Operations | Monitoring | ITSM | DevOps | Cloud

GitHub's AI coding boom is exposing a major problem in software security. As AI coding agents generate more code and developers push commits faster than ever, can traditional DevSecOps and shift-left security practices keep up? In this episode of ShipTalk, cybersecurity leader Jake Bernardes breaks down GitHub Universe's AI coding trends and argues that shift-left security is dead in the age of AI-generated code.

What is the Harness Software Delivery Agent? Harness Software Delivery Agent is an AI-powered software delivery solution that helps teams automate CI/CD pipelines, infrastructure workflows, deployments, and troubleshooting, moving code from commit to production while enforcing existing policies and approvals. In this video, we explain how Harness Software Delivery Agent works and how it helps DevOps teams, platform engineers, and developers automate software delivery.

Google just reported $51.4 billion in quarterly capital spending. Anthropic has filed for an IPO. And GitHub's AI coding explosion is raising serious questions about software security. Is the AI boom creating real business value, or are we heading toward an AI bubble correction? In this episode of ShipTalk, Adam Arellano and Martin Reynolds are joined by cybersecurity expert Jake Bernardes, CSO at Gambit, to break down three major developments reshaping artificial intelligence, software development, and cybersecurity.

The PHP2Shell vulnerability triggered a massive cybersecurity crisis. But the real story isn't just about the PHP security flaw. It's about who broke the rules, who was responsible, and whether one controversial decision made everything worse. In October 2026, researchers uncovered critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that threatened websites and applications across the internet. As security teams scrambled to prepare patches, the coordinated disclosure process began falling apart.

Anthropic's AI agents are logging 6x more hours than the humans directing them. Is this the beginning of a fundamental shift in how businesses operate? New data from Anthropic reveals how AI agents are transforming the workforce, accelerating software development, and changing what employees actually do every day. But the biggest story isn't just AI productivity. It's what happens next.

What if compliance and audits are actually symptoms of a bigger security problem? Neil Watkins from Burns & McDonnell challenges traditional security and compliance processes, explaining how automation and continuous compliance can help organizations deploy software faster while collecting real-time evidence that security controls are working. The future isn't just about passing audits. It's about proving compliance continuously, without relying on manual inspections.

Was this the worst week in cybersecurity? AI-discovered PHP2Shell vulnerabilities, the LiteLLM supply chain attack, and reports of unauthorized AI agents accessing bank accounts are exposing serious weaknesses in software security. But is this really a cybersecurity problem, or has AI exposed decades of poor software engineering decisions? In this episode of ShipTalk, Martin Reynolds and Adam Arellano break down a remarkable week in AI security and debate whether engineering or security teams should be responsible for fixing what comes next.

China’s AI and chip stocks have fallen sharply, raising a bigger question: could the same thing happen in the U.S.? With Microsoft, Alphabet, and Amazon reporting earnings, investors are looking for signs that cloud growth can justify the enormous sums being spent on AI. Is this a warning for the U.S. market, or can Big Tech’s AI investments deliver the growth investors expect?

Microsoft is offering voluntary buyouts to 60,000 employees—more than a quarter of its workforce—while investing billions into AI infrastructure. But here's the bigger question: What happens when experienced engineers leave and AI-generated code keeps accelerating? AI can write code faster than ever. But deploying it safely, securely, and at scale? That's becoming the real bottleneck. Is Microsoft funding AI with headcount instead of efficiency?

A hidden recording device. A former OpenAI engineer. And a possible connection to the Saudi government. What started as a suspicious discovery behind a television inside OpenAI has turned into a federal investigation with potential national security implications. The FBI is investigating whether former OpenAI engineer Abdulrahman Alfozan was involved in corporate espionage, with prosecutors pointing to alleged connections to a member of the Saudi royal family.