Researcher warns DevOps Security is Back to the Future

The report warns that many DevOps tools (notably Jenkins) are deployed with weak security — misconfigurations, overly broad or anonymous permissions, poor isolation between masters and workers, and insufficient monitoring — creating significant operational risk. CyberArk researchers advise that security teams, not just developers, must prioritize securing CI/CD environments, gain visibility into privileged access and credentials, and treat automation trust relationships carefully to prevent breaches.