Tag

devops security

38 articles

Latest in devops security

Blogs

GitHub Puts a Firewall Between npm and Your CI Runners

GitHub’s new package firewall puts enterprise security policies between npm registries and the developers, CI runners and AI coding agents consuming packages. With malware detection, attestation checks and package-age restrictions…

Oct 21, 20263 min

All devops security Articles

Showing 1–24 of 38

Sep25

Blogs

DevSecOps Teams as Partners in Secure Software Delivery

DevSecOps teams can reduce last-minute release delays by shifting security decisions earlier, improving guardrails, clarifying ownership and making findings actionable.

3 min

Sep18

Blogs

Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface

CI/CD pipelines often hold privileged credentials, execute third-party code and connect directly to production, making pipeline security one of the most overlooked risks in modern…

3 min

Sep14

Blogs

GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing

GitLab patches two critical flaws, including a CVSS 10.0 unauthenticated file-read vulnerability, putting self-managed instances under urgent pressure to upgrade.

3 min

Aug31

A Simple Website Summary Just Exposed the Limits of AI Coding Guardrails

Claude Code’s Auto Mode was bypassed in an attack chain that turned a routine webpage summary into remote code execution, highlighting the limits of AI agent guardrails.

3 min

Aug21

Blogs

Why Cryptographic Inventory Is the First Step Toward Quantum Readiness

Post-quantum readiness starts with visibility. DevOps teams need a continuous cryptographic inventory to map algorithms, keys, certificates, libraries, infrastructure and third-par…

3 min

Jul27

Blogs

GitHub and PyPI Bet On Time to Slow Down Software Supply Chain Attacks

GitHub and PyPI are using time as a security control, delaying dependency updates and locking older releases against new file uploads.

3 min

Jul24

AI Agents Are Writing Your Infrastructure Code. Is Anyone Governing It?

AI agents now generate infrastructure code at scale, but security pass rates are stuck at 55%. Here’s how teams can close the governance gap.

3 min

Jul20

xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos

xAI has published the full source code for Grok Build, its terminal-based AI coding agent, on GitHub under an Apache 2.0 license. The release lands three days after a security rese…

3 min

Jun05

Agentic DevSecOps: AI Security Co-Pilots for Your CI/CD Pipeline

The emergence of AI has brought endless possibilities and innovative opportunities in today’s ever-changing, fast-paced technology landscape. AI is helping development teams produc…

3 min

Apr29

Blogs

Cyber Threats to DevOps Platforms Rising Fast, GitProtect Report Finds

The number of incidents targeting DevOps platforms grew 21% in 2025, but the amount of downtime jumped almost 95%, the security firm said.

3 min

Apr01

GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents

GitHub’s March 2026 updates introduce secret scanning for AI agents via MCP, 37 new detectors, and expanded push protection. Learn how to secure AI-generated code.

3 min

Jan29

Blogs

AWS CodeBuild Webhook Misconfiguration Exposed Admin Access Risk

AWS fixed webhook filter misconfigurations in CodeBuild that could have allowed unauthorized repository access. No customer impact or malicious code found.

3 min

Oct30

Blogs

How to Integrate Quantum-Safe Security into Your DevOps Workflow

The rapid pace at which quantum computing is evolving is unprecedented, which is both good and bad news. While quantum computers can help solve complex problems at unimaginable spe…

3 min

Oct27

Blogs

Patch Management is Essential for Securing DevOps

Zero-day exploits don’t wait for anyone and are one of the main reasons why the cybersecurity market will be worth a whopping $256 billion worldwide. In the current threat landscap…

3 min

Oct13

Blogs

Git Services Need Better Security. Here’s How End-to-End Encryption Could Help

A new study from the University of Sydney, UESTC, and Google introduces efficient end-to-end encryption for Git services like GitHub and GitLab. Learn how this breakthrough could s…

3 min

Oct01

Blogs

Worms in the Supply Chain: Shai-Hulud and the Next DevOps Reckoning

DevOps was supposed to make software delivery faster, safer and more reliable. For the most part, it has. But every so often, something nasty crawls out of the shadows and reminds…

3 min

Sep22

Blogs

The DevSecOps Career Path: What No One Tells You About Getting Started

DevOps teams across organizations are suddenly finding themselves responsible for security with no roadmap. One day, teams are focused on deployment velocity and infrastructure aut…

3 min

Oct02

Blogs

Elevating DevOps Security: Why Integrating Threat Modeling Transforms Pentesting

Do not stop at compliance — embrace threat-driven pentesting and build a security posture that is ready for the real-world threats your organization faces.

3 min

Jan25

Blogs

5 Security Threats DevOps Teams Should Know

DevOps security (DevSecOps) is about breaking down silos and promoting open collaboration across teams.

3 min

Apr07

Blogs

A DevOps Guide to the Language of DevSecOps

Security is increasingly important for DevOps due to the growing complexity of applications and the accelerated pace of development. As organizations adopt DevOps practices, they f…

3 min

Apr06

Blogs

Security Debt: Speed vs. Common Sense

A couple years ago, we had some spectacular security events that involved DevOps and Kubernetes, where the managing team simply redeployed containers whenever one crashed. It turne…

3 min

Mar23

Blogs

Securing APIs at the Speed of DevOps

In the 2021 State of DevOps Report, 83% of IT decision-makers told Puppet that their organizations were in the process of implementing DevOps practices to improve the quality of th…

3 min

Apr21

Blogs

DevOps Chat: Maximizing the Benefits of DevSecOps

When discussing security in DevOps, we often focus on the security tools instead of the DevSecOps process itself. In this DevOps Chat, ZeroNorth CEO John Worrall takes us to the ro…

3 min