Advertisement

Engineering the Future of Infrastructure

Tag

DevSecOps

Every story tagged DevSecOps.

GitHub Universe 2026 Folds Copilot Into Enterprise and Moves Agents Into Your Repositories

Buildkite Scoped Secrets Arrive in a Month Full of Leaked Keys

Your Secret Rotation Playbook Was Written for Leaks You Could See

Which of GitHub's Four New Supply Chain Security Controls to Turn On First

SecurityAnalysis

Stolen AI API Keys Are the New Crypto Mining, and the Bill Comes Fast

PHP2Shell and a Node.js Security Release Mean Rebuilding Every Image

SecurityAnalysis

The Railway Breach Shows Why Secret Rotation Cannot Wait on a Deploy

Your CI Tools May Still Trust eMudhra Certificates Your Browser Rejects

The LiteLLM 1.107.0 Compromise Came From the Build, Not the Code

GitLab CVE-2026-110264 Reopens Servers Patched on 12 October

Your Self-Hosted Jira and Confluence Need Patching Today

DevOpsAnalysis

OpenSSH 10.6 Drops a Few Old Habits. Find Them Before Your Next Server Image Does.

DevOpsAnalysis

Attackers Hit GitLab and Artifactory Within Days of Patches. Your Pipeline Is Not Plumbing.

Cloud Security Best Practices: 25 Things Every Engineering Team Should Do

Who Signs Off on an Agent With Production Credentials?

DevSecOps Explained: How to Integrate Security Into CI/CD

AI Infrastructure

Docker Wants Agent Permissions Inside the Image: Sandbox Kits Head to the CNCF

Malware Reached the Terraform Registry: What terraform init Actually Trusts

Your GitLab Issue Email Address Is a Credential: One Leak Lets Anyone Push to main

Three CI/CD Deadlines Before November: GitHub's pull_request_target Block, ubuntu-latest 26.04 and GitLab Rate Limits

The Tokens You Forgot: How a Stale OAuth Token and a Hardcoded Cloudflare Key Became Breaches

Two GitHub Changes to Turn On This Week: Secret-Scanning Merge Blocks and Actions Cache-Mode

The Infrastructure Briefing

Get the infrastructure briefing.

Practical DevOps, cloud, AI infrastructure and engineering insights, delivered weekly. Read by engineers and engineering leaders.

DevSecOps, Stories and Guides, DevOps Society