Rubrik adds recovery features for Azure DevOps and GitHub
The announced DevOps cyber recovery capabilities are expected to reach general availability in the coming months.
Stories per day · 30 days
3 RSS
Relatedgithub6gitlab3supply-chain3sbom2snyk2anthropic1appsec1azure-devops1backup1ci-cd1cicd1claude-security1code-scanning1container-security1credentials1cve-2026-972291cyclonedx1gitguardian1
27 stories, newest first · one card per story
Stories tagged #devsecops
GitHub previews npm firewall that blocks packages at install
Enterprise Cloud customers can enforce malware advisories, severity, attestations, new install scripts and a package-age cooldown.
Claude Security adds continuous repository scans in public beta
Enterprise customers get automatic rechecks that mark fixes and reopen recurring findings, with no fixed scan schedule.
1
Buyer’s guide compares 12 DevSecOps platforms for 2026
The roundup judges GitHub, GitLab, JFrog, Snyk, and others on scanning depth, workflow fit, and pricing.
12 Best SBOM Tools Compared (2026): Features & Pricing
A 2026 roundup ranks 12 SBOM tools, naming Anchore Syft the best free generator and FOSSA and Cybeats top managers.
6
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing
A 2026 comparison ranks native and dedicated tools for securing CI/CD pipelines.
10 Best Container Image Scanning Tools Compared (2026): Features & Pricing
A 2026 roundup compares ten container image scanners, from free Trivy and Grype to Sysdig, Wiz, and Chainguard.
6
10 Best Secrets Detection Tools Compared (2026): Features & Pricing
A 2026 comparison ranks ten secrets-detection tools, from GitGuardian and TruffleHog to free GitHub and Gitleaks scanning.
8
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab patched CVE-2026-97229, a CVSS 10.0 bug letting unauthenticated users run code on CE and EE servers.
2
Top 10 Best Container Image Scanning Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Trivy, Sysdig, and Wiz atop container image scanners, favoring context over raw CVE counts.
6
12 Best Software Supply Chain Security Tools Compared (2026): Features & Pricing
A 2026 buyer's guide compares 12 software supply-chain security tools by attack surface, features, and pricing.
10
Top 10 Best IaC Security Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Wiz, Snyk IaC, and Checkov atop ten infrastructure-as-code security tools.
12 Best SAST Tools Compared (2026): Features & Pricing
A 2026 comparison ranks twelve SAST tools, with CodeQL, Snyk Code, and SonarQube leading their lanes.
Top 10 Best IAST Tools in 2026 [Ranked & Scored]
A 2026 IAST ranking puts Contrast Security first, then Black Duck Seeker and Datadog.
Top 10 Best SAST Tools in 2026 [Ranked & Scored]
A 2026 editorial ranking puts Snyk Code first among ten SAST tools, ahead of CodeQL and Semgrep.
The Credential Layer Is Expanding Faster Than Security Teams Can See It
GitGuardian says secrets sprawl is outpacing visibility as commits, agents, and leaked AI credentials multiply.
3
VSCode's SSH Agent Is Bananas
Thomas Ptacek details how VSCode Remote SSH installs a persistent WebSocket agent with filesystem, file-editing, and shell access, resembling remote-access tooling.
Top 10 Best Container Security Tools in 2026
2026 roundup ranks Aqua, Sysdig, Prisma Cloud, Wiz, Snyk and CrowdStrike among the ten best container security tools across build-ship-run.
4
A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove
GitLab patched maximum-severity CVE-2026-85706, an unauthenticated path traversal enabling arbitrary file reads; CISA added it to KEV amid observed in-the-wild probes.
CISA: Hackers now exploit max severity GitLab flaw in attacks
CISA added max-severity GitLab CVE-2026-85706 to its exploited-flaws catalog after watchTowr observed probing of unpatched servers.
2
GitLab’s critical flaw is already drawing internet-wide probes
GitLab patches two critical flaws (CVE-2026-85706 CVSS 10.0, CVE-2026-87719) as WatchTowr observes internet-wide probing of the unauthenticated file-read bug.
4
GitLab urges users to patch max severity path traversal flaw
GitLab urges self-managed users to immediately patch a maximum-severity path traversal flaw (CVE-2023-2825) enabling unauthenticated arbitrary file reads.
What It Took to Reach 1 Billion Build Manifests
Chainguard doubled container build manifests to over 1 billion in six months, powered by Factory 2.0's agentic self-correcting rebuild system.
2