Get your expert

The develeap news feed

A curated, ranked stream of the news that actually moves our craft.

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution Security 9.0 Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution Jul 15, 2026 Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware Security 9.0 Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware Jul 15, 2026 Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands Security 9.0 Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands Jul 15, 2026 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot Security 9.0 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot Jul 14, 2026
Build enterprise search for agents with Amazon Bedrock Managed Knowledge Base AI 8.0
AWS ML Blog

Build enterprise search for agents with Amazon Bedrock Managed Knowledge Base

Amazon Bedrock Managed Knowledge Base is now generally available, offering a fully managed agentic retrieval solution that handles scaling, embedding model selection, reranking, chunking, and document access control. Teams can connect enterprise data sources or crawl the web and move from zero to retrieval in minutes instead of days or weeks. The service provides sensible defaults for quick setup while allowing customization of embedding models, rerankers, and chunking strategies for production workloads.

#RAG #agents #knowledge-base #retrieval

Read article →
Introducing Grok on Amazon Bedrock AI 8.0
AWS ML Blog

Introducing Grok on Amazon Bedrock

xAI's Grok 4.3 is now generally available on Amazon Bedrock, featuring a 1 million token context window, configurable reasoning effort, strong tool use, and structured output support. The model runs on Bedrock's Mantle inference engine and ranks #1 on Artificial Analysis Omniscience and Tau2 Telecom benchmarks for hallucination rate and tool calling in customer support scenarios. Grok 4.3 accepts text and image input and supports stateful multi-turn conversations for agentic workloads.

#LLM #agents #tool-use #reasoning

Read article →
Integrating Context-Aware Video AI Agents Into Enterprise Workflows AI 7.0
NVIDIA Developer Blog

Integrating Context-Aware Video AI Agents Into Enterprise Workflows

NVIDIA covers building video analytics AI agents that perceive, reason, and act on video streams, then integrate with enterprise systems like content management, messaging, databases, and ticket queues. The post addresses the challenge of connecting agentic AI outputs to existing workflows and knowledge bases.

#agents #video-analytics #tool-use #enterprise-integration

Read article →
Scaling Agentic AI Factories Through Extreme Co-Design with NVIDIA BlueField AI 8.0
NVIDIA Developer Blog

Scaling Agentic AI Factories Through Extreme Co-Design with NVIDIA BlueField

NVIDIA describes how agentic AI changes infrastructure patterns for AI factories, where a single request triggers many model calls, tool invocations, memory lookups, and policy checks. The post covers using BlueField DPUs to move, protect, and reuse data fast enough to support concurrent agents carrying context across steps and services.

#agents #infrastructure #MLOps #data-movement

Read article →
Building a restaurant telephony AI host with Amazon Bedrock AgentCore and Amazon Nova 2 Sonic AI 7.0
AWS ML Blog

Building a restaurant telephony AI host with Amazon Bedrock AgentCore and Amazon Nova 2 Sonic

A walkthrough for building a voice ordering system using Amazon Bedrock AgentCore, Amazon Nova 2 Sonic for real-time speech, and the Model Context Protocol (MCP) to connect to restaurant backends. The system deploys via AWS CDK with a SIP gateway on Amazon ECS and AWS Fargate to bridge phone calls, warming the agent session before the caller hears dead air. The solution addresses restaurants missing 150 calls per location monthly, with 60 percent being order or reservation requests.

#agents #voice #real-time #MCP

Read article →
Develop Lightweight USD Runtimes Faster with AI Agents AI 6.0
NVIDIA Developer Blog

Develop Lightweight USD Runtimes Faster with AI Agents

NVIDIA shows how AI agents accelerate USD runtime development. The post covers using agents to adapt OpenUSD implementations for specific memory footprints and integrate CAD data, simulation assets, and real-world telemetry into physically accurate scene descriptions.

#agents #USD #OpenUSD #physical-AI

Read article →
Kubernetes won the container decade. Google's Agent Substrate wants the next one. AI 8.0
The New Stack

Kubernetes won the container decade. Google's Agent Substrate wants the next one.

