DevOps.com

DevOps Experience 2026 returns on September 24, bringing together the engineers, architects, and platform leaders building and operating modern software systems at scale. This year’s event focuses on agentic AI in DevOps, including how teams are deploying, governing, and scaling AI agents across development pipelines while maintaining reliability, security, and operational control. Join 12+ sessions across four focused tracks and hear directly from practitioners working through these challenges in production. 📅 September 24, 2026 ⏰ AM–3:00 PM ET 🎟️ Free to attend Early registration is now open. Claim your free spot today: devopsexperience.com #DevOps #AI #PlatformEngineering #DevSecOps #SoftwareDevelopment

The EU Cyber Resilience Act requires more than a new security tool. Join @BlackDuck_SW to learn what the CRA actually requires, how to strengthen software supply chain security, and where organizations are falling short. Register: buff.ly/A3juS31

AI coding adoption is easy to measure. Engineering impact isn't. Join Harness to learn how teams connect AI activity to delivery velocity, quality, developer productivity, and cost to prove real business value. Register: buff.ly/wfmrEW5

Inflection AI is hiring a Senior DevOps Engineer focused on AI and cloud infrastructure in Palo Alto, Trovo Health needs a Lead DevOps Engineer in New York, and Skylight seeks a remote Senior/Staff DevOps Engineer. DevOps professionals with AI infrastructure, healthcare, or remote-first experience will find these three worth a closer look. See all ten openings and their requirements here: zpr.io/EMNbQYi262Am #DevOps #Jobs #AIInfrastructure #AgenticAI

Rocky Linux-related company CIQ has launched a major upgrade to its Ascender Pro automation platform, enabling it to detect issues across Linux servers, decide what to do, and automatically apply fixes. The new release adds Reaqt for rule-driven remediation, Federated Inventories for cross-environment routing, a local Galaxy registry, and an open-source proxy, all positioned as a drop-in AWX-compatible alternative at 60–80% lower total cost than per-node Ansible platform pricing. Read the full article to see how CIQ is removing the operator from Linux fleet repair: zpr.io/beKu2JGHhu7U #CIQ #AscenderPro #Linux #DevOps

The US government and leading AI developers are weighing new restrictions to block Chinese firms from using distillation to replicate frontier models, a practice that American companies argue transfers billions in R&D while narrowing the technology gap. Anthropic and OpenAI have detailed industrial-scale output harvesting by Alibaba, DeepSeek and others, prompting lawmakers to propose sanctions and exposing the tension between AI companies’ demands for model protection and their own reliance on broad data ingestion. Read the full article for the policy fault lines reshaping the US–China AI competition: zpr.io/Aq6iEyVxtRSP #AI #Distillation #USChina #TechPolicy

Site reliability engineering just got a new job description. Alan Shimel talks with Harish Gaggar, Staff Software Site Reliability Engineer at Credit Karma, about building secure, repeatable platforms for enterprise AI agents. Watch: techstrong.tv/videos/intervi… #AI

Inventory is table stakes. Every npm compromise this year lived inside a package you already inventoried - poisoned Axios still lists as Axios. The gap isn't what's in the dep tree, it's what the code does when install runs. x.com/devopsdotcom/s…

Coordinated campaigns are abusing GitHub’s API and activating dormant ghost accounts to map organizations and their developers, with some operations advancing from reconnaissance to cloning private repositories and exfiltrating data. Read more and find out what Datadog researchers uncovered and which indicators organizations should monitor: zpr.io/939rHti4Uzee #GitHub #API #Cybersecurity #DevOps

Security researchers from Tel Aviv University, Technion, and Intuit have detailed “HalluSquatting,” a technique that weaponizes LLM hallucinations by predictably registering the non-existent package and repository names AI coding agents fabricate, delivering malware the moment those agents pull and install them. Learn more about how HalluSquatting combines promptware and traditional malware kill chains: zpr.io/ctNSHTn6vvLS #AI #HalluSquatting #Cybersecurity #LLM

You can't protect what you can't inventory. Hidden open source and AI dependencies are creating new software supply chain risks. Learn how security teams are improving visibility before risks become breaches. Register: buff.ly/alRwnzN

IBM has rolled out a major update to its Bob agentic development platform, adding multi-agent coordination, a built-in spend dashboard, and prebuilt modernization workflows for COBOL, IBM i, and Java codebases. The release addresses the shift that has turned code generation from the primary bottleneck into a review, cost, and governance challenge, with new subagents and Bobalytics giving engineering leaders per-model spend visibility. Find out more here: zpr.io/ejyE2Z7VHvRs #IBM #AgenticAI #SoftwareDevelopment #DevOps

GitHub has made its redesigned pull request dashboard generally available, introducing an Inbox that organizes review requests, CI failures, and merge-ready PRs alongside saved views and advanced search. See the full feature set and what it signals for engineering team workflows: zpr.io/kChesiTeBbCC #GitHub #PullRequests #AI #DevOps

The creators of OpenClaw, the popular but highly insecure AI agent framework, have launched the OpenClaw Foundation to bring formal governance and security discipline to the project. The nonprofit will manage the codebase, set technical roadmaps, and implement a vulnerability disclosure program in response to the growing list of security incidents that have followed the tool’s rapid adoption. Learn more about the foundation’s structure and its plans for the OpenClaw ecosystem: zpr.io/SZixSKkuJcuV #OpenClaw #AIagents #Security #OpenSource

Mike Vizard interviews TuxCare CEO and Founder Igor Seletskiy on how AI could weaponize vulnerability chains, automate exploits and force enterprises to rethink patching, live patching and prioritization. Watch: techstrong.tv/videos/intervi…

Microsoft is warning enterprise customers that AI-driven vulnerability discovery will accelerate both the volume and cadence of Windows security patches, and is urging IT teams to deploy updates within three days to keep attackers from exploiting newly surfaced flaws. Learn how the MDASH agentic scanning harness, Autopatch, Hotpatch, and a rewritten Secure Development Lifecycle are reshaping the patching burden: zpr.io/xVpZY2eSPga7 #AI #Cybersecurity #Microsoft #ITSecurity

Alphabet, Amazon, Meta, Microsoft, and Oracle have collectively piled on roughly $350 billion in new debt since 2019 to bankroll an AI data center surge, a high‑stakes wager that is already flashing warning signs from chilly bond demand to negative free cash flow and a ratings downgrade. Learn why executives remain resolute even as equity investors turn cautious, and how the cautionary tale of Intel hangs over this capital‑intensive pivot: zpr.io/avyv5qHtvUtS #AI #DataCenters #Debt #Amazon

A Windows device ID (not his VPN) is what caught an alleged Scattered Spider hacker. Today's Techstrong Gang also covers China's "backdoor" warning on Claude Code and ex-GitHub CEO Dohmke's new Git network for AI agents ($60M seed, $300M valuation). x.com/i/broadcasts/1…

Microsoft’s Agent Framework orchestration reached stable 1.0 this week, introducing a manager‑led coordination pattern called magentic that assigns work, checks progress, and automatically rewrites the plan when a team of agents stalls. The pattern directly tackles a gap that multi‑agent research has flagged around reliable stopping decisions and orchestration‑level verification. Learn how the manager‑agent model shifts coordination logic into framework‑owned infrastructure: zpr.io/LqwW5aNfXEzR #Microsoft #AI #Magentic #MultiAgent