Doin’ DevOps
AWS CodeBuild Webhook Misconfiguration Exposed Admin Access Risk
Tom Smith | | AWS CodeBuild, AWS open source, build pipeline security, CI/CD security, devops security, GitHub security, regex security, Software Supply Chain, webhook misconfiguration, Wiz ResearchAWS fixed webhook filter misconfigurations in CodeBuild that could have allowed unauthorized repository access. No customer impact or malicious code found ...
DevOps: The Never-Ending Story
Alan Shimel | | AI and DevOps, devops culture, devops evolution, DevOps tooling, engineering collaboration, is DevOps dead, modern DevOps practices, platform engineering and DevOps, SRE and DevOpsA reflective take from Alan on why DevOps endures, adapts, and remains a human-centered practice in an era of platforms and AI ...
Patch or Perish: The Brutal Truth About Vulnerability Management in 2025
Samuel Ogbonna | | Active Risk AI, AI-powered VM, attack surface management, breach costs, Cisco VM, continuous monitoring, CVEs 2025, cybersecurity best practices, delayed patching, exploit prediction, IBM data breach report, Kenna Security, machine learning risk scoring, patch management, predictive prioritization, Rapid7, remediation automation, risk-based prioritization, Tenable, threat-aware prioritization, unpatched vulnerabilities, Vulcan Cyber, vulnerability management, vulnerability scanningVulnerability management in 2025 is overwhelmed by escalating CVEs and costly breaches; organizations must shift from slow, manual patching to continuous, risk-based, AI-powered remediation to stay secure ...
What I’m Thankful for in DevOps This Year: Living Through Interesting Times
Alan Shimel | | agentic AI, AI in DevOps, automation in DevOps, burnout in engineering, complexity in DevOps, compliance challenges, developer experience, devops, devops culture, DevOps gratitude, DevOps inclusivity, devsecops, generative AI, hybrid work, incident response, innovation pace, internal developer platforms, machine learning workflows, open source community, platform engineering, regulatory landscape, Remote DevOps, SBoM, secure supply chain, security by design, security theater, self-service pipelines, shift left security, talent crunch, tech layoffs, Tool SprawlAlan reflects on a chaotic yet inspiring year in DevOps, highlighting the rise of AI in engineering, the maturation of DevSecOps, the evolution of hybrid work culture, the surge of platform engineering ...
How to Build Engineering Teams That Drive Outcomes, not Outputs
Catherine McGarvey | | customer and business outcomes, devops, Engineering best practices, engineering silos, outcome-based teams, Product and designOutcome-based engineering teams focus on delivering real customer and business impact, aligning goals, adapting quickly, and collaborating across roles to drive results ...
Modular & Shift-Left Observability for Modern DevOps Pipelines
Shift-left observability makes monitoring a modular, built-in part of DevOps—improving reliability, cost efficiency, and visibility across modern cloud-native systems ...
The Hidden Cost of “Free” Open Source Infrastructure
John Amaral | | accountability, Modern container security, modern software development, Open Infrastructure, Sustainable stewardship, transparencyWhen the OpenSSF, PyPI, Rust Foundation, and OpenJS recently declared that "Open Infrastructure Is Not Free," they highlighted a crisis that affects every organization building modern software. Behind every container image pulled, every vulnerability scan and every automated ...
Why AI Integration in DevOps is so Important
Andrej Kovacevic | | AI cybersecurity tools, AI DevSecOps, AI in DevOps security, AI pipeline monitoring, AI threat detection, AI-powered code analysis, automated vulnerability scanning, behavioral threat analysis, CI/CD security automation, DevOps anomaly detection, machine learning security, malware detection AI, predictive security analytics, real-time DevOps protection, secure DevOps pipelinesAI is transforming DevOps security with real-time threat detection, automated scanning and predictive analytics. Learn how AI strengthens CI/CD pipelines and protects modern software delivery ...
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Survey Sees AI Coding Creating Need for More Software Engineers
Mike Vizard | | agentic AI, AI compliance challenges, AI in DevOps, AI in software development, AI tools adoption, AI-generated code vulnerabilities, developer upskilling, DevOps productivity, DevSecOps challenges, GitLab DevSecOps survey, platform engineering, SDLC automation, software engineer demand, technical debt from AI, vibecoding risksA GitLab survey of 3,266 DevSecOps professionals shows AI is boosting code creation but increasing the need for skilled engineers, compliance challenges and human oversight ...
DevOps Workflow: The Key Elements and Tools Involved
Peter Baker | | agile methodology, Automated testing, automation tools, CI/CD, collaboration tools, continuous delivery, continuous improvement, continuous integration, devops best practices, devops culture, DevOps workflow, devsecops, feedback loops, GitHub Actions, GitLab CI, IaC, infrastructure as code, IT operations, logging, Microsoft Teams, monitoring, observability, Quality Assurance, software developmentWhat does a modern DevOps workflow look like? Click to learn about the essential elements, tools, and practices involved in the effective work process. ...
Coding Agent Teams: The Next Frontier in AI-Assisted Software Development
Derek Ashmore | | agent-based programming, agentic AI, AI code generation, AI coding agents, AI developer tools, AI development frameworks, AI DevOps, AI in software engineering, AI pair programming, AI programming teams, AI-assisted software development, AutoGen, autonomous coding agents, Claudeflow, coding agent frameworks, coding automation, collaborative AI agents, CrewAI, developer productivity, generative AI for developers, intelligent coding assistants, MetaGPT, multi-agent AI teams, multi-agent orchestration, OpenCode, software development automationDevelopers are moving beyond single AI coding assistants to teams of specialized agents, boosting speed, scalability, and collaboration in software development ...
