DevOps.com @devopsdotcom

In case you missed it, 𝘛𝘩𝘦 𝘈𝘐 𝘍𝘢𝘤𝘵𝘰𝘳𝘺: 𝘍𝘳𝘰𝘮 𝘝𝘪𝘴𝘪𝘰𝘯 𝘵𝘰 𝘝𝘢𝘭𝘶𝘦 is now available on demand. The event explores how organizations can connect AI strategy with the infrastructure, architecture and operational foundation needed to support enterprise AI. Sessions cover open architecture, accelerated computing, AI sovereignty and the path from experimentation to measurable business value. Presented by @TechstrongGroup, part of @TheFuturumGroup, the program brings together insights from @RedHat, @Dell, @dify_ai, @weka and @nvidia on the infrastructure and technologies supporting enterprise AI. Access the full event on demand at your convenience: bit.ly/3TlaoqX #EnterpriseAI #AIInfrastructure #AIStrategy #ArtificialIntelligence

Bank of America hired 1,000 contractors to help address software vulnerabilities exposed by advanced AI models, adding to roughly 3,000 employees already working that area, a substantial response that still raises the question of how many people would ever be enough. A thousand more can still be waiting for permission to interrupt the same critical service, because discovery produces a finding while remediation requires understanding what it means in a particular environment, who owns the affected system and what can safely change. Read why patching was never the whole problem: buff.ly/FQlnbuX #Cybersecurity #AppSec #VulnerabilityManagement #AgenticAI

AI reshapes work, tests agent guardrails and helps crack Enigma. @mvizard @jswartz @JeffReichCSO @chrisblask #AI #FutureOfWork #AIAgents #Cybersecurity #Codebreaking x.com/i/broadcasts/1…

Every coding agent runs in isolation, so coordinating the work between them falls to the developer. Run a few agents on one codebase and you end up carrying context from one session to the next and catching collisions after they've happened. BAND for developers lets those agents communicate, divide the work and hand off to each other directly. You see who owns what, what's blocked and which questions have been escalated to you, so you can step in early instead of untangling it later. Thanks to Mike Vizard and @devopsdotcom for covering the launch: devops.com/band-desktop-a…

Qualys president and CEO Sumedh Thakar said today the time has come to define standards and best practices for deploying and securing AI agents, warning that the level of risk being created is substantially higher than many organizations appreciate. The trouble is that standards take time to define and review, organizations keep rolling out agents anyway, and a framework covering isolation and network segmentation may only arrive after multiple catastrophic events force the conversation. Read the full article on why agentic AI security needs a framework before the incident count climbs: buff.ly/A9mHy2n #AI #AIAgents #AISecurity #Qualys #NIST

AI safety lawsuits, ROI doubts and engineering beyond code: @mvizard @jswartz @NetworkingNerd @robertreeves + Drew Gutstein examine the evidence. #AISafety #AIROI #Engineering #Cybersecurity #EnterpriseAI x.com/i/broadcasts/1…

@devopsdotcom The inventory point is the real lesson. A coding tool with local filesystem access is an insider holding your keys, and most teams never wrote down what it can read. Inventory first, then scope. A preview pane should not be able to reach credentials at all, sandbox or not.

Blitzy this week added a chat interface that lets DevOps teams express intent in natural language, with a software engineer describing a desired outcome that is automatically converted into a prompt assigning a task to an AI agent, and the ability to ask agents to explain how and why certain tasks were performed. A Build Prompt Strength scoring tool evaluates the draft against defined quality standards, and the platform's knowledge graph spans architecture, dependencies, business logic and data flows mapped back to actual code, which becomes critical when a pull request can span hundreds of thousands of lines. Read the full article on how agentic engineering handles review at that volume: buff.ly/Jym3xdt #DevOps #AIAgents #AICoding #SoftwareDevelopment

ScienceLogic's 2.7 update to its Skylar AI platform adds deeper visibility and control over AI agents automating IT operations, with a catalog that traces how requests were routed through an MCP server and a gatekeeper tool that inspects and quarantines suspicious content before an agent sees it. Very few IT teams let agents autonomously perform tasks without supervision, but as they gain confidence, those teams are evolving into supervisors of agents that handle work previously done by administrators and engineers. Read the full article on why IT management is never going to be the same again: buff.ly/wX5iq7g #Observability #AIAgents #AIOps #ITOperations

