DevOps.com

Where the world meets DevOps. Powered by @TechstrongGroup.

[Techstrong Learning @TechstrongLrn]

Cloud migration and modernization are the prerequisites for AI readiness.

Learn from @awscloud (AWS) and its partners - @softchoice, @kloia_com, @Cognizant, and Evolve Cloud Services - how leading teams keep data, applications, infrastructure, and delivery moving forward after moving to the cloud.

To help you on your AI journey, we have launched the AWS Modernization Learning Hub, a five-part webinar series.

Two sessions are ready to watch today:
• AI Starts with Your Data | Softchoice
• AIDLC: From Knowledge Base to Working Code | Kloia

Three more are coming up live:
• Oct 22 | Continuous Modernization | AWS
• Oct 28 | Engineering Agentic Cloud Migration at Scale | Cognizant
• Nov 4 | The Economics of Infrastructure Modernization | Evolve Cloud Services

Explore the hub and save your seat: https://t.co/vO4UlFzn4i

#AWS #CloudModernization #PlatformEngineering

[DevOps.com @devopsdotcom]

OpenAI's benchmarks show GPT-6 Astra lifting COBOL from a 10.9% to a 72.1% pass rate and GPT-6.1 Sol hitting 86.6% on COBOL-to-Java migration, but anyone who has worked a COBOL migration knows the hard part isn't syntax.

It's arithmetic, since a rewrite that rounds fixed-point values instead of dropping the extra digits runs cleanly and still produces different financial results, and the benchmark only counts because someone already wrote the hidden tests a real mainframe estate does not have.

See why the test harness, not the model, decides how fast teams can cut over: https://t.co/ZnKSyebgLg

#AI #OpenAI #COBOL #Mainframe #LegacyModernization #DevOps

[DevOps.com @devopsdotcom]

An ActiveState survey of 307 enterprise technology leaders found 94% of organizations using AI coding tools now depend on more open source software as a result, just as AI models surface more open source vulnerabilities that can be exploited in hours.

Half admit dependencies reach production without review or approval, 32% traced a security incident to an unmanaged dependency in the past two years, and 83% say the cost of managing those risks is rising.

Read the full findings on the paradox at the center of AI-assisted development:https://t.co/7HFeDmjIXt

#Cybersecurity #OpenSource #SupplyChainSecurity #AICoding

[DevOps.com @devopsdotcom]

mabl today extended its test automation platform with a harness that enforces guardrails and testing standards for AI agents while using a knowledge graph to assess the impact of a code change, identify the tests needed to validate it and surface coverage gaps before a pull request is even made.

Its agents saved development teams about 100,000 engineering hours in the last 90 days, but as Belcher cautions, DevOps teams cannot rely on AI coding tools to validate the code they create.

Read the full article on why validating AI-generated code has become the bottleneck: https://t.co/ejzjCQy2Ht

#DevOps #AITesting #SoftwareDevelopment #AIAgents

[DevOps.com @devopsdotcom]

GemDB has added a Visual Studio Code extension that lets developers and AI agents use Python code to generate schemas for its object database, so objects persist exactly as they exist in application code and any change to the code changes the schema without mapping, migration or a DBA.

Adding a field to an object now replaces what used to require join tables, foreign key definitions and backfill scripts, which matters as the pace of application development accelerates.

Read the full article on what GemDB Code includes and where it fits in DevOps workflows: https://t.co/QW7MArKWoJ

#Databases #DevOps #AIAgents #DeveloperTools

[DevOps.com @devopsdotcom]

GitHub has launched a package firewall in public preview, targeting the problem that has hit npm users repeatedly this year: malware that steals credentials as soon as a package is installed.

Attackers have been doing their best work during install time, with the Axios compromise in March dropping a remote access trojan through a postinstall script, and GitHub's answer sits in the request path between runners, coding agents and workstations on one side and upstream registries on the other, with a one-day cooldown that Datadog Security Labs argues would have stopped Axios in its tracks.

Read the full article on the five controls and what the firewall can't catch: https://t.co/MEY2c4mAkl

#GitHub #DevSecOps #SupplyChainSecurity #npm #AppSec

[DevOps.com @devopsdotcom]

Tomorrow at 1 PM ET: Is technical debt holding your AI strategy back?

Join @AWS to explore how continuous modernization can reduce maintenance costs, improve code visibility and prepare legacy applications for AI agents.

Register: https://t.co/3ks4pAevwV
#AWS #CloudModernization

[PlatformEngineering.com @PlatformEng_]

Telemetry can be in every service and still leave platform teams blind. Coverage without the ability to analyze it and get insights just increases cost.

Measure whether your most junior engineer feels confident debugging in production: https://t.co/v1SLGjqduh

#Observability

[Techstrong TV @TechstrongTV]

AI agents that wow in a demo often can't repeat the same task, and that gap keeps prototypes out of production. Mike Vizard (Techstrong Group) with Adam Jacob (@adamhjk) on building agents you can rely on. https://t.co/lV74kxwV9S #AIAgents #DevOps

[C Thomas (Tom) Smith @ctsmithiii]

AI agents can now take compiled software apart and explain how it works. Great for legacy modernization. Less great if your client code holds secrets. My latest for @devopsdotcom:
https://t.co/W3VTFK3eKm #DevOps #AppSec

[DevOps.com @devopsdotcom]

🚨 Last call for DevOps Dozen 2026 nominations.

