DevOps.com, Friday, September 18th, 2026
Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface
CI/CD pipelines represent critical security vulnerabilities due to privileged access and automated code execution.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Popular →
All sections ›
Archive
DevOps.com — Archive
269 articles · page 1 of 6
DevOps.com, Friday, September 18th, 2026
IT Outsourcing Versus In-House Development
Strategic outsourcing decisions should prioritize capability and velocity over cost, with hybrid models offering optimal balance.
more → DCIG, Thursday, September 17th, 2026
3 Ways DevOps Backup Protects Organizations From 'Good' Bad Actors
AI agents with legitimate credentials pose data risks requiring independent, immutable backups.
more →
DevOps.com, Wednesday, September 16th, 2026
Why MLOps Pipelines Need Security Audits
SecMLOps applies DevSecOps controls to ML pipelines for auditable security evidence.
more → DevOps.com, Wednesday, September 16th, 2026
The Three Tiers of Agentic Incident Response: When to Trust AI Autonomy
Framework for balancing AI automation with human oversight in incident response through three trust levels.
more → DevOps.com, Wednesday, September 16th, 2026
The Most Dangerous Reliability Failures Aren't Component Failures
System outages can occur when healthy components interact unsafely, not just from individual failures.
more → DevOps.com, Tuesday, September 15th, 2026
Stop Chasing 100% Test Coverage: Why DevOps Teams Need to Test Smarter, Not More
Risk-based testing prioritizes critical failures over exhaustive coverage for better release quality.
more → DevOps.com, Friday, September 11th, 2026
GitHub's August Outages Show Growth Is Outpacing Infrastructure
Five August incidents traced to capacity saturation, retry storms and database bottlenecks as Actions and Copilot usage surged.
more →
DevOps.com, Friday, September 11th, 2026
DevOps' Three Ways Were Never About Tooling
Optimizing the CI/CD pipeline locally can miss the system constraint that Flow, Feedback and Learning were meant to find.
more → DevOps.com, Thursday, September 10th, 2026
Why AI Agents Shouldn't Guess at Vulnerability Exploitability
Determining exploitability needs deterministic graph traversal of the supply chain, not language model inference.
more → DevOps.com, Wednesday, September 9th, 2026
Test Creation Was Never the Bottleneck
AI made code and test generation cheap, but verification and judgment stayed expensive, shifting the delivery bottleneck to review.
more → DevOps.com, Wednesday, September 9th, 2026
AI Has Turned Verification into the New DevOps Bottleneck
AI speeds code generation, but larger pull requests and unchanged pipelines make verification the new DevOps constraint.
more → DevOps.com, Wednesday, September 9th, 2026
Rust's First Debugging Survey Shows Most Developers Skip the Debugger Entirely
Only 46 percent of 2,300 Rust developers use a debugger; 81 percent reach for print statements instead.
more → DevOps.com, Wednesday, September 9th, 2026
Flaw in DeepSeek Harness AI Coding Tool Let Agents Disable Their Sandbox
CVE-2026-82533 let unauthenticated attackers bypass sandbox restrictions through host header spoofing.
more → DevOps.com, Tuesday, September 8th, 2026
Apica Adds AI Agents and MCP Server to Platform for Managing Telemetry Data
Apica Ascent 3.0 adds the Venn AI agent and an MCP server for natural-language telemetry pipeline management.
more → DevOps.com, Friday, September 4th, 2026
Your DevOps Pipeline Is Already a Sustainability Program
Right-sizing, pipeline efficiency and progressive rollouts cut carbon as a side effect of good engineering.
more →
DevOps.com, Friday, September 4th, 2026
Observability's Gaslighting Problem: 'Send Less Data' Isn't A Strategy
Cutting telemetry to cut cost strips out the exact signals you need for rare failures and AI-written code.
more → DevOps.com, Thursday, September 3rd, 2026
Modern Observability Connects Telemetry Across Systems So Engineers Can Understand Why Failures Occur, Not Just Detect Them
Observability 2.0: Why DevOps Teams Are Moving From Monitoring to Intelligent System Understanding
more → DevOps.com, Thursday, September 3rd, 2026
AI Accelerates Coding But Shifts The Bottleneck To Planning, Governance, Deployment And Operations
From the Horse's Mouth: Anthropic Says AI Has Changed the SDLC
more → DevOps.com, Wednesday, September 2nd, 2026
GitOps In 2026: Why Pull Requests Are Taking Over Cloud Operations
The pull request has become the control point for infrastructure change across Kubernetes and cloud services.
more → DevOps.com, Tuesday, September 1st, 2026
ActiveState Pitches AI-Ready Trusted Catalogs That Vet Open Source Components Before Use, Not After Deployment
Trusted Open Source Catalogs for AI and Developers
more → DevOps.com, Monday, August 31st, 2026
Network Engineering Is Shifting From Manual Configuration To Managing AI Agents As The Primary Operating Model
From Operator to Agent Manager: The Real Shift in Network Engineering
more → DevOps.com, Friday, August 28th, 2026
Cybersecurity Researchers Uncover Flaw in Google AI Coding Tool
Pillar Security exploited a prompt injection in Google's Gemini CLI to gain unauthorized cloud access.
more →
DevOps.com, Friday, August 28th, 2026
Certificate Renewal Is a Deployment Workflow, Not a Cron Job
Treating TLS certificate renewal as a full deployment workflow, not a scheduled task, prevents silent outages.
more → DevOps.com, Thursday, August 27th, 2026
When AI Coding Agents Become Malware Delivery Systems
Attackers are planting prompt-injection payloads in repos and READMEs to hijack AI coding agents into running malware.
more → DevOps.com, Thursday, August 27th, 2026
Production Validation: The Missing Layer in Enterprise Releases
Enterprise releases need production validation as a business-control layer beyond traditional testing.
more → DevOps.com, Wednesday, August 26th, 2026
Automated Diagnosis Isn't Automated Understanding: What Postmortems Teach Us About Building Trustworthy Incident AI
Alert correlation is not diagnosis; trustworthy incident AI needs causal reasoning and good postmortem data.
more → DevOps.com, Wednesday, August 26th, 2026
AI Can Generate Your Infrastructure. Can Your CI/CD Pipeline Trust It?