Google introduces Agent Substrate, a scheduling layer that bypasses Kubernetes' API server to handle AI agent workloads more efficiently. The article explains why agents, which behave like OS processes rather than long-running services, require different orchestration primitives than traditional Kubernetes workloads.

#agents #Kubernetes #scheduling #infrastructure

Read article →
Built Technologies builds an AI-powered document intelligence solution on AWS to power agents across real estate finance AI 7.0
AWS ML Blog

Built Technologies builds an AI-powered document intelligence solution on AWS to power agents across real estate finance

Built Technologies deployed a document intelligence engine on Amazon Bedrock and AWS Intelligent Document Processing (IDP) Accelerator to automate real estate finance workflows. The system extracts structured data from domain-specific documents (draw packages, loan agreements, insurance certificates) and serves as the foundation for agentic products that review construction draws, analyze agreements, and validate coverage across the real estate lifecycle.

#agents #document processing #Bedrock #vision

Read article →
Agentic vision: Building visual intelligence with Amazon Bedrock and MCP servers AI 7.0
AWS ML Blog

Agentic vision: Building visual intelligence with Amazon Bedrock and MCP servers

Demonstrates integration of Computer Vision, agents, and Model Context Protocol (MCP) servers to unify perception, decision-making, and action in a single framework. The Computer Vision MCP Server enables agents to process visual information and make decisions through a standardized interface, reducing integration complexity across vision APIs and agent orchestration.

#agents #MCP #vision #Bedrock

Read article →
Monitor Amazon SageMaker Pipelines cross-account with custom Amazon CloudWatch dashboards Cloud 6.0
AWS ML Blog

Monitor Amazon SageMaker Pipelines cross-account with custom Amazon CloudWatch dashboards

Solution for centralizing SageMaker Pipelines monitoring across multiple AWS accounts and regions using CloudWatch custom dashboards, Lambda, DynamoDB, and EventBridge. Includes AWS CDK example to eliminate manual account-switching overhead and provide near-real-time visibility into distributed MLOps workloads.

#MLOps #SageMaker #observability #CloudWatch

Read article →
Towards demystifying the creativity of diffusion models AI 6.0
Google Research Blog

Towards demystifying the creativity of diffusion models

Google Research explores the mechanisms underlying creative behavior in diffusion models, moving beyond black-box understanding to reveal how these systems generate novel outputs. The work provides theoretical and empirical insights into the generative process that could inform model design and evaluation.

#diffusion models #generative AI #interpretability #research

Read article →
Atlassian wants developers to finally like Jira AI 7.0
The New Stack

Atlassian wants developers to finally like Jira

Atlassian launched AI-powered features including a built-in Jira Coding Agent that converts work items to pull requests, integrations with Claude Code, Cursor, and GitHub Copilot, and a Jira Planner that generates technical specs from project history. Automation rules can route bug fixes and vulnerability remediation to agents automatically.

#agents #LLM #tool-use #CI/CD

Read article →
Data-Native AI Agents: Why Agents Must Move to Your Data AI 7.0
Databricks Blog

Data-Native AI Agents: Why Agents Must Move to Your Data

Databricks argues that enterprise AI agents should operate on data in place rather than moving data to the LLM, reducing latency and cost while improving context freshness. The post outlines architectural patterns for co-locating agent execution with data warehouses.

#agents #data architecture #enterprise AI #latency optimization

Read article →
Model Routing Is Simple. Until It Isn't. AI 7.0
Hugging Face Blog

Model Routing Is Simple. Until It Isn't.

IBM Research examines the complexity of routing requests across multiple models in production. The post dives into edge cases, latency trade-offs, and architectural decisions that emerge when scaling model serving beyond toy examples.

