management is where a lot of the real friction lives. Newly appointed Planview CEO Matt Zilli talks through why planning and delivery still break down inside modern organizations, even when teams have more data and more tools than ever. Zilli’s point is simple: the problem […]
CodeRabbit Adds DevOps Planning and Review Tool for AI Prompts
CodeRabbit today made available in beta a planning tool that enables DevOps teams to determine which artificial intelligence (AI) prompts to create and review before embedding them within their workflows. David Loker, vice president of AI for CodeRabbit, said CodeRabbit Issue Planner will enable DevOps teams to collaboratively apply AI to workflows versus relying on […]
Salesforce Freezes Heroku Feature Development, Signals Long-Term Shift
Salesforce has confirmed it is stepping back from active development of Heroku, creating a turning point for one of the cloud industry’s most influential platform-as-a-service offerings. While the company insists the service remains fully supported, the decision to halt new feature development and stop selling enterprise contracts to new customers indicates a broader strategic shift […]
Veracode Extends Package Firewall Reach to Microsoft Artifacts
Veracode has extended the reach of a Package Firewall that applies policies that limit what types of code can be downloaded from a repository to Azure Artifacts from Microsoft. Additionally, DevSecOps teams can now define custom policies based on package risk profiles, vulnerability thresholds, or a specific security requirement their organization has adopted. Tim Jarrett, […]
How AI Is Expanding Who Gets to Build Infrastructure
Pavlo Baron, co-founder and CEO of Platform Engineering Labs, unpacks what’s changing in platform engineering as AI reshapes who gets to build, and how infrastructure actually gets managed. Baron traces the origin story back to his time building high-scale systems at Instana (which exited to IBM in 2020), where the reality of “always-on” platforms made […]