AI-generated infrastructure code carries a measurable security gap that CI/CD pipelines must gate for.
more → DevOps.com, Tuesday, August 25th, 2026
The Blind Spot Between Back-End Metrics and User Experience
Backend monitoring alone misses frontend performance problems that damage user experience and revenue.
more → DevOps.com, Tuesday, August 25th, 2026
The AI Agent Race Is On. But Are We Watching the Right Race?
Competing AI coding agents look different depending on which metric you use to measure the market.
more → DevOps.com, Tuesday, August 25th, 2026
Report Shines Spotlight on 91 Vulnerabilities Fixed in Latest Update to Spring Framework
Sonatype found 91 patched Spring Framework vulnerabilities affecting over 209,000 components from Broadcom.
more → DevOps.com, Tuesday, August 25th, 2026
Is Java Enterprise Ready for AI? Absolutely
Java and Jakarta EE already provide the foundations for integrating AI into enterprise applications.
more → DevOps.com, Tuesday, August 25th, 2026
CI/CD for AI-Enabled Applications: Why Traditional Deployment Pipelines Need to Evolve
CI/CD pipelines must treat models, features, and data as first-class versioned production artifacts.
more → DevOps.com, Monday, August 24th, 2026
Why 'Tokenmaxxing' Was Always the Wrong Way for Developers to Measure AI Productivity
Drew Thompson argues measuring AI coding tools by token consumption is as flawed as counting lines of code.
more → DevOps.com, Monday, August 24th, 2026
Scalable Jenkins Management: Empowering Enterprises With Centralized Control for 150+ Instances
A Jenkins fleet control plane cut administrative overhead through centralized automation and observability.
more → DevOps.com, Monday, August 24th, 2026
Preparing Infrastructure for the Next Phase of Agentic AI
Agencies should redesign infrastructure for agentic AI around workflows rather than hardware purchases.
more → DevOps.com, Friday, August 21st, 2026
Production-Grade AI Eval Systems: What I Learned Putting LLMs on Call
Traditional SRE metrics stay green while an AI system fails customers, so evals are needed before release, in CI and on live traffic.
more →
DevOps.com, Friday, August 21st, 2026
Why Cryptographic Inventory Is the First Step Toward Quantum Readiness
Post-quantum migration starts with discovering where vulnerable cryptography exists, which requires a continuous cryptographic inventory.
more → DevOps.com, Friday, August 21st, 2026
Why API Test Generation Is a Judgment Problem, Not a Code Generation Problem
AI test generators produce too many tests while missing boundary and business-logic cases; separating judgment from mechanics helps.
more → DevOps.com, Friday, August 21st, 2026
Waterfall 2.0: Controlling LLM-Driven Software Development With Stage-Gated Discipline
DevOps.com argues stage-gated waterfall becomes useful again as a lightweight control structure over fast AI-generated work.
more → DevOps.com, Wednesday, August 19th, 2026
What It Really Takes to Run OpenTelemetry
OpenTelemetry delivers vendor-neutral instrumentation but carries significant ongoing operational labor.
more → DevOps.com, Wednesday, August 19th, 2026
Are LLMs Equally Good (or Bad) at Building Secure Software?
A study finds no universal best model for secure code, and higher cost does not mean safer output.
more → DevOps.com, Monday, August 17th, 2026
GitHub Copilot's Latest Update Bets on Model Choice, Not Model Loyalty
GitHub's Copilot update lets developers switch AI models mid-session rather than committing to one.
more → TechTarget, Tuesday, August 19th, 2025
Developer Resistance to AI Isn't Fear - It Is Identity
Developers push back on AI because it redefines the job, not because they fear losing it.
more →
TechTarget, Tuesday, August 19th, 2025
Reducing MTTR: A Practical Guide to Correlating Incidents With AIOps
When 40 alerts fire for one broken payment service, correlation is the bottleneck, not detection.
more → TechTarget, Tuesday, August 19th, 2025
Developer's Checklist: How to Build an FHE Application
A ten-step guide for developers building fully homomorphic encryption applications that compute on encrypted data.
more → TechTarget, Tuesday, August 19th, 2025
Why CI/CD Security Testing Is Going Autonomous (and Why It Should Stay Local)
Autonomous security testing enables continuous proof-based vulnerability detection while local models protect sensitive data.
more → TechTarget, Tuesday, August 19th, 2025
Survey Surfaces Rising Tide of Production Issues Traced Back to AI Code
80% of executives traced a production incident to AI-generated code in the past year.
more → TechTarget, Tuesday, August 19th, 2025
The Rise of AI-Native DevOps: How AI Is Reshaping Software Delivery in 2026
AI is transforming DevOps by embedding intelligent automation into CI/CD, incident response, and infrastructure management.
more → TechTarget, Tuesday, August 19th, 2025
Why Standardized Developer Environments Still Break DevOps Workflows
Standardized environments alone cannot eliminate inconsistencies across host systems, CI, and external services.
more →