DevOps.com – Latest Articles

by Mike Vizard on November 1, 2026

IBM is expanding its Terraform infrastructure-as-code platform and Bob AI coding assistant with new policy-as-code capabilities, automated vulnerability remediation and AI governance integrations. Announced at IBM TechXchange 2026, the updates aim to help DevSecOps teams securely manage infrastructure and accelerate software delivery as AI agents become more deeply embedded in development workflows.

by James Maguire on October 30, 2026

Cursor has disclosed a security incident involving malicious versions of Anthropic’s Claude Code extension that attempted to install a persistent backdoor on developers’ computers. The company initially estimated that up to 5,000 users could have been affected, highlighting the security risks associated with compromised software development tools. The compromised extension packages, identified as Anthropic.claude-code versions

by Mike Vizard on October 30, 2026

Black Duck this week added an artificial intelligence (AI) agent to its portfolio that triages vulnerabilities and then generates and validates fixes for DevSecOps teams to review before applying them. Patrick Carey, vice president of product marketing for Black Duck, said the Signal Agentic Fix agent leverages the company’s static application security testing (SAST) and

by Mike Vizard on October 30, 2026

Endor Labs this week added an artificial intelligence (AI) tool to its portfolio that evaluates every reachable open source vulnerability against a code context graph to generate fixes that typically require only 10 lines of code to be generated and applied. Joe Harrington, a principal product manager for Endor Labs, said AURI Fix for Open

by Tom Smith on October 30, 2026

Two separate GitHub attack campaigns, Gheist and Testmetest, exploited stolen developer credentials to steal secrets, compromise workflows and target software supply chains. The attacks reveal dangerous blind spots in GitHub Actions security, repository scanning and AI coding assistant configurations.

by James Maguire on October 29, 2026

Amazon has issued new guidelines for its software engineers that discourage excessive use of AI tools simply to boost productivity metrics, signaling a shift in how the company evaluates AI’s contribution to software development. The guidelines address tokenmaxxing, a practice in which employees use huge volumes of AI tokens to demonstrate their use of the

by Mike Vizard on October 29, 2026

Mistral has released the weights for its 1-trillion-parameter Mistral Large 4 model, delivering significant improvements in agentic coding and vulnerability discovery. With competitive benchmark results, lower token consumption and flexible deployment options, the French AI developer is making a stronger case for open-weight models as DevOps teams confront rising AI development costs.

by Jeff Kuo on October 29, 2026

Measuring developer productivity by AI token consumption risks higher costs, bloated code and misleading performance metrics.

by George Ukkuru on October 29, 2026

Every demo from an AI testing tool vendor ends with a promise to cut test design effort from hours to minutes. Surprisingly, one important question is missing from these conversations: How many of those test cases can QA teams truly trust when testing a business-critical workflow such as payments? The AI Testing Efficiency Trap Many

by Charlie Forsyth on October 29, 2026

AIOps helps DevOps teams cut alert fatigue, predict failures and improve incident response through AI-powered insights and smarter automation.