Features
AWS Extends DevSecOps Reach to AI Coding Tools from Anthropic and OpenAI
Amazon Web Services (AWS) this week at the Black Hat USA conference revealed it is working with both Anthropic and OpenAI to integrate their respective coding tools with a service it has ...
AWS Adds Agentic Workspace to Kiro AI Coding Tool
Amazon Web Services (AWS) this week added an open source workspace for its Kiro artificial intelligence (AI) coding tool that enables application developers to asynchronously assign tasks to an AI agent that ...
RapidFort Extends Open Source Software Security Reach to Runtime Environments
RapidFort today at the Black Hat USA conference announced it has extended its ability to secure open source software to the runtimes that DevOps teams deploy in production environments. Michael Wood, chief ...
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Jeff Burt | | Aikido Security, AWS, credential theft, GitHub Actions, HashiCorp Terraform, npm malware, Shai-Hulud worm, supply chain attackResearchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ...
N. Korea Group Behind Multiple Open Source Supply-Chain Attacks: Amazon
Jeff Burt | | Amazon, Axios, chalk package, Contagious Interview, generative AI, google, malicious npm packages, microsoft, North Korea, open source libraries, software supply chain attacks, typo-crypto, WizAmazon’s recent report attributing a series of compromises of open source software libraries to a North Korea-backed threat group encapsulates many of the expanding cyber risks increasingly facing developers, from the growing ...
Ten Great DevOps Job Opportunities
staging-devopsy.kinsta.cloud is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Microsoft Confirms Copilot ‘Super App’ Is Coming This Year — and It’s About More Than Convenience
Tom Smith | | Agent 365, agent sprawl, AI agents, AI identity management, autonomous agents, Copilot Chat, Copilot Code, Copilot consolidation, Copilot Cowork, enterprise AI governance, GitHub Copilot, Microsoft 365 Copilot, Microsoft Autopilots, Microsoft Copilot super app, Microsoft Entra Agent ID, One CopilotMicrosoft is combining Copilot Chat, Code, Cowork and Autopilots into one super app, raising new questions about agent governance, identity, licensing and security ...
JetBrains Open-Sources KotlinLLM, a Research Prototype for Runtime Code Generation
Tom Smith | | agentic AI, AI coding tools, Apache License 2.0, asLlm, generative AI, IntelliJ IDEA plugin, JetBrains Research, Kotlin, Kotlin/JVM, KotlinLLM, LLM-generated code, mockLlm, persistent code generation, reviewable AI code, runtime code generation, Smart macros, software development, statically typed programmingJetBrains open-sources KotlinLLM, letting compiled Kotlin apps generate and persist LLM-written code at runtime instead of calling a model live ...
GitHub Brings Stacked Pull Requests Out of the Shadows
Tom Smith | | AI coding agents, branch protection, code quality, code review, continuous integration, developer productivity, DevOps workflows, gh-stack, GitHub Copilot, GitHub public preview, GitHub stacked pull requests, merge queues, pull request size, software engineering, Stacked PRsGitHub introduces native stacked pull requests, helping development teams break large changes into smaller, dependency-ordered PRs that are faster and easier to review ...
Open Source Code Just as Secure as Proprietary Software—If You Manage It Right, Says CISA
Joab Jackson | | AI security, CISA, federal government, open source software, Software Supply Chain, vulnerability managementOpen source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures to secure it properly, according to a new guide published by the ...
CISA’s 2026 SBOM Guidance Adds Hash Requirements and AI Coverage
Tom Smith | | AI supply chain security, CISA, CISA SBOM 2026, CMMC, component hashes, component licensing, continuous SBOM validation, CycloneDX, FBI, FedRAMP, NSA, open source security, SaaS security, SBOM automation, SBOM minimum elements, software bill of materials, software procurement, Software Supply Chain Security, software transparency, SPDX, vendor risk managementCISA’s updated 2026 SBOM minimum elements expand software transparency requirements to AI, SaaS and open source while adding hashes, licenses and stronger validation ...
Tricentis Acquires Tabnine to Gain Knowledge Graph for AI Testing Agents
Tricentis today revealed it is acquiring Tabnine to gain access to a knowledge graph that will be used to provide context to AI agents that have been trained to automate a range ...