AI coding tools have made building software cheap, but they have not made it cheap to decide what software to build, and Figma's first Config event in India rolled out code layers, Specs, an expanded MCP server and a Payload integration to close that gap. Its chief design officer noted teams produce 17 times as many lines of code as before but only 1.3 times as many releases, and if most of that code exists to figure out what the product should be, the shared record of what an agent was told to build may matter more than the code itself. Read the full article on why context is now the scarce resource: buff.ly/8jtYOCa #Figma #DevOps #AIAgents #DesignSystems

SpaceX unveiled The X Subscription, bundling Grok, Cursor and X Premium starting at $8/month. The $30 tier offers savings but raises concerns about shared usage limits and vendor lock-in. Read more: buff.ly/xxtyZZb #SpaceX #Grok #CursorAI #AICoding #DeveloperTools

9 in 10 organizations want AI agents driving autonomous IT operations and 93% say their AI investments have met or exceeded expectations, yet more than three-quarters are hesitant to let AI make operational decisions without human approval, and only 24% extensively trust its recommendations with limited review. Only 8% have applied AI to operations enterprise-wide and just 17% have fully unified visibility across networks, applications, endpoints and cloud, suggesting many organizations are underestimating what will clearly be a multi-year journey. Read the full survey findings on where IT teams actually stand with AI agents: buff.ly/3WudRzt #AI #AIAgents #ITOperations #AIOps #EnterpriseIT

A Java update passed staging but production login failed. The differences that matter are the ones teams keep skipping under deadline pressure. An exception with an end date gets reviewed. Without one it becomes architecture nobody remembers approving: zpr.io/dFT6iNDyQEVC

RapidFort has allied with Wiz and Aqua Security to surface its curated container advisories directly inside their platforms, and signed a cooperative research agreement with SpaceWERX to apply the same technology to Space Force use cases. That matters because application developers keep pulling images without checking for known vulnerabilities, and cybercriminals using AI to find exploits in hours are widening a security debt most DevSecOps teams were never staffed to pay down. Read the full article on the alliances and why DevSecOps teams should prepare now for what might soon become the worst of times: zpr.io/PUZ5RLpRpXfd #DevSecOps #Cybersecurity #CloudNative #AppSec

BAND today made available a desktop application that lets developers manage and collaborate with multiple coding agents, since each one runs in isolation and coordinating tasks between them has been the hard part. The app gives agents a way to communicate, divide responsibilities, delegate work and share context while giving developers a view of projects, blockers and progress, connecting agents across harnesses, machines and environments without standardizing on a single stack. Read why coordination, not code generation, is the bottleneck DevOps teams now face: buff.ly/T2E1SmD #DevOps #AIAgents #SoftwareDevelopment #AICoding

Modernization never really finishes. Learn how continuous modernization can reduce technical debt, improve code visibility and prepare legacy applications for AI agents. Join @AWS and @TheFuturumGroup on Oct. 22 at 1 PM ET: buff.ly/3Xv2Pni #AWS #CloudModernization

GitLab is telling every self-managed customer to upgrade now after shipping fixes for 24 vulnerabilities, including a CVSS 10.0 integer overflow in its CI/CD regex compiler that lets an unauthenticated user run arbitrary code on the server holding your source and secrets. Most of the other high-severity fixes target pipelines too, and two new CVEs hit the Duo Agent Platform, including a prompt injection issue that could make an agent run commands logged under another developer's name. See the full list and what to do before your next change window: buff.ly/ZjjyYY2 #GitLab #Cybersecurity #DevSecOps #CICD

GitHub shipped a batch of GitHub Apps updates on Oct. 13 that finally give teams a narrow alternative to classic PATs, adding repository_creation:write so an automation job can create repos without also holding the power to delete and transfer them. Classic PATs are still everywhere, easy to create, often non-expiring and broad enough to reach everything their owner can, and with AI coding agents inheriting whatever access their token carries, scoping that token is now an agent governance decision. Read the full article on what to swap in your environment now: buff.ly/3luG49C #GitHub #DevSecOps #AppSec #Security

Tomorrow at 1 PM ET: AI can write code. Can it get that code safely into production? See Harness’ Software Delivery Agent move a change from commit to production autonomously, with governance and a full audit trail. Live demo. Register: buff.ly/B0R38z4 #AIAgents #DevOps

A trusted publishing configuration that never completes a publish now expires after 48 hours, closing a gap where dormant trust in a repository name could be hijacked once that name changes owners. As the article puts it, npm now puts an expiration date on software trust, and an expired configuration costs a maintainer a few minutes to recreate while a hijacked one can cost every downstream user far more. Read the full article on what DevOps teams should check before their next release: buff.ly/DAYH2CH #Cybersecurity #npm #SupplyChainSecurity #DevSecOps