Harness Adds AI Agents to Automate DevSecOps Workflows at Machine Speed

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

Harness today added multiple artificial intelligence (AI) agents and a virtual patching capability to its portfolio to automate DevSecOps workflows at a time when the number of vulnerabilities being discovered in code continues to exponentially increase. The AI agents include one that has been added to the static application security testing (SAST) tool that Harness already provides. In addition, there is now a set of AI agents that automatically triage scanner findings to prioritize remediation efforts based on exploitability, create and validate a fix, and open a pull request for a developer to review and approve. DevSecOps teams can also opt to add their own AI scanners within their pipelines. There is also now a Zero-Day Agent that monitors threat intelligence feeds for newly disclosed zero-days on a 24/7 basis. Once a zero-day vulnerability is discovered, the AI agent instantly identifies every affected pipeline and artifact and generates a validated fix ready for review within minutes. Finally, Harness has added a capability that enables DevSecOps teams to apply a virtual patch the moment a vulnerability is discovered during testing that requires no code changes. Rahul Sood, general manager of application security at Harness, said collectively these additions make it possible for DevSecOps teams to respond to issues at machine speed. That’s crucial at a time when advanced AI models are now capable of discovering thousands of vulnerabilities in applications that cybercriminals can now create exploits for them in a couple of hours, he added. Many DevSecOps teams are …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen: Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://devops.com/harness-adds-ai-agents-to-automate-devsecops-workflows-at-machine-speed/
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.