#model-serving #inference #routing #MLOps

Read article →
Exploring Hierarchical Interest Representation For Meta Ads Deep Funnel Optimization AI 6.0
Meta Engineering

Exploring Hierarchical Interest Representation For Meta Ads Deep Funnel Optimization

Meta describes Hierarchical Interest Representation, an upstream representation layer using transformer-based graph learning with bias-aware attention to unify embeddings across users, advertisers, and products. The system combines LLM-enriched multimodal content with engagement signals to generate universal embeddings and Bag-of-Meaning tokens, trained end-to-end on billions of Meta ads interactions to improve deep-funnel ranking and personalization.

#embeddings #graph learning #LLM #ranking

Read article →
OpenAI's first gadget is the $230 Codex Micro macropad Other 5.0
The New Stack

OpenAI's first gadget is the $230 Codex Micro macropad

OpenAI launched the Codex Micro, a $230 programmable macropad co-developed with Work Louder, featuring six dedicated agent keys, a dial, joystick, and Bluetooth/USB-C connectivity. The device targets Codex users (9 million and growing) with hardware shortcuts for agentic coding workflows.

#hardware #agents #Codex #peripherals

Read article →
HAMi becomes a CNCF incubating project DevOps 8.0
CNCF Blog

HAMi becomes a CNCF incubating project

HAMi, a Kubernetes GPU virtualization middleware, graduated to CNCF incubating status. It slices physical GPUs (and NPUs, DCUs, MLUs) by memory, core, or device count with hard runtime isolation, supports multi-vendor hardware via a single interface, and uses binpack, spread, and topology-aware scheduling policies without requiring application code changes.

#Kubernetes #GPU #scheduling #virtualization

Read article →
How to solve PostgreSQL multilingual full-text search limitations with AlloyDB AI AI 7.0
Google Cloud Blog

How to solve PostgreSQL multilingual full-text search limitations with AlloyDB AI

AlloyDB now integrates Gemini AI Functions natively to enable intelligent full-text search for logographical languages (Chinese, Japanese, Korean) where traditional whitespace tokenization fails. This eliminates the need for complex ETL pipelines and row-wise API calls by performing word segmentation and stop-word removal directly within the database using Gemini's multilingual capabilities.

#AlloyDB #PostgreSQL #full-text search #LLM

Read article →
IDC: Why the right networking approach is foundational to agentic AI AI 6.0
Google Cloud Blog

IDC: Why the right networking approach is foundational to agentic AI

IDC's 2026 AI in Networking survey reveals that networking infrastructure is a primary bottleneck for moving agentic AI from pilot to production. Security concerns (32.6%), automation challenges (26.8%), and talent constraints (24.7%) are cited as leading causes of AI project delays, with agentic AI amplifying these issues through distributed and dynamic interactions across frameworks, clouds, and APIs.

#agentic AI #networking #infrastructure #production deployment

Read article →
How to Analyze and Govern Gemini Enterprise App Usage at Scale with BigQuery AI 5.0
Google Cloud Blog

How to Analyze and Govern Gemini Enterprise App Usage at Scale with BigQuery

Google Cloud describes using BigQuery with log sinks to audit and govern large-scale Gemini Enterprise app deployments. The approach enables IT, Data, and Security teams to profile adoption patterns by department, analyze agentic AI impact, and enforce governance without manual overhead through deep-dive forensics on telemetry data.

#Gemini #BigQuery #governance #observability

Read article →
OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps Security 8.0
The Hacker News

OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps

OkoBot, a malware framework active since April 2025, includes a module that injects phishing prompts into legitimate Ledger and Trezor desktop wallet applications to steal hardware wallet recovery phrases. The malware runs on infected Windows machines and times its attacks to coincide with device connection, making the phishing appear to originate from the trusted wallet software.

#malware #phishing #hardware-wallet #credential-theft

Read article →
Anaconda buys Kilo, the open source coding agent that answers to no single model maker AI 7.0
The New Stack

Anaconda buys Kilo, the open source coding agent that answers to no single model maker

Anaconda acquired Kilo, an open-source coding agent designed to work with multiple LLM providers rather than lock users into a single vendor. The acquisition reflects enterprise concern about model provider lock-in, following recent warnings from Palantir, Mistral, and Microsoft about vendor leverage over enterprise data and workflows.

