TechForge

Subscribe
Subscribe

Category

CI/CD & Release Engineering

Streamline software delivery with CI/CD pipelines and release management. Expert content on CI/CD & Release Engineering at Developer News.

Pillars as Microsoft has added an AI pillar to its Zero Trust Assessment tool and a DevSecOps pillar to its Zero Trust Workshop.

CI/CD & Release Engineering

5th August 2026

Microsoft adds AI and DevSecOps pillars to zero trust tools

Crashing wave surge as Aikido Security says an npm supply chain attack has infected Keyv packages with a variant of the credential-stealing Shai-Hulud malware.

CI/CD & Release Engineering

4th August 2026

Aikido Security tracks Shai-Hulud npm package infection surge

Running bot as Alibaba's Qwen team has released Qwen3.8-Max, a 2.4 trillion parameter model with 95 billion active parameters, pitched at coding, office work, research, and long-horizon tasks run with minimal supervision.

CI/CD & Release Engineering

3rd August 2026

Alibaba Qwen3.8-Max claims 16-day autonomous coding run

GitHub adds approval checks for suspicious Actions workflows

CI/CD & Release Engineering

29th July 2026

GitHub adds approval checks for suspicious Actions workflows

Digital scanner as, according to Socket, GitHub Actions abuse in Packagist repos ran cPanel scanning from temporary cloud runners.

CI/CD & Release Engineering

23rd July 2026

GitHub Actions abuse turned Packagist repositories into scanners

Cisco open-sources Antares AI models for vulnerability detection

CI/CD & Release Engineering

22nd July 2026

Cisco open-sources Antares AI models for vulnerability detection

OpenAI Hugging Face breach during cyber capability evaluation

CI/CD & Release Engineering

22nd July 2026

Is your package proxy a security boundary? OpenAI’s models found out it wasn’t

Ruby gem on a ring as three malicious RubyGems packages published in July 2026 evaded CI detection by targeting developer laptops directly, researchers say.

CI/CD & Release Engineering

20th July 2026

SleeperGem RubyGems attack evades CI to hit developer laptops

Delivery boxes as Socket has identified a software supply chain attack involving compromised AsyncAPI npm packages distributing a Miasma botnet loader.

CI/CD & Release Engineering

15th July 2026

Four AsyncAPI npm packages carry Miasma botnet loader

Vibe coding text in a terminal as a newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities during third-party library reviews.

CI/CD & Release Engineering

10th July 2026

Developers face RCE via Claude Code ‘auto-mode’ exploit

Gear cog as IBM and Red Hat have launched Lightwell to automate vulnerability remediation across enterprise open-source software deployments.

CI/CD & Release Engineering

9th July 2026

IBM and Red Hat automate open-source vulnerability remediation

Unlocked padlock on keys as, according to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD environment variables.

CI/CD & Release Engineering

8th July 2026

Socket: PyPI and npm payment SDK malware compromises CI/CD

Join our Community

Subscribe now to get all our premium content and latest tech news delivered straight to your inbox

Click here

Subscribe

All our premium content and latest tech news delivered straight to your inbox

This field is for validation purposes and should be left unchanged.
Permissions(Required)