mvizard @mvizard

A Palo Alto Networks survey found 95% of critical infrastructure security leaders fear AI-powered attacks, while 60% reported a major breach and legacy systems continue to hinder defenses. Read more: buff.ly/LVg7ngt #Cybersecurity #CriticalInfrastructure #AI #OperationalTechnology #AISecurity

AI espionage, replicating models and escaping lock-in: @mvizard @jswartz @TeriRnNY @jpmorgenthal examine trust, control and migration. #AISecurity #Cybersecurity #IoT #AgenticAI #VendorLockIn x.com/i/broadcasts/1…

Blitzy this week added a chat interface that lets DevOps teams express intent in natural language, with a software engineer describing a desired outcome that is automatically converted into a prompt assigning a task to an AI agent, and the ability to ask agents to explain how and why certain tasks were performed. A Build Prompt Strength scoring tool evaluates the draft against defined quality standards, and the platform's knowledge graph spans architecture, dependencies, business logic and data flows mapped back to actual code, which becomes critical when a pull request can span hundreds of thousands of lines. Read the full article on how agentic engineering handles review at that volume: buff.ly/Jym3xdt #DevOps #AIAgents #AICoding #SoftwareDevelopment

Qualys president and CEO Sumedh Thakar said today the time has come to define standards and best practices for deploying and securing AI agents, warning that the level of risk being created is substantially higher than many organizations appreciate. The trouble is that standards take time to define and review, organizations keep rolling out agents anyway, and a framework covering isolation and network segmentation may only arrive after multiple catastrophic events force the conversation. Read the full article on why agentic AI security needs a framework before the incident count climbs: buff.ly/A9mHy2n #AI #AIAgents #AISecurity #Qualys #NIST

AI software clones, labor disruption and deepfake fraud: Mike Vizard, Kate Scarcella, Sid Nag & @chrisblask examine the risks. #OpenSource #AI #FutureOfWork #Deepfakes #Fraud x.com/i/broadcasts/1…

ScienceLogic's 2.7 update to its Skylar AI platform adds deeper visibility and control over AI agents automating IT operations, with a catalog that traces how requests were routed through an MCP server and a gatekeeper tool that inspects and quarantines suspicious content before an agent sees it. Very few IT teams let agents autonomously perform tasks without supervision, but as they gain confidence, those teams are evolving into supervisors of agents that handle work previously done by administrators and engineers. Read the full article on why IT management is never going to be the same again: buff.ly/wX5iq7g #Observability #AIAgents #AIOps #ITOperations

BAND today made available a desktop application that lets developers manage and collaborate with multiple coding agents, since each one runs in isolation and coordinating tasks between them has been the hard part. The app gives agents a way to communicate, divide responsibilities, delegate work and share context while giving developers a view of projects, blockers and progress, connecting agents across harnesses, machines and environments without standardizing on a single stack. Read why coordination, not code generation, is the bottleneck DevOps teams now face: buff.ly/T2E1SmD #DevOps #AIAgents #SoftwareDevelopment #AICoding

SnapLogic has added agentic AI to its Intelligent Modernizer engine so that AI agents can reverse engineer the metadata of legacy middleware platforms, analyze workloads and generate pipelines without requiring a purpose-built connector for every source. Platform and application providers have long counted on migration costs being too high to justify moving, which is why so much of IT budget goes to maintaining legacy systems instead of innovating, and reducing those costs could mean far more organizations finally make the move. Read the full article on how agentic AI could break the lock-in legacy vendors depend on: buff.ly/IFdeU2w #AI #AIAgents #SnapLogic #LegacyModernization

Qualys revealed TruConfidence at its ROCon Americas conference, a remediation intelligence engine that uses multiple AI agents and models to assess which patches are actually critical to a specific IT environment, since only 1% of the 79,902 vulnerabilities disclosed this year are likely to have any real impact. Too much time still gets wasted chasing celebrity vulnerabilities like Log4j when the Java logging tool often isn't even reachable from the internet, and ticket-based workflows were never designed for an era where exploits get reverse-engineered in hours. Read the full article on why patch management has to be re-engineered now: buff.ly/IzrF9zr #Cybersecurity #PatchManagement #Qualys #AgenticAI #AIAgents

