Researchers at the National Institute of Standards and Technology are creating a framework to secure software development pipelines against cyber and AI-based attacks. The DevSecOps Practices Project, launched in March 2025, focuses on integrating security without slowing innovation by using zero-trust principles. The initiative addresses the growing threat of adversaries infiltrating developer environments and compromising upstream dependencies. NIST is also developing methods to identify, authenticate, and manage autonomous AI agents within these workflows. The project aims to help organizations maintain human oversight while adapting to the rapid speed of agent-driven code generation.
Read the full story at govciomedia.com.
Photo: geralt / Pixabay
