a Futurum companyTag
104 articles
AI
In 2025 alone, security firm GitGuardian detected 28.65 million new hardcoded secrets exposed in public GitHub commits — a 34% increase year over year and the largest single-year jump the company has recorded in five years of publ…
Showing 1–24 of 104
Blogs
ZCode’s default-on indexing feature reportedly uploaded entire developer workspaces to cloud storage, highlighting why AI coding assistants should be treated as privileged software…
Blogs
CI/CD pipelines often hold privileged credentials, execute third-party code and connect directly to production, making pipeline security one of the most overlooked risks in modern…
Blogs
HashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks.
AI
The emergence of AI has brought endless possibilities and innovative opportunities in today’s ever-changing, fast-paced technology landscape. AI is helping development teams produc…
Blogs
Not every infrastructure pull request deserves the same review path. A tag change in a development account and a network-policy change in production should not create identical rev…
CI/CD
The threat group behind the notorious Mini Shai-Hulud worm last month put the complete source code for the malware into a GitHub repository, essentially open sourcing the threat so…
DevSecOps
You can’t make this crap up. You just wish you could. Jer Crane, founder of the small vertical software company, PocketOS, reported on X that the AI Cursor coding agent and a Railw…
AI
The supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand,…
Blogs
Weekly DevOps jobs roundup, this week highlighting top roles in Massachusetts, New Jersey, Chicago, Charlotte and Seattle, with pay ranges and hiring trends to help DevOps pros adv…
Blogs
Explore the emerging crisis in application delivery caused by tool fragmentation in modern software development. This article discusses the need for semantic interoperability, cont…
Blogs
Explore the critical role of secrets management in CI/CD pipelines and its impact on cybersecurity. This article highlights the risks of credential exposure, the importance of impl…
Blogs
In today’s cloud-native, hybrid-multi-cloud world, DevOps teams face a new paradox. They can deploy code faster than ever, but their visibility often lags. Traditional monitoring t…
Blogs
The rapid pace at which quantum computing is evolving is unprecedented, which is both good and bad news. While quantum computers can help solve complex problems at unimaginable spe…
Blogs
Encryption keys are the fulcrum of trust in cloud systems. They protect data, enforce compliance boundaries, and underpin every secure transaction. But as organizations move deeper…
Blogs
Env Zero (formerly env0) has revamped its Cloud Governance Platform with AI and MCP support, including a new Static Code Analyzer Agent to streamline IaC governance, compliance, an…
Blogs
DevOps teams across organizations are suddenly finding themselves responsible for security with no roadmap. One day, teams are focused on deployment velocity and infrastructure aut…
Blogs
Amazon Web Services (AWS) this week made Amazon Inspector, a code scanning tool for surfacing vulnerabilities that is designed to be natively integrated with GitHub and GitLab plat…
Blogs
Code-to-cloud security is considered the future of application security, as it helps lower expenses, prevents data breaches and ensures compliance infringement, thereby protecting…
Blogs
StackGen introduces automated cloud-to-cloud migration capabilities, eliminating manual infrastructure work while maintaining security and compliance. Here’s what DevOps teams need…
Sponsored Content
Cloud migration is no longer a question of if—it’s a matter of when. But the mere mention of it can cause IT security leaders to conjure up images of data breaches, compliance nigh…
Blogs
AWS today previewed a GenAI tool for its AWS CloudTrail data lake and is focusing most of its cybersecurity efforts on a new generation of cloud infrastructure that is inherently m…
Blogs
By implementing DevSecOps practices, organizations can proactively address security concerns early in development, reducing vulnerabilities.
Blogs
Permiso today launched an open source tool dubbed CloudGrappler that surfaces indicators of compromise in cloud computing environments.