A Komprise survey of 500 technical decision makers finds that 68% feel their organization is maturing or has matured in AI adoption, yet only 28% can quantify a return on investment, and the gap comes down to data. Only 4% have more than 70% of their unstructured data ready with schema for analysis, 49% struggle to find the right project data and clean out redundant, obsolete and trivial files, and as Komprise's COO puts it, data equals tokenomics, since the less relevant the data exposed to AI, the harder it becomes to justify an ROI. Read the full survey findings on what is actually blocking AI returns: buff.ly/BmY22WA #AI #EnterpriseAI #DataManagement #ROI

AI's power struggle: data-center politics, fallible IT agents and shared meaning. With @mvizard @jckgld @chrisblask and Jon Swartz. #DataCenters #AIAgents #Cloud #DataGovernance #AI x.com/i/broadcasts/1…

This week’s DevOps.com jobs report features 10 openings at companies including Airbnb, Elastic and Rubrik, with salaries ranging from $90,000 to over $290,000. Read more: buff.ly/jL9WTnW #DevOps #TechJobs #PlatformEngineering #SRE #CloudComputing

9 in 10 organizations want AI agents driving autonomous IT operations and 93% say their AI investments have met or exceeded expectations, yet more than three-quarters are hesitant to let AI make operational decisions without human approval, and only 24% extensively trust its recommendations with limited review. Only 8% have applied AI to operations enterprise-wide and just 17% have fully unified visibility across networks, applications, endpoints and cloud, suggesting many organizations are underestimating what will clearly be a multi-year journey. Read the full survey findings on where IT teams actually stand with AI agents: buff.ly/3WudRzt #AI #AIAgents #ITOperations #AIOps #EnterpriseIT

SAP patching windows are shrinking from months to hours. Mike Vizard talks with Ivan Mans of SecurityBridge about AI-driven vulnerability discovery, patching debt and SAP security basics. Watch: techstrong.tv/videos/intervi… #SAP

LocalStack launched a public beta supporting local emulation of more than 40 Azure services, helping developers reduce cloud costs, simplify debugging and test AI agents safely. Read more: buff.ly/FVG7G9v #LocalStack #MicrosoftAzure #DevOps #CloudComputing #PlatformEngineering

OllyGarden this week revealed it has extended the Rose AI agent with a Minimum Viable Instrumentation capability that finds where no instrumentation exists and identifies what OpenTelemetry sources should fill the gap. The pressure behind it is straightforward, since telemetry volumes keep climbing as AI workloads spread and agents reasoning over irrelevant data produce worse outcomes at higher cost, which is why teams need to trim what they collect before they trust an agent to act with little supervision. Read the full article on the instrumentation gap and why trimming telemetry comes before autonomy: buff.ly/9kDsJwt #Observability #OpenTelemetry #AIAgents #DevOps

AI-generated code is fueling vendor sprawl and AppSec risk. Mike Vizard talks with Anthony Barkley of Veracode about the Veracode Marketplace and curated AI security. Watch: techstrong.tv/videos/intervi… #AI

IBM and Red Hat have remediated more than 400 previously unknown Java vulnerabilities since launching Lightwell this year, twice the number they expected to find, with the fixes contributed back upstream under responsible disclosure. The cost of discovering a vulnerability is now as low as $30, and organizations that need three months to validate a code fix are not going to keep pace with a deluge that favors the attacker. Read the full article on why continuous patching is becoming the baseline: buff.ly/xbRmxnu #Cybersecurity #AppSec #DevSecOps #Java #OpenSource

Developers tend to build on whichever database platform is most accessible, then hand IT a migration problem when the application reaches production. pgEdge's Starfleet distribution is making a case for skipping that step, offering a curated Postgres instance that sets up in under two minutes with an MCP server, a RAG API and copy-on-write branching, deployed on the same database many teams already run in production. Get the details on the Starfleet database and the push to cut friction from AI-era development: buff.ly/nJ61QNE #Postgres #Database #DevOps #AIAgents

AI scanners are flooding teams with findings. Mike Vizard talks with David Lindner of Contrast Security about vulnerability prioritization, stronger controls and detection. Watch: techstrong.tv/videos/intervi… #AI