#agents #open-source #LLM #vendor-independence

Read article →
The Risk of Exposed Cloud Functions and How to Harden Security 7.0
Google Cloud Blog

The Risk of Exposed Cloud Functions and How to Harden

Mandiant security assessments reveal that publicly exposed Cloud Run services and Cloud Functions frequently lack authentication, creating attack surface for LFI/RFI and command injection exploits. The post provides hardening strategies for serverless deployments that must remain public, detailing how successful exploitation grants container-level access that can lead to full cloud environment compromise.

#Cloud Functions #Cloud Run #serverless #security

Read article →
Meta and the rise of the accidental cloud Cloud 6.0
The New Stack

Meta and the rise of the accidental cloud

Meta is building a cloud business to monetize excess AI compute capacity via the Meta Compute initiative, considering either hosted model access (AWS Bedrock model) or raw GPU rental (CoreWeave model). Simultaneously, Allbirds pivoted from footwear to GPU-as-a-Service, signaling rapid fragmentation of compute supply as enterprises overbuild capacity.

#cloud #GPU #infrastructure #compute

Read article →
"The database is the product": What breaks when memory devices scale Engineering 7.0
The New Stack

"The database is the product": What breaks when memory devices scale

Plaud, a popular AI notetaker, hit a database architecture failure at scale: perfect transcription and summarization masked a data retrieval problem where users waited for bytes to load from disk. The article walks through why the initial architecture felt reasonable at launch but became a liability as storage and query volume grew.

#database #architecture #scaling #AI-hardware

Read article →
SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough. Security 7.0
The Hacker News

SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.

Traditional SASE architectures lack visibility into modern enterprise workflows spanning SaaS, browsers, and generative AI tools, creating security gaps. Packet inspection alone cannot detect data exfiltration through unsanctioned browser extensions, autonomous agents, and AI applications where employees paste intellectual property into unvetted tools.

#SASE #AI #security-architecture #data-exfiltration

Read article →
AWS Ships Claude Apps Gateway as Self-Hosted Control Plane for Claude Code and Claude Desktop AI 8.0
InfoQ DevOps

AWS Ships Claude Apps Gateway as Self-Hosted Control Plane for Claude Code and Claude Desktop

AWS and Anthropic released Claude Apps Gateway, a self-hosted control plane that centralizes identity, policy, telemetry, routing, and spend caps for Claude Code and Claude Desktop. The gateway runs as a stateless container and routes inference to Amazon Bedrock or Claude Platform on AWS, enabling organizations to manage Claude agent deployments at scale.

#Claude #agents #Bedrock #control plane

Read article →
On-prem DBaaS in 2026: Platforms, standards, and gaps DevOps 6.0
CNCF Blog

On-prem DBaaS in 2026: Platforms, standards, and gaps

Database provisioning remains fragmented in 2026 despite Kubernetes adoption: teams either operate databases themselves via Kubernetes operators (Patroni for PostgreSQL) or depend on platform teams using cloud-managed services. The article maps current patterns and gaps in providing consistent Database-as-a-Service across on-premises and hybrid environments.

#Kubernetes #database #platform-engineering #operators

Read article →
GPT-Red: Unlocking Self-Improvement for Robustness AI 8.0
OpenAI Blog

GPT-Red: Unlocking Self-Improvement for Robustness

OpenAI introduces GPT-Red, an automated red teaming system using self-play to improve AI safety, alignment, and robustness against prompt injection attacks. The system iteratively generates adversarial prompts and defenses to strengthen model resilience without manual red team effort.

#AI safety #red teaming #adversarial #evals

Read article →
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware Security 9.0
The Hacker News

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four npm packages in the @asyncapi namespace (@asyncapi/generator-helpers@1.1.1, @asyncapi/generator-components@0.7.1, @asyncapi/generator@3.3.1, @asyncapi/specs v6.11.2 and v6.11.2-alpha.1) were compromised to distribute a multi-stage botnet loader. The malware was discovered by OX Security, SafeDep, Socket, and StepSecurity.

