Explore the latest in DevOps security practices, tools, and trends. Stay ahead on secure continuous integration & deployment with our expert insights.
Search across headline titles and summaries.
Background for this topic.
DevOps combines software development and IT operations to speed up application delivery through automation, continuous integration, and collaboration. It emphasizes frequent code changes, rapid testing, and deployment pipelines that reduce manual steps and accelerate release cycles.
From a security perspective, DevOps expands the attack surface by increasing the number of automated tools, scripts, and APIs involved in deployment. Misconfigured pipelines or insecure code repositories can expose credentials or introduce vulnerabilities. Integrating security into DevOps—often called DevSecOps—means embedding automated security checks, such as static code analysis and dependency scanning, directly into the build process to catch issues early and prevent risky code from reaching production.
Weekly headline count for the current query.
Software teams at Google and other Rust adopters see safer code when using the memory-safe language, and also fewer rollbacks and less code review.
Outages affecting DevOps tools threaten to leave developers coding like it's 1999. How serious is the threat and what can companies do?
Developers need to do more than scan code and vet software components, and ops should do more than just defend the deployment pipeline.
Developers need to do more than scan code and vet software components, and ops should do more than just defend the deployment pipeline.
The open source object storage service was the target of a never-before-seen attack on corporate cloud services, which researchers said should put DevOps in particular on notice.
Learn the importance of adding security practices into DevOps life cycles and how to make security stronger.
85% of AppSec pros say ability to differentiate between real risks and noise is critical, yet only 38% can do so today; mature DevOps organizations cite widespread impact due to lack of cloud-native tools
Code property graphs and a threat feed powered by artificial narrow intelligence help developers incorporate AppSec into DevOps.
If companies prioritize communications and make the DevOps process more transparent, team members will better know what vulnerabilities to look for.
The adversaries obtained a decryption key to a LastPass database containing multifactor authentication and federation information as well as customer vault data, company says.
The Automated Libra group is deploying all components of its campaign in an automated manner via containers, stealing free trial resources for cryptomining, but the threat could get larger.
DevOps platform warns customers of a "security incident" under investigation.
The open source container tool is quite popular among developers — and threat actors. Here are a few ways DevOps teams can take control.
Open source tools by Spyderbat address the needs of Platform Engineering and DevOps teams by delivering new insights to workload activities and behaviors.
Security, DevSecOps, and DevOps teams can now build transparent trust in the software they deliver or use.
.
Slack, Docker, Kubernetes, and other applications that allow developers to collaborate have become the latest vector for software supply chain attacks.