FakeGit Targets AI Coding Agents with Malicious GitHub Repos
Threat actors continue to find new ways to incorporate AI into schemes aimed at luring developers into downloading malware from fake repositories. The latest example involves almost 7,600 malicious GitHub repositories that are being used to distribute a loader and an information-stealer. The FakeGit campaign is nothing new, with Oleg Zaytsev, lead security researcher with […]
Survey Surfaces Significant Levels of IDP Investment to Reduce SDLC Friction
A survey of 954 IT decision-makers suggests more resources are now being allocated to reducing friction across the software development lifecycle (SDLC). Conducted by CDW, the survey finds more than two-thirds of respondents (68%) report their organization has adopted an internal developer platform (IDP). The primary goal is to improve operational efficiency (57%), provide better […]
Reimagining AI-Assisted Coding for Team Scale in Enterprises
AI coding tools have advanced rapidly, but most are still designed around the individual developer. Their effectiveness depends heavily on a user’s ability to write understandable prompts, preserve architectural coherence across sessions, and identify areas that require additional work. This model works for some engineers, but it is far less dependable for a large organization’s […]
VibeCode Meets DevOps: Accelerating Low-Code Innovation
AI-assisted low-code tools like VibeCode speed app development, but DevOps teams must ensure security, quality and CI/CD integration.
Free Tiers and Open Source LLMs – Mana for Developers, Platform Engineers and QA
Development rarely follows one straight path. You sketch ideas, prototype, test, swap tools, iterate, and repeat. The increasing availability of free, limited-use AI tiers and locally run open-source AI LLMs is accelerating that loop. These tiers are not marketing fluff. They are practical on-ramps for developers and engineers. They offer the freedom to test, compare, […]
AI as the Architect’s Muse: Redefining Software Design in the Age of Intelligence
Software architecture is no longer a static artifact — it’s a dynamic, living thing, shaped by AI’s relentless curiosity and our own audacity.
Building Complex Software at Scale with Tameem Hourani
RapDev founder Tameem Hourani dives into what it really takes for software engineering teams to develop and deploy complex software at scale. Hourani talks about the challenges of maintaining a blameless culture in DevOps, even as software complexity continues to grow. The discussion explores how teams can strike a balance between rapid innovation and system […]
Coding AIs in Large-Scale Software Engineering with Scott Dietzen
Scott Dietzen, CEO of Augment Code, discusses how artificial intelligence (AI) is reshaping large-scale software engineering. He shares his background in machine learning and his experience working with massive, complex codebases, highlighting the challenges engineers face when maintaining and updating them. Then he explains how AI can help developers navigate these challenges by understanding […]
CISA: Critical Jenkins Flaw Exploited in Ransomware Attacks
The security vulnerability in the popular open-source development tool helps threat actors gain initial access into victims’ systems.
CloudBees Acquires Launchable to Advance Testing Using AI
CloudBees today revealed it has acquired Launchable, a provider of a test automation platform, to enable DevOps teams to improve both application security and software quality. Financial terms of the acquisition are not being disclosed.
Why DevOps is Key to Software Supply Chain Security
Organizations can maintain their DevOps momentum while protecting the software supply chain by shifting security left.
Application Modernization: A Catalyst for Fixing Sub-Optimal UX
Efforts to improve legacy systems allow both public and private organizations to operate more efficiently and improve UX.
The Future of Continuous Testing in CI/CD
If you ever wonder why continuous testing is so important, think about the following: In the past, software testing was typically done after the code was written and sent to the QA department for independent testing. When bugs were discovered, the code was returned to the developers for correction. While this testing method worked, it […]
How GitHub Actions Simplifies Your CI/CD Workflow
In today’s fast-paced world, being able to deploy applications quickly is essential for success. However, setting up a CI/CD pipeline can be a tedious and time-consuming task. Fortunately, GitHub Actions can help simplify and automate your workflow, making it easier than ever to get your applications up and running in no time. In this blog […]
Software Quality is the Heartbeat of the Best Organizations
JPMorgan recently announced it was hiring 2,000 engineers, despite the gloom in global economic markets. Is this not an odd risk for an organization to take, given the demand for (and cost of) software developers today? What’s happened? JPMorgan’s hiring drive is no mystery. Virtually every company in the world is leveraging software, with many […]
Business Leaders Will Trade Speed for Security
A global survey of 600 C-level executives conducted by CloudBees found that when it comes to building software, more than three-quarters of respondents said it is more important to be secure and compliant than fast and compliant. As a result, more than three-quarters (77%) also noted their organization is implementing a shift left strategy for […]
CloudBees Acquires ReleaseIQ to Advance DevOps Orchestration
CloudBees announced today it has acquired ReleaseIQ, a provider of an orchestration platform for automating software delivery via a software-as-a-service (SaaS) platform. Sacha Labourey, chief strategy officer for CloudBees, said the addition of ReleaseIQ to the CloudBees platform will provide more visibility into and control over software delivery on an end-to-end basis. CloudBees already provides […]
DevOps World 2022: A DevOps Retrospective
With the seminal IT conference DevOps World 2022 in Orlando September 26 to September 29 upon us, I think about the pivotal industry conferences and events critical to my path to the cloud, DevOps and cloud-native. It brings me to this brief retrospective, highlighting some of the most significant influences that still guide my path […]
What a Dev Wants: Security Training for Today’s Developer Workforce
It’s no secret that developing a strong security culture is a critical component of the production of secure products, yet organizations often overlook the fact that their security training programs set the foundation on which this culture is built. When it comes to developer training, our goal should be to align the intrinsic motivations of […]
DevOps World 2022: DevOps is Not Just CI/CD
There was a time when pundits said that DevOps was the symptom and CI/CD the cure. While that may or may not be true, there is no denying that CI/CD is the very heart of DevOps. While that might still be true, DevOps today is so much more than CI/CD; it has evolved, far beyond […]
DevOps World 2022: DevOps Tail Wags the Dog of Digital Business
As a methodology for building and deploying applications faster, DevOps has been around for more than a decade. But it’s only now that the methodologies and concepts pioneered years ago are starting to wag the dog of digital business transformation. Since the onset of the COVID-19 pandemic, digital business transformation has been all the rage. […]
DevOps World 2022: Developer and Security Links Protect Your Supply Chain
Ever since the SolarWinds attack back in December 2020, software supply chain attacks have been top-of-mind for any company that builds software. The idea of endangering not just your organization by being attacked but also your customers really sharpens your focus. Another complicating factor is that applications use a combination of open software components and […]
DevOps World 2022: Using SBOMs to Secure the Software Supply Chain
As supply chain attacks become increasingly prevalent, visibility is emerging as a necessity in cybersecurity. One way to improve visibility and secure your software supply chain is with a software bill of materials (SBOM). An SBOM is a list of all the components within a codebase. By providing insight into open source and third-party components, […]
Showing the 24 most recent articles. Additional archive pages are not yet available.