Security

Editor’s picks

Spotlight report: Securing the cloud

This Special Report explores cloud security’s unique challenges, the extent of the threats facing organizations today, and how the rapid adoption of AI is amplifying the problem. You’ll learn where to look for hidden risks and essential strategies and best practices for securing your cloud environment.

By InfoWorld Staff

Oct 1, 20251 min

Cloud ComputingCloud SecuritySecurity

Latest from today

The JavaScript code won’t write itself

This month’s theme is: Keep an eye on the future but hone your coding craft in the now. Start here, with nine timeless JavaScript coding concepts, a look at Nitro.js—fast becoming the go-to server option for JavaScript and Node—and more.

By Matthew Tyson

Oct 3, 20253 mins

Generative AIJavaScriptWeb Development

Chainguard offers malware-resistant JavaScript libraries

By Paul Krill

Oct 2, 20252 mins

Generative AIJavaScriptWeb Development

‘Blame the intern’ is not an agentic AI security strategy

By Jed Salazar

Sep 30, 20258 mins

Artificial IntelligenceData and Information SecurityGenerative AI

When personal ambitions undermine enterprise security

By David Linthicum

Sep 30, 20255 mins

Cloud SecurityData and Information SecurityIT Skills

QR codes become the vehicle for malware in new technique

By Taryn Plumb

Sep 23, 20254 mins

Development ToolsGitHubMalware

Vibe coding and the future of software development

By Isaac Sacolick

Sep 23, 202511 mins

DevSecOpsDevelopment ToolsGenerative AI

NPM attacks and the security of software supply chains

By Matt Asay

Sep 22, 20257 mins

CyberattacksOpen SourceSecurity Practices

Designing AI-ready architectures in compliance-heavy environments

By Rama Devi Drakshpalli

Sep 18, 202512 mins

Artificial IntelligenceData GovernanceData and Information Security

Are cloud providers neglecting security to chase AI?

By David Linthicum

Sep 16, 20256 mins

Cloud SecurityGenerative AIHybrid Cloud

Articles

More hardware won’t fix bad engineering

Engineering fundamentals aren’t just for computer science students. They pay huge dividends in both your systems’ service levels and your company’s balance sheet.

By Matt Asay

Sep 15, 2025 6 mins

DeveloperEngineerTechnology Industry

When AI nukes your database: The dark side of vibe coding

As developers lean on Copilot and GhostWriter, experts warn of insecure defaults, hallucinated dependencies, and attacks that slip past traditional defenses.

By Shweta Sharma

Sep 9, 2025 1 min

DeveloperGenerative AISecurity

Google to add developer verification requirement for Android apps

Scheduled for rollout starting in September 2026, the program aims to restrict malware distribution by requiring developer verification for apps installed on Android devices.

By Paul Krill

Sep 2, 2025 2 mins

Android SecurityMalwareMobile Development

Three tips for building agentic AI systems on cloud platforms

Building truly agentic AI in the cloud means designing for robust control, seamless integration, and continuous adaptation to ensure AI operates safely and effectively.

By David Linthicum

Aug 29, 2025 5 mins

Artificial IntelligenceCloud-NativeIdentity and Access Management

Kazakhstan’s SOS 102: Redefining Public Safety Through Innovation

By IDC

Jan 23, 2025 4 mins

Security

Wave of npm supply chain attacks exposes thousands of enterprise developer credentials

Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.

By Gyana Swain

Aug 28, 2025 5 mins

Application SecurityJavaScript

8 vendors bringing AI to devsecops and application security

From autonomous vulnerability remediation to real-time scrutiny of AI-generated code, AI is impacting security at every stage of the software development process.

By Victor Garza

Aug 28, 2025 14 mins

Application SecurityDevSecOpsGenerative AI

Critical Docker Desktop flaw allows container escape

Missing authentication on the Docker Engine management API for Docker Desktop on Windows and Mac allows attackers to break out from containers and potentially execute malicious code on the underlying host system.

By Lucian Constantin

Aug 26, 2025 4 mins

ContainersDevSecOpsDocker

How does AI affect cloud attack vectors?

Most organizations are unaware of how vulnerable their cloud systems have become. Gaps in preparation could cause serious problems as generative and agentic AI create new attack points.

By David Linthicum

Aug 26, 2025 6 mins

Artificial IntelligenceCloud ComputingCloud Security

A wake-up call for identity security in devops

The GitHub OAuth attack exposed a security blind spot in the ever-growing web of permissions spanning developers, service accounts, and third-party OAuth apps. Here’s how to address it.

By Taylor Parsons

Aug 26, 2025 7 mins

Application SecurityAuthenticationData and Information Security

Securing AI workloads in Azure: A zero-trust architecture for MLOps

Locking down AI pipelines in Azure? A zero-trust, metadata-driven setup makes it secure, scalable and actually team-friendly.

By Vikram Garg

Aug 25, 2025 6 mins

Data GovernanceData and Information SecurityMicrosoft Azure

IBM can’t afford an unreliable cloud

Frequent IBM Cloud outages reveal systemic weaknesses in its control pane, putting its hybrid cloud strategy and customer trust at risk.

By David Linthicum

Aug 19, 2025 5 mins

Access ControlHybrid CloudIdentity and Access Management

Can your cloud provider really scale?

The service disruption in the Azure East US region reveals capacity problems that are happening more often. Enterprises need to rethink their strategies, enforce stricter SLAs, and accept that public clouds are still vulnerable.

By David Linthicum

Aug 15, 2025 5 mins

Critical InfrastructureHybrid CloudTechnology Industry