Discover the most popular and trending content on SecDevOps.
Demand for bandwidth continues to surge with increasing use of AI, high-definition video streaming, cloud and 5G mobile applications. In response, optical services need to become more dynamic and...
Black Duck today added a tool for analyzing and remediating code that is directly integrated into artificial intelligence (AI) coding tools. Company CEO Jason Schmitt said Black Duck Signal makes it...
A new phishing kit called Spiderman is being used to target customers of dozens of European banks and cryptocurrency holders with pixel-perfect cloned sites impersonating brands and organizations....
Somewhere between disciplined software engineering and late-night code jazz lives a strange new philosophy: Vibe coding. It’s the act of writing code intuitively, letting flow and instinct take over...
U.S. prosecutors have charged a Ukrainian national for her role in cyberattacks targeting critical infrastructure worldwide, including U.S. water systems, election systems, and nuclear facilities, on...
Fortinet, Ivanti, and SAP have moved to address critical security flaws in their products that, if successfully exploited, could result in an authentication bypass and code execution. The Fortinet...
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already...
SAP has released its December security updates addressing 14 vulnerabilities across a range of products, including three critical-severity flaws. [...]
Proof-of-concept exploit code is publicly available for two other flaws in this month's Patch Tuesday. In total, the company issued patches for more than 1,150 flaws this year.
“I’m obsessed with inference,” Jonathan Bryce, who took over as the executive director of the Cloud Native Computing Foundation (CNCF) this summer, said during a panel hosted by The New Stack at...
Microsoft says Windows PowerShell now warns when running scripts that use the Invoke-WebRequest cmdlet to download web content, aiming to prevent potentially risky code from executing. [...]
Shanya is the latest in an emerging field of packing malware, selling obfuscation functionality in order to help ransomware actors reach their target.
Postgres is a common pick to bootstrap an application because it’s well known, flexible and dependable. Its flexibility means it can handle most things you throw at it, for a time. As an application...
Microsoft has released the KB5071546 extended security update to resolve 57 security vulnerabilities, including three zero-day flaws. [...]
Anthropic’s Model Context Protocol is only a year old, but has quickly become the default for large language models (LLMs) to access data, tools and services in agentic loops. Now, Anthropic is...
For the past decade, networking has followed the same trajectory as much of IT: abstracting intelligence away from individual devices, centralizing control into software and treating the underlying...
Microsoft's December 2025 Patch Tuesday fixes 57 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
Fortinet has released security updates to address two critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO...
Microsoft has released Windows 11 KB5072033 and KB5071417 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. [...]
TOKYO — Standing between the audience and their lunch, Stefania Druga, research scientist at Sakana AI and former AI research scientist at Google DeepMind, made the room stretch before delivering one...
Security Information and Event Management (SIEM) systems aggregate, analyze, and correlate security data across infrastructure to detect threats, ensure compliance, and provide real-time visibility into an organization's security posture.
Penetration testing is a systematic security assessment practice where authorized professionals simulate cyberattacks to identify vulnerabilities in systems, applications, and networks before malicious actors can exploit them.
Compliance in security and DevOps ensures organizations meet regulatory requirements, industry standards, and security policies through automated controls, continuous monitoring, and integrated governance frameworks.
A data breach is an unauthorized access, disclosure, or theft of sensitive information from an organization's systems. Understanding data breach prevention, detection, and response is critical for modern DevOps and security teams.
Ransomware is malicious software that encrypts systems and data, demanding payment for restoration. Understanding ransomware threats and implementing robust defense strategies is critical for modern DevOps and security operations.
Cloud Security encompasses the technologies, policies, and controls deployed to protect cloud-based data, applications, and infrastructure from threats. It is essential for organizations adopting cloud services and implementing DevOps practices.
CI/CD (Continuous Integration/Continuous Deployment) is a foundational DevOps practice that automates software building, testing, and deployment. Understanding CI/CD security is critical for protecting the software supply chain from threats and vulnerabilities.
DevSecOps integrates security practices throughout the software development lifecycle, embedding security measures into DevOps pipelines to balance rapid deployment with robust protection against vulnerabilities and threats.
Zero Trust is a security framework that eliminates implicit trust by requiring continuous verification of all users, devices, and applications regardless of their location within or outside the network perimeter.
API Security encompasses the practices, tools, and strategies used to protect Application Programming Interfaces from threats and vulnerabilities throughout their lifecycle in modern DevOps environments.