#npm #supply-chain #botnet #malware

Read article →
Take insights anywhere with Genie One on mobile AI 5.0
Databricks Blog

Take insights anywhere with Genie One on mobile

Databricks extends Genie One, its data-smart AI coworker, to mobile platforms. The mobile version maintains natural-language query capabilities and insight generation for business users accessing data warehouses on-the-go.

#Genie #mobile #natural language #data analytics

Read article →
KeycloakCon Japan 2026: Navigating cloud native identity and the AI frontier AI 7.0
CNCF Blog

KeycloakCon Japan 2026: Navigating cloud native identity and the AI frontier

KeycloakCon Japan 2026 (July 28, co-located with KubeCon) focuses on identity governance for autonomous AI agents and Model Context Protocol (MCP). Sessions cover the confused deputy problem, OAuth 2.0 token delegation, token exchange, and fine-grained scope enforcement using Keycloak's open identity standards rather than purpose-built AI identity vendors.

#agents #identity #OAuth #MCP

Read article →
We did not adapt and move quickly enough: What IBM's earnings miss says about enterprise AI spending Other 5.0
The New Stack

We did not adapt and move quickly enough: What IBM's earnings miss says about enterprise AI spending

IBM's Q2 revenue guidance fell short of expectations as enterprises redirect IT budgets toward AI infrastructure and hardware. The earnings miss signals a broader market shift where incumbent vendors struggle to keep pace with customer capex reallocation toward AI initiatives, reshaping enterprise spending priorities.

#AI infrastructure #enterprise spending #capex #market shift

Read article →
Microsoft Patches a Record 570 Security Flaws Security 8.0
Krebs on Security

Microsoft Patches a Record 570 Security Flaws

Microsoft released patches for 570 security vulnerabilities in July 2026, nearly triple the previous record, with 60 critical flaws and 3 zero-days already exploited. Microsoft attributes the surge to AI-aided vulnerability discovery. Notable patches include CVE-2026-56155 (Active Directory Federation Services), CVE-2026-56164 (SharePoint), and CVE-2026-50661 (BitLocker bypass).

#CVE #Windows #zero-day #privilege-escalation

Read article →
OpenAI hits 8 million Codex users — what developers need to know AI 7.0
The New Stack

OpenAI hits 8 million Codex users — what developers need to know

OpenAI merged Codex into ChatGPT desktop, launched ChatGPT Work as an agentic mode, and hit 8 million active users in five months (1M in Feb to 8M by July). The rapid scaling exposed inference bottlenecks, forcing context window reduction from 372K to 272K tokens and a 10% capacity optimization per subscriber.

#LLM #code generation #scaling #inference optimization

Read article →
AWS will now watch Microsoft's cloud for you Security 7.0
The New Stack

AWS will now watch Microsoft's cloud for you

AWS Security Hub now monitors Azure resources natively, checking VMs, container images, Function Apps, and identities against CIS Azure Foundations Benchmark. Findings appear alongside AWS findings in a single queue with unified automation workflows; Azure monitoring costs match AWS equivalent pricing with no platform fee.

#multicloud security #Azure #AWS #compliance

Read article →
What happens when your VPN meets 200 AI agents Security 6.0
The New Stack

What happens when your VPN meets 200 AI agents

Traditional zero-trust network access and PAM tools designed for human users fail when scaled to dozens or hundreds of AI agents. Enterprises need unified access architecture that handles both human and agentic requests with consistent policy, need-based access tailoring, and audit trails rather than identity-only checks.

#agents #zero-trust #PAM #access control

Read article →
Multi-agent social intelligence with Strands Agents and Amazon Bedrock AI 8.0
AWS ML Blog

Multi-agent social intelligence with Strands Agents and Amazon Bedrock

Thrad.ai built a multi-agent system using Strands Agents and Amazon Bedrock AgentCore to automate lead research across six sources (Reddit, Hacker News, Stack Overflow, GitHub, etc.), reducing manual research time from 30-45 minutes per lead to automated analysis. Each source gets a specialist agent; results fuse through a dedicated analysis agent that spots cross-source patterns and generates personalized outreach. The post compares Swarm and Graph orchestration patterns for multi-agent coordination.

