mvizard

RT @ashimmy: What do you think about putting all of a tech media company’s content behind a reg wall? Check out my poll in LinkedIn and let me know what you think?

RT @devopsdotcom: AWS launched Continuum for code vulnerabilities, using AI to detect, prioritize and generate fixes for security flaws. Human approval remains required before patches are applied. Read more: #AWS #DevSecOps #Cybersecurity #AI #ApplicationSecurity

RT @TechstrongTV: Machine learning spots patterns like holiday traffic spikes, so IT can fix issues before users ever notice. Mike Vizard (Techstrong Group) with Gowrisankar Chinnayan (@manageengine) #AIOps #ProactiveIT

RT @devopsdotcom: An analysis of 100 million pull requests by Jellyfish finds Claude Code is the AI coding tool used most often to merge them at 31%, followed by GitHub Copilot at 23%, with agents involved in 28% of merged PRs but a median of just 0.5% merged without human review. Throughput roughly doubled since August while release rates rose 48%, suggesting DevOps teams are creating more code than ever that is not making it into production, and the issue they need to address next is the process used to build and deploy software with AI. Read the full findings on why there is no substitute for human judgment across the software development lifecycle: #AI #AICoding #DevOps #ClaudeCode #GitHubCopilot

RT @securityblvd: Most cybersecurity teams already have plenty of threat intelligence feeds, and the challenge has always been converting all those advisories into something actionable. Cyware's three Last Mile Agents, a PIR Agent, a Vulnerability Watch Agent and a Threat Briefing Agent, match every incoming advisory against the IT environment being secured so security teams stop crying wolf, because an alert about a vulnerability that isn't reachable or never loaded in memory is exactly how a security team gets ignored by IT. Read the full article on why the onus for triaging alerts now falls on the security team itself: #Cybersecurity #ThreatIntelligence #AIAgents #Cyware

RT @TechstrongTV: Anthropic's IPO bet, open source strain and GitHub security: @mvizard @poller @jswartz @JeffReichCSO @TracyRagan examine the stakes. #Anthropic #OpenSource #GitHub #DevSecOps #AISecurity

RT @securityblvd: Aviatrix today added Clearance, a default-deny capability that blocks outbound and lateral access the moment a breach is detected, with a monitor mode that shows exactly which connections a block would affect before anyone enforces it. That visibility addresses the real hesitation, since teams can't apply granular policies when they don't know what those policies would break, and that hesitancy plays into the hands of adversaries who inflict more damage with each passing second. Read the full article on why containment is becoming the priority when patching every workload isn't possible: #Cybersecurity #CloudSecurity #Aviatrix #ZeroTrust #InfoSec

RT @securityblvd: Mondoo has extended its exposure management platform so AI can close the remediation loop, scanning source code, catching internet-facing exposures and delivering validated pull requests through Microsoft Intune and CrowdStrike Falcon, with each fix tested on a real system and rescanned to confirm it holds. That matters with roughly 180 new CVEs forecast this year, because humans are becoming bottlenecks that won't keep up with the rate of change. Read the full article on how defenders are trying to match machine speed: #Mondoo #AI #AIAgents #InfoSec #DevSecOps #Cybersecurity

RT @TechstrongTV: Social reform, PHP flaws and NVIDIA challengers: @mvizard @ashimel @jswartz @GuyCurriersFeed + Drew Gutstein and Jaime Hampton examine the stakes. #Privacy #Section230 #PHP #Cybersecurity #AIChips

RT @TechstrongIT: Broadcom is adding HyperArmor to VMware ESX, introducing real-time threat blocking, script allowlisting and SSH multi-factor authentication to protect hypervisors from emerging attacks. Read more: #Broadcom #VMware #Cybersecurity #Virtualization #InfrastructureSecurity

