DEVOPSdigest

The Role of WAF in Fintech and Financial Services

April 03, 2025

Dotan Nahum

The financial sector is a prime target for cyber attacks due to its extensive digital presence and sensitive customer data. With the rise of online banking, mobile payments, and fintech innovations, cyber threats continue to evolve, exploiting vulnerabilities in financial applications. To protect transactions, customer data, and business operations, strong security measures are essential. Web Application Firewalls(link is external) (WAFs) and API security(link is external) solutions have become critical for ensuring application integrity and regulatory compliance ...

New EMA Report: OpenTelemetry's Emerging Role in IT Performance and Availability

April 02, 2025

Pete Goldin

OpenTelemetry enjoys a positive perception, with half of respondents considering OpenTelemetry mature enough for implementation today, and another 31% considering it moderately mature and useful, according to a new EMA report, Taking Observability to the Next Level: OpenTelemetry's Emerging Role in IT Performance and Reliability ... and almost everyone surveyed (98.7%) expresses support for where OpenTelemetry is heading — a very strong vote of confidence ...

DevSecOps Evolution Continues but Still in Early Stages

April 01, 2025

Development and security teams are making strides in the evolution to DevSecOps but are still working toward alignment on workflows and metrics, according to DevSecOps Evolution: from DevEx to DevSecOps, a report from Checkmarx ...

API Breaches Persist as Fraud, Bot Attacks, and Generative AI Increase Risks

March 31, 2025

Organizations are failing to protect their APIs despite persistent breaches and increased awareness of security risks, according to 2025 Global State of API Security from Traceable AI ...

Cybersecurity Awesomeness Podcast - Episode 103: Federal vs. State Cybersecurity

March 28, 2025

In Episode 103 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss the plans to move many cybersecurity controls from the federal level to the state level ...

The Rise of Synthetic Data: Opportunities, Challenges, and Strategies for AI Development

March 27, 2025

Michael Armstrong

In today's business ecosystem, there isn't an issue of obtaining data. We share data daily as consumers and business leaders. But in healthcare, where data is sensitive, private, and highly regulated, access to quality, representative datasets is a challenge. This is where synthetic data is emerging — not as a perfect solution but as a vital tool in the AI development toolbox ...

6 AI Trends Shaping the Future of DevOps in 2025

March 26, 2025

Azin Asgarian

Developments such as the rise of agentic AI, open-source advancements, architectural innovations and cost management strategies are reshaping the operational paradigms faced by DevOps teams. To stay ahead in this fast-changing environment professionals should be keeping up with the latest trends and preparing for increased adoption of AI. In this blog, I discuss six recent AI trends and conclude each section with suggestions to help DevOps teams navigate and excel in these rapidly evolving areas ...

The Need for Stronger Non-Human Identity Governance in DevOps and DevSecOps

March 25, 2025

Dwayne McDaniel

According to CyberArk research, Non-Human Identities (NHIs) outnumbered human identities by at least 45-to-1 in 2022 ... At the core of every NHI is an authentication credential, aka a secret. GitGuardian's 2025 State of Secrets Sprawl Report reveals concerning trends in secrets exposure, indicating current management approaches are insufficient to address NHI-related risks ...

Fixing the Fixing Process: Why Automation is Key to Cybersecurity Resilience

March 24, 2025

Ravid Circus

Organizations must streamline remediation processes by adopting a prioritization-first approach — one that moves beyond static risk scores and incorporates real-world exploitability, business context and operational feasibility. Prioritization ensures that security efforts help development teams focus on fixing the right issues rather than drowning in thousands of findings. When security findings are prioritized effectively, development teams can quickly address the most critical risks and then get back to their core work — building software. This requires integrating automation, Continuous Threat Exposure Management (CTEM), and AI-driven exposure assessment platforms (EAPs) ...

Cybersecurity Awesomeness Podcast - Episode 102: Insider Threats

March 21, 2025

In Episode 102 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss insider threats ...

Digital Trust: Security, Data Privacy, and AI Code Reliability Are the Biggest Software Development Challenges for 2025

March 20, 2025

Jason Beres

Following last year's technology challenges with AI integration and limited resources, tech leaders have pinpointed digital trust as a crucial challenge in software development for 2025, according to our sixth annual Reveal Top Software Development Challenges survey. Respondents identified security (51%), AI code reliability (45%), and data privacy (41%) among their biggest software development challenges for the coming year ...

The AI Jobs Tango Begins in Earnest

March 19, 2025

Tiago Miyaoka

Contrary to what you've read, generative AI (GenAI) doesn't spell the end of software developers. Yes, IT has joined a list of business operations earmarked for AI rollout as executives buy into the idea that well-trained algorithms can make their operations more "efficient." Rather than eliminating software engineering, AI is transforming the role, and with employers expecting to increase hiring, the question is how developers leverage AI and adjust to the new role ...

Navigating Developer Challenges: How Low-Code and Generative AI are Shaping the Future of Software Development

March 18, 2025

Tiago Azevedo

In today's dynamic and competitive business environment, development teams are facing unanticipated challenges as they work to meet rising demands for more sophisticated software solutions ... Recent data from the OutSystems 2025 State of Application Development (SoAD) Report quantifies these challenges, revealing just how critical innovation in app development has become, and the opportunities generative AI (GenAI) and low-code present to support development teams in meeting these persistent demands ...

Now Is the Time to Transform DevOps Security

March 17, 2025

Srinivasa Raju Pakalapati

By integrating security practices such as code scanning, automated testing, and vulnerability assessments early on, security teams can proactively identify potential threats. They can also respond to emerging risks and ship secure code with confidence. This shift to continuous, proactive security integration is reshaping how developers approach software delivery. Ultimately, it ensures more secure and reliable products for users ...

Cybersecurity Awesomeness Podcast - Episode 101: Tax Season

March 14, 2025

In Episode 101 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss tax season, and the fraud that goes along with it ...