#agents #multi-agent #Amazon Bedrock #orchestration

Read article →
Lessons From the Leaderboard: What 5,000+ Kagglers Taught Us About Improving AI Reasoning AI 7.0
NVIDIA Developer Blog

Lessons From the Leaderboard: What 5,000+ Kagglers Taught Us About Improving AI Reasoning

The NVIDIA Nemotron Model Reasoning Challenge invited 5,000+ Kaggle participants across 4,000 teams to explore techniques for improving reasoning accuracy on a fixed open model, benchmark, and evaluation infrastructure. The competition generated thousands of submissions and insights into what methods actually improve LLM reasoning performance. The post distills lessons learned from the leaderboard about effective reasoning techniques.

#LLM #reasoning #evals #Nemotron

Read article →
The enterprise strikes back: Keep your data, ditch the AI bill. AI 6.0
The New Stack

The enterprise strikes back: Keep your data, ditch the AI bill.

Enterprises are shifting toward open-source AI models trained on private data to avoid token costs and data exposure to closed-source labs. The move addresses dual concerns: high inference costs from OpenAI/Anthropic and data leakage risk as AI labs expand horizontally into adjacent software categories.

#open-source models #enterprise AI #data privacy #cost reduction

Read article →
Building a Custom Metrics Exporter for Kubernetes DevOps 7.0
Kubernetes Blog

Building a Custom Metrics Exporter for Kubernetes

Tutorial on writing a metrics exporter to expose application state as Prometheus-compatible /metrics endpoints, enabling HorizontalPodAutoscaler to scale on custom signals like queue depth or WebSocket connections. Covers containerization and cluster integration patterns for bridging the gap between built-in CPU/memory metrics and real-world scaling requirements.

#Kubernetes #Prometheus #metrics #autoscaling

Read article →
Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads Security 6.0
The Hacker News

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Researchers discovered a vulnerability in Claude for Chrome that allows rogue browser extensions running on claude.ai to trigger Claude tasks targeting Gmail, Google Docs, and Calendar. The flaw requires a malicious extension already capable of running scripts on claude.ai, but expands the attack surface beyond arbitrary-prompt injection that Anthropic restricted in May.

#vulnerability #browser-extension #Claude #Chrome

Read article →
Accelerating software delivery with agentic QA automation using Amazon Nova Act – Part 2 AI 7.0
AWS ML Blog

Accelerating software delivery with agentic QA automation using Amazon Nova Act – Part 2

QA Studio, an agentic QA automation reference solution built on Amazon Nova Act, now supports batch regression testing and CI/CD pipeline integration. Test suites group use cases and execute in parallel on Amazon ECS Fargate workers, reducing execution time for 20-test suites from sequential to concurrent. A new CLI brings agentic testing into automated CI/CD pipelines, gating deployments on test results.

#agents #QA automation #Amazon Nova #CI/CD

Read article →
Scaling UX testing with Amazon Nova Act: A new approach to user flow analysis AI 7.0
AWS ML Blog

Scaling UX testing with Amazon Nova Act: A new approach to user flow analysis

Amazon Nova Act, a multimodal foundation model, enables automated UX testing by analyzing screenshots and navigating web interfaces like a human tester would. Unlike hard-coded automation scripts that break on UI changes, Nova Act processes visual information to understand and interact with pages intelligently. This approach scales UX testing across diverse user journeys, device types, and interaction patterns without maintenance overhead.

#agents #Amazon Nova #multimodal #UX testing

Read article →
Scaling medical content review at Flo Health with Amazon Bedrock – Part 2 AI 8.0
AWS ML Blog

Scaling medical content review at Flo Health with Amazon Bedrock – Part 2

Flo Health deployed a production AI-powered medical content review system on Amazon Bedrock that reduced review time by 60 percent and tripled content throughput without expanding the medical team. The system uses specialized AI Judges for different review dimensions, RAG for content generation, and implements prompt engineering and deployment lessons learned. The PoC-to-production architecture adapts to Flo Health's content pipeline and medical accuracy guidelines.