RT @securityblvd: Descope has updated its Agentic Identity Hub to 3.0, adding governance capabilities including an Agentic Governance Suite with self-service onboarding and approval workflows so every agent has a documented purpose, an accountable owner and least-privilege access, plus MCP gateway integrations and single sign-on for AI agents. That matters because most agents today are deployed with no record of who requested them or who owns them, authenticating with static secrets that leak and are rarely rotated. Read the full article on why agent identity is becoming the governance problem to solve first: #Cybersecurity #AIAgents #IdentitySecurity #AIGovernance

RT @TechstrongTV: Proactive IT management powered by AI predicts ticket volume from outages, allowing for mitigation before issues arise. Mike Vizard (Techstrong Group) with Priya Kumar (@manageengine) #AI #ITManagement

RT @securityblvd: Sweet Security this week added virtual patching to its runtime security platform, letting teams identify a vulnerability from a catalog and apply a policy control to every node running an affected workload with a single click, then remove it once a real patch ships. That matters because in the AI era exploits often appear days or weeks before a fix exists, and with this month already being called Black October for its patch volume, few teams will keep pace with everything they're being asked to install. See how virtual patching works when the patch doesn't exist yet: #Cybersecurity #CloudSecurity #VirtualPatching #SweetSecurity

RT @devopsdotcom: A malicious HTML file sitting in a public repository was enough to silently exfiltrate credentials, keys and tokens from Claude Code Desktop, because the preview pane rendered large files as file:// URLs with direct local filesystem access instead of inside its sandbox. Anthropic has already shipped a fix, but Noma Security's disclosure points at a broader problem, since many AI coding tools have been added to software supply chains without ever being vetted by DevSecOps teams. Read the full article on the SneakPeek exploit and what teams should inventory now: #Cybersecurity #DevSecOps #ClaudeCode #Anthropic

RT @TechstrongTV: AI agents will need IT support too. @ManageEngine's Priya Kumar tells Mike Vizard why clean data comes before an AI service desk. ▶ Watch the full interview: #ServiceDesk #ITSM

RT @Techstrongai: Harness this week added AI Budgets to its Cost Management Agent, letting organizations set spending policies by user, team, developer, model or project and see the tokens going into input, output and reasoning for any given task. Built first as an internal tool, it delivered a 37% savings according to Harness's own FinOps director, and the point is to stop treating tokens as though they were a virtually unlimited resource. Read the full article on how organizations are starting to ration AI spending: #AgenticAI #FinOps #Harness #AICosts #DevOps

RT @Techstrongai: Couchbase has extended its database to support AI applications with vector search, semantic caching and integration with Amazon Bedrock, plus a managed MCP server and Agent Memory services that let agents persistently access profiles, conversation history and vectorized facts across sessions. Legacy databases are not optimized for AI agents, as Couchbase's AI chief puts it, and the challenge now is supporting those workloads without adding another backend platform to production. Read the full article on how Couchbase is evolving into a data plane for AI: #Databases #Couchbase #AI #AIAgents #VectorSearch

RT @TechstrongTV: Will autonomous systems always need a human in the loop? In critical areas like healthcare, that's a major governance question. Mike Vizard (Techstrong Group) with Romanus Prabhu Raymond (@manageengine) #AI #HumanInTheLoop

RT @devopsdotcom: An ActiveState survey of 307 enterprise technology leaders found 94% of organizations using AI coding tools now depend on more open source software as a result, just as AI models surface more open source vulnerabilities that can be exploited in hours. Half admit dependencies reach production without review or approval, 32% traced a security incident to an unmanaged dependency in the past two years, and 83% say the cost of managing those risks is rising. Read the full findings on the paradox at the center of AI-assisted development: #Cybersecurity #OpenSource #SupplyChainSecurity #AICoding

RT @devopsdotcom: GemDB has added a Visual Studio Code extension that lets developers and AI agents use Python code to generate schemas for its object database, so objects persist exactly as they exist in application code and any change to the code changes the schema without mapping, migration or a DBA. Adding a field to an object now replaces what used to require join tables, foreign key definitions and backfill scripts, which matters as the pace of application development accelerates. Read the full article on what GemDB Code includes and where it fits in DevOps workflows: #Databases #DevOps #AIAgents #DeveloperTools