FEATURES

Video Interviews

Most Container Images You Pull Today Are Already Full of Vulnerabilities

Most Container Images You Pull Today Are Already Full of Vulnerabilities

|
Container image security has quietly stayed stuck on the same problem it had a decade ago. Finding vulnerabilities is trivial ...
Why Kubernetes Utilization Is Stuck Below 40%

Why Kubernetes Utilization Is Stuck Below 40%

|
Kubernetes was sold on the premise that clusters would scale themselves into efficient, elastic infrastructure. The reality on most production ...

LATEST FROM DEVOPS.COM

Cursor has disclosed a security incident involving malicious versions of Anthropic’s Claude Code extension that attempted to install a persistent backdoor on developers’ computers. The company initially estimated that up to 5,000 users could have been affected, highlighting the security risks associated with compromised software development tools. The compromised extension packages, identified as Anthropic.claude-code versions […] [...]

Black Duck this week added an artificial intelligence (AI) agent to its portfolio that triages vulnerabilities and then generates and validates fixes for DevSecOps teams to review before applying them. Patrick Carey, vice president of product marketing for Black Duck, said the Signal Agentic Fix agent leverages the company’s static application security testing (SAST) and […] [...]

Endor Labs Adds AI Tool to Generate Fixes for Open Source Vulnerabilities

Endor Labs this week added an artificial intelligence (AI) tool to its portfolio that evaluates every reachable open source vulnerability against a code context graph to generate fixes that typically require only 10 lines of code to be generated and applied. Joe Harrington, a principal product manager for Endor Labs, said AURI Fix for Open […] [...]