#Amazon Bedrock #RAG #evals #prompt engineering

Read article →
ScienceSoft's HIPAA-compliant AI voice scheduler built on AWS AI 7.0
AWS ML Blog

ScienceSoft's HIPAA-compliant AI voice scheduler built on AWS

ScienceSoft built a HIPAA-compliant AI voice scheduling assistant using Amazon Nova Sonic and Amazon Bedrock Guardrails for healthcare organizations. The solution addresses manual, phone-based scheduling workflows that are slow and expensive to scale, while maintaining privacy, compliance, and responsible AI standards. The architecture demonstrates how to apply guardrails and compliance controls to voice AI in regulated industries.

#Amazon Nova #Amazon Bedrock #voice AI #HIPAA

Read article →
Open-source AI is just 4 months behind closed frontier models and 10x cheaper AI 7.0
The New Stack

Open-source AI is just 4 months behind closed frontier models and 10x cheaper

Open-source models lag closed frontier models by roughly 4 months on benchmarks but cost 10x less per token. Enterprises often pay proprietary labs for commodity enterprise features (IDP integration, MCP connectors, observability) rather than raw model intelligence, making open-source alternatives economically compelling.

#open-source models #cost comparison #benchmarks #enterprise features

Read article →
Post-Train NVIDIA Cosmos 3 in One Day Using Agent Skills AI 8.0
NVIDIA Developer Blog

Post-Train NVIDIA Cosmos 3 in One Day Using Agent Skills

NVIDIA demonstrates autonomous coding agents post-training Cosmos 3 vision models to 90%+ accuracy in a single day by automating data formatting, container setup, training scripts, baseline evaluation, and hyperparameter sweeps. This eliminates days of manual work typically spent on infrastructure before any accuracy improvement is measurable.

#agents #vision models #post-training #automation

Read article →
How to Run an Autoresearch Workflow with RL Agent Skills and NVIDIA NeMo AI 7.0
NVIDIA Developer Blog

How to Run an Autoresearch Workflow with RL Agent Skills and NVIDIA NeMo

NVIDIA NeMo now supports autonomous coding agents that can manage end-to-end ML workflows: repository inspection, runtime setup, build debugging, experiment launch, execution monitoring, and results analysis. This is particularly valuable for RL research where meaningful metrics emerge only after infrastructure setup, reducing manual overhead in experiment iteration.

#agents #RL #NeMo #MLOps

Read article →
Claude at scale on Google Cloud: Frontier AI, built for enterprise production Cloud 7.0
Google Cloud Blog

Claude at scale on Google Cloud: Frontier AI, built for enterprise production

Anthropic's Claude is now available on Google Cloud with fully managed infrastructure, global endpoints, VPC Service Controls, and observability integrated into Google Cloud's IAM and compliance posture. Engineers call Claude identically to other Google Cloud services, offloading compute provisioning, auto-scaling, load balancing, and failover.

#Claude #managed inference #Google Cloud #enterprise LLMs

Read article →
AI Engineer World's Fair 2026: The Runtime Is Where Agent Trust Is Won AI 7.0
Docker Blog

AI Engineer World's Fair 2026: The Runtime Is Where Agent Trust Is Won

Docker's report from AI Engineer World's Fair 2026 documents the emergence of agent-specific disciplines: evals, context engineering, harness engineering, memory, sandbox, platform engineering, and inference. The industry is shifting from 'can agents do this' to 'what trade-offs matter' for cost, isolation, and reliability in production agent systems.

#agents #evals #platform-engineering #sandbox

Read article →
A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed Security 7.0
Cloudflare Blog

A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed

A DNSSEC key rollover failure on July 3, 2026 knocked the .AL TLD offline for validating resolvers. Cloudflare's 1.1.1.1 deployed a Negative Trust Anchor to restore resolution, then introduced Extended DNS Error (EDE) code 33 to signal when DNSSEC validation is bypassed, allowing clients to distinguish legitimate answers from spoofed ones.