Nominations close today at 5 PM ET.

With 24 categories across Community and Tools & Services, this is the final opportunity to recognize the people, projects and solutions making an impact on software delivery.

🏆 9 Community Awards
🏆 15 Tools & Services Awards

Submit your nomination before the deadline:
👉 https://t.co/1U5o9KGvsP

#DevOps #DevOpsDozen2026 #DevOpsAwards

[DevOps.com @devopsdotcom]

Fast releases, weekend firefighting, engineer burnout? Deployment frequency can hide broken delivery processes.

Join Eric Minick of Harness Oct. 28 at 1 PM ET to explore how automation can reduce manual bottlenecks.

Register: https://t.co/AG4jqLmeXg
#DevOps #CICD #AIOps

[Techstrong.IT @TechstrongIT]

Broadcom is adding HyperArmor to VMware ESX, introducing real-time threat blocking, script allowlisting and SSH multi-factor authentication to protect hypervisors from emerging attacks.

Read more: https://t.co/ZyBhku1Kn2

#Broadcom #VMware #Cybersecurity #Virtualization #InfrastructureSecurity

[Techstrong TV @TechstrongTV]

"Don't ask what AI can do. Start with asking what you want AI to fix first." @ManageEngine's Rakesh Jayaprakash tells Mike Vizard where AI in IT operations should start.
▶ Watch the full interview: https://t.co/Msdw914V14
#ITOperations #AIAgents

[Arick Goomanovsky @g00manoid]

Developers are going from working with one coding agent to leading teams of them, but the tools around those agents still assume one session, one task, one person watching. Each agent works in isolation. So the developer becomes the coordination layer: carrying context between sessions, deciding who picks up what, noticing late that two agents touched the same code.

We launched @band_hq for Developers to move that coordination to the agents. They communicate, divide the work and hand off to each other directly. The developer sees ownership, blockers and escalated questions as they appear, and steps in while it's still cheap to change course.

Thank you to Mike Vizard and @devopsdotcom for covering the launch.

https://t.co/qZWwV1CcFk

[DevOps.com @devopsdotcom]

Reverse engineering used to take a specialist, a disassembler and a lot of patience, and AI agents can now inspect compiled software, explain how it works and write a working version with no source code required.

OpenAI's own system card puts GPT-6 Astra at 99.2% on SRE-Bench binary reverse engineering within four attempts, and with tools like the open-source REA server connecting agents to Hopper, Ghidra and IDA, if your team can analyze someone else's app, someone else can analyze yours.

Read the full article on why security through obscurity is close to useless and what DevOps teams should do about it: https://t.co/6Wl2pYhnws

#Cybersecurity #DevOps #ReverseEngineering #AIAgents

[DevOps.com @devopsdotcom]

Microsoft's September roundup of Foundry updates is less about making agents smarter than about making them easier to schedule, cheaper to run and easier to troubleshoot, with Routines and Tool Search now generally available and Insights analyzing production traces in public preview.

Tool Search cut input-token use by more than 60% for a 50-tool toolbox in Microsoft's internal evaluation, and Insights groups recurring behavior into findings with evidence and a proposed next step, though teams still have to route those findings through their own release gates.

Read the full article on what changed and what to check before upgrading: https://t.co/QFYXRnYlz8

#Microsoft #AIAgents #MicrosoftFoundry #DevOps

[DevOps.com @devopsdotcom]

GitHub has made AI Scan for pull requests generally available, filling in coverage where CodeQL doesn't reach, including PHP, Shell, Terraform configuration, Dockerfiles and Blazor, all files that define how software gets built and deployed.

AI Scan findings are advisory and won't block merges, and they don't run on fork-based or Dependabot pull requests, which puts the burden on teams to assign an owner and act on what it finds.

Read the full article on what changed since preview and how to roll it out: https://t.co/KeTpQJ5Mrk

#GitHub #DevSecOps #AppSec #CodeQL #AISecurity

[DevOps.com @devopsdotcom]

Cohere plans to acquire AI cybersecurity startup Aisle and launch Cohere Cyber, adding AI-powered vulnerability detection, automated code security and developer tools to its enterprise offerings.

Read more: https://t.co/ip1LsSl7xz

#Cohere #Cybersecurity #ArtificialIntelligence #DevSecOps #SoftwareSecurity

[DevOps.com @devopsdotcom]

Open source security company Chainguard has released Workspaces, a service designed to give agents a safe space to do their thing without disrupting the security of existing operations, running them in hardware-isolated ephemeral microVMs built from zero-CVE Chainguard OS packages and FIPS-compliant toolchains.

Credentials stay out of the workspace entirely, replaced by encrypted short-lived tokens, which addresses the bind administrators face today where an agent inherits its creator's full permissions or the user drowns in prompt fatigue approving each request.

Read the full article on how Workspaces handles isolation and what it is up against: https://t.co/dxxnbVh3jm

#Cybersecurity #AIAgents #Chainguard #AppSec