Cyber Threats to DevOps Platforms Rising Fast, GitProtect Report Finds
The number of incidents targeting DevOps platforms grew 21% in 2025, but the amount of downtime jumped almost 95%, the security firm said.
From Code to Cloud: How Full-Stack Developers are Taking Over DevOps
Full-stack developers are taking on DevOps, using CI/CD, Docker and Terraform to own the software lifecycle from code to cloud.
FinOps Isn’t Slowing You Down — It’s Fixing Your Pipeline
Stop firefighting cloud costs weeks after deployment. Learn how to “shift cost left” by integrating cost estimates and policy-as-code directly into your DevOps workflows using tools like Terraform and GitHub.
CloudBees Delivers on AI Promise to Improve Application Testing
CloudBees has made generally available an add-on for continuous integration/continuous deployment (CI/CD) platforms that uses artificial intelligence (AI) to determine which tests should be run first based on the likelihood there will be a failure. Shawn Ahmed, chief product officer at CloudBees, said CloudBees Smart Tests eliminates the need to run an entire testbed. Instead, […]
VibeCode Meets DevOps: Accelerating Low-Code Innovation
AI-assisted low-code tools like VibeCode speed app development, but DevOps teams must ensure security, quality and CI/CD integration.
If it Isn’t Code, it’s Just Advice
In the world of AI coding, success hinges on code-native solutions that integrate and verify changes directly in the codebase. Many AI tools fail by relying on external dashboards, lacking the reproducibility and testability that code provides. To truly harness AI, solutions must automate and validate changes within the existing code ecosystem, ensuring reliability and efficiency.
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
The threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large “blast radius.”
Iceberg Won the Format War — Now Comes the Hard Part
Apache Iceberg has effectively won the open table format conversation. AWS, Google Cloud, Microsoft, Snowflake, Databricks — every major platform has thrown its weight behind it. If you work in data engineering or platform operations, the question is no longer whether Iceberg is the right foundation. It’s what it actually takes to run it day […]
Tekton Kubernetes-Native CI/CD Project Reaches CNCF Incubation
The CNCF TOC has voted to accept Tekton as an incubating project. As a Kubernetes-native framework for CI/CD, Tekton enables developers to build, test, and deploy across clouds by treating pipelines as standard K8s resources. Originally part of Knative, it now offers a modular ecosystem including Triggers and Chains for supply chain security, integrating deeply with Argo CD and Sigstore.
Harness Extends AI Security Reach Across Entire DevOps Workflow
Harness today added an ability to automatically secure code as it is being written by an artificial intelligence (AI) coding tool in addition to adding a module to its DevOps platform that discovers, tests, and protects AI components within applications. Secure AI Coding is an extension of the static application security testing (SAST) and software […]
Survey Sees DevOps Workflows Evolving in the Age of AI
A global survey of 820 IT decision makers and DevOps practitioners finds that half of respondents (53%) report that developers in the age of artificial intelligence (AI) are now authoring more tests directly. Conducted by Perforce, that shift also appears to be enabling a similar percentage of organizations (55%) to provide quality assurance (QA) teams […]
Google ADK Opens the Door to AI Agents That Work Inside Your DevOps Toolchain
Google ADK adds integrations for GitHub, GitLab, Jira, MongoDB, and seven observability tools. AI agents can now work inside your DevOps toolchain.
How OPA Changed Our Go-No-Go Forever
Learn how Open Policy Agent (OPA) transformed go/no-go releases from subjective meetings into automated, auditable, policy-driven decisions embedded directly in the CI/CD pipeline.
The AI Productivity Paradox: How Developer Throughput Can Stall
Software engineering leaders have invested heavily in generative AI coding assistants for over two years—and for good reason. For many teams, the productivity gains appear significant. I hear the same story in conversations with leadership at dozens of enterprises: thanks to AI, developers complete tasks faster, write more code, and spend less time on boilerplate […]
Test Automation Strategy for Growing Software Teams
Build a scalable test automation strategy that improves release speed, reduces defects, and supports growing software teams.
Anthropic Adds Automated Security Reviews to Claude Code
Anthropic pulls security into the inner dev loop with new Claude Code tools that scan for vulnerabilities in the terminal and on every pull request—before insecure code ever ships.
Importance of Observability in the DevSecOps Pipeline: Enhancing Security, Compliance, and Collaboration
In today’s rapidly developing software world, security cannot be an afterthought. DevSecOps, the integration of security practices into every phase of DevOps, requires continuous monitoring and actionable insights to detect and mitigate threats effectively. Observability plays an essential role in this ecosystem by providing deep visibility into the security posture of the development process, enabling […]
Best of 2025: GitLab Extends Scope and Reach of Core CI/CD Platform
GitLab Inc. has updated its core continuous integration/continuous delivery (CI/CD) platform to natively provide more artificial intelligence (AI) capabilities, along with built-in software artifact management capabilities and more robust security tools.
Best of 2025: CloudBees Moves to Unify Management of Multiple DevOps Platforms
CloudBees today launched a software-as-a-service (SaaS) platform for centralizing the management of multiple DevOps environments, including GitHub, GitLab and the open source Jenkins continuous integration/continuous delivery (CI/CD) platforms.
Best of 2025: AI-Powered DevOps: Transforming CI/CD Pipelines for Intelligent Automation
DevOps practices are the core of contemporary organizational activities. Integrating artificial intelligence (AI) and machine learning (ML) into DevOps practices can transform an organization’s mode of operations. Companies have increased efficiency in developing, testing and deploying software with this integration. Automating repetitive tasks eliminates the need for human supervision while enhancing reliability, scalability and efficiency. […]
Best of 2025: Semaphore Goes Open Source: A New Dawn for DevOps Professionals
A significant shift has occurred in the fast-evolving world of continuous integration and delivery (CI/CD). Semaphore, a leading CI/CD platform, has announced its core platform is officially open source under the Apache 2.0 license. This move represents a pivotal moment for DevOps professionals worldwide, who have long struggled with the limitations of existing solutions. For […]
Malicious VS Code Extensions Take Screenshots, Steal Info
Developers were the targets of two new malicious Microsoft Visual Studio Code (VS Code) extensions created by a threat actor that security researchers believe is experimenting with methods for delivering information-stealing malware to the victims’ systems. The malicious extensions come posing as a harmless “premium dark theme” and an AI-powered coding assistant, but both – […]
It’s Time to Rethink Access Control for Modern Development Environments
As development environments evolve at breakneck speed, our approach to securing them remains stuck in the past. I’ve watched countless organizations implement robust Identity and Access Management (IAM) solutions, deploy Identity Governance and Administration (IGA) tools, and then breathe a collective sigh of relief, believing they’ve solved their access control challenges. But have they? An […]