Editorial Calendar
Enterprise Smart Contracts Have a Cryptography Problem. EY Just Built a Way Around It
The business case for smart contracts is building fast. Major financial institutions are using programmable, code-based agreements to underpin financial workflows, supply chain operations, and tokenization initiatives. Developers are being asked to ...
IBM and Red Hat Launch Lightwell Catalog to Automate Remediation
IBM and Red Hat this week revealed that Lightwell Network, a catalog of more than 6,500 application-layer dependencies that drives an automated vulnerability remediation service, is now generally available. At the same ...
GhostApproval Flaw Featuring Decades-Old Feature Found in Six AI Coding Tools
Jeff Burt | | Adversa AI, AI coding agents, AI security risks, Amazon Q Developer, Anthropic Claude Code, Augment, CodeSignal, Cursor, GhostApproval, Google Antigravity, human in the loop coding, OpenAI Codex, SSH keys, symlinks, Unix, Windsurf, WizA security flaw found in six popular AI coding agents can let attackers abuse a decades-old feature in Unix to trick an AI agent into giving them control of a developer’s system ...
North Korea Expands the Reach of PolinRider Supply Chain Attack Campaign
Jeff Burt | | AI supply chain attacks, APT37, Chrome Store, Contagious Interview, devops, devsecops, Famous Chollima, Go modules, Lazarus Group, malicious npm packages, North Korea, package registry malware, Packagist, PolinRider, Rescana, Socket, supply chainThe North Korean-sponsored threat groups behind the long-running fake interview scams targeting developers are expanding the PolinRider supply chain campaign that has escalated over the past several months. Reports from cybersecurity vendors ...
‘GitLost’ Flaw Lets Attackers Trick GitHub AI Agent Into Leaking Private Repos
Jeff Burt | | Acalvio, agentic AI guardrails, AI security, Anthropic Claude, Forcepoint, GitHub Agentic Workflows, indirect prompt injection, LLM, Markdown, Microsoft Copilot, Noma Security, private repository, public repositoryNoma researchers again show how easy it is to manipulate AI agents with malicious commands via indirect prompt injection attacks ...
How AI is revamping DevSecOps processes
Umashankar Kotturu | | AI DevSecOps, CI/CD, devsecops, policy as code, security automation, Software Supply ChainArtificial Intelligence is pushing DevSecOps into a new phase where security is no longer just about detecting vulnerabilities, but increasingly about resolving them automatically within the flow of software delivery. As many ...
Block Details Builderbot Framework for Orchestrating AI Agents Across SDLC
The software engineers at Block have developed an orchestration layer they are using to manage artificial intelligence (AI) agents that have been trained to automate multiple tasks across their software development lifecycle ...
How Independent Service Deployments Expose the Limits of Conventional Regression Testing Tools
The architectural shift to independently deployable services was supposed to make software delivery faster and less risky. In many aspects, it has. Teams can ship a change to one service without coordinating ...
When AI Agents Get Production Access: The Next Big DevOps Risk
Sannan Ali | | AI agents, autonomous operations, devops, infrastructure automation, platform engineering, Production OperationsIt wasn’t that long ago that AI assistants just watched from the sidelines. They could answer your questions, explain how things worked, sum up logs, and write deployment scripts. Handy, sure, but ...
Lightrun Adds Ability to Assess Impact Pull Request Will Have in Production
Lightrun is providing early access to an ability to verify whether a pull request (PR) will actually run in a production environment as part of its artificial intelligence (AI) platform for automating ...
Mozilla Shows the Danger of Indirect Prompt Injections in AI Coding Agents
Jeff Burt | | AI coding agents, AI security risks, Anthropic Claude Code, Developer Security, exposed credentials, exposed secrets, Futurum Group, indirect prompt injection, leaked API keys, Mozilla 0DIN, shell scriptsA clean GitHub repository that contains no malicious code can launch an attack and fully compromise a developer’s systems by using indirect prompt injections to trick AI-powered coding agents like Anthropic’s Claude ...
Harness Adds Autonomous AI Agents to Automate DevOps Workflows
Harness today is providing DevOps teams with an ability to build and deploy autonomous artificial intelligence (AI) agents that automate the delivery of code to production environments. Trevor Stuart, a senior vice ...