#DNSSEC #DNS #security #1.1.1.1

Read article →
Vibe coding slop: Port's CEO on the problem with ungoverned AI dev AI 6.0
The New Stack

Vibe coding slop: Port's CEO on the problem with ungoverned AI dev

Port launched AI Builder, an agentic SDLC platform combining natural language with domain expertise, context-aware controls, and human-in-the-loop review. The tool enforces versioned, audited code generation with Plan Mode to prevent uncontrolled AI-driven development while enabling junior engineers with structured oversight.

#agents #SDLC #governance #code generation

Read article →
Blocking Slow-Burn Attacks: Contextual Policies in Omnigent AI 7.0
Databricks Blog

Blocking Slow-Burn Attacks: Contextual Policies in Omnigent

Databricks presents a security approach for agentic AI systems using contextual policies that evaluate agent actions in sequence rather than in isolation. The method detects slow-burn attacks where individual actions appear benign but collectively compromise security.

#agents #security #policy #attack detection

Read article →
The MCP debate has a context problem AI 7.0
The New Stack

The MCP debate has a context problem

MCP skeptics correctly note overhead for solo projects, but the critique fails at enterprise scale where agents operate across teams and trust boundaries. Direct API calls create credential delegation, permission inheritance, and audit problems that MCP solves through standardized agent identity and access governance.

#MCP #agents #enterprise architecture #credential management

Read article →
AI can finally read your handwriting — here's why enterprises care AI 6.0
The New Stack

AI can finally read your handwriting — here's why enterprises care

Valantor acquired EyeLevel to launch its Enterprise Visual Intelligence platform, combining document intelligence with operational expertise to unlock unstructured data in PDFs, PPTX, and DOCX files. About 80% of corporate knowledge lives in visually complex documents that exceed LLM context windows and are inaccessible to agents without specialized visual processing.

#RAG #document-intelligence #unstructured-data #LLM

Read article →
Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks Security 7.0
The Hacker News

Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

KU Leuven researchers analyzed 85 popular crypto wallet browser extensions and found they leak sufficient data to link separate addresses and enable cross-site tracking. Wallet communication patterns with websites and blockchain servers allow attackers to correlate identities and follow users across sites.

#privacy #tracking #crypto #browser-extensions

Read article →
How Pentera Turns AI Security Workflows into Validation Engines AI 6.0
The Hacker News

How Pentera Turns AI Security Workflows into Validation Engines

Pentera uses AI agents to consolidate fragmented security signals (scanner output, severity scores, threat intelligence, configuration findings) into actionable validation workflows. The system prioritizes remediation, recommends next steps, and accelerates security team decision-making by correlating disparate risk data.

#AI agents #security #risk-prioritization #automation

Read article →
Is a Pod the right deployment unit for an AI agent? AI 7.0
CNCF Blog

Is a Pod the right deployment unit for an AI agent?

The kagent project evolved from running multiple agents in a single runtime to deploying each agent in its own Pod, Service, and ServiceAccount. This Kubernetes-native approach provides process isolation, per-agent identity, network policies, observability attribution, and multi-tenancy support, with additional isolation via agent-sandbox.

#agents #Kubernetes #Pod #isolation

Read article →
Google's Genkit Ships Agents API with Detached Turns and Human-in-the-Loop for TypeScript and Go AI 8.0
InfoQ DevOps

Google's Genkit Ships Agents API with Detached Turns and Human-in-the-Loop for TypeScript and Go

Google released the Genkit Agents API in preview, packaging message history, tool loops, streaming, and state persistence into a single chat() interface for TypeScript and Go. Detached turns allow agents to work after clients disconnect, while interruptible tools enable human-in-the-loop control with anti-forgery validation on resume.

#agents #Genkit #tool-use #state persistence

Read article →
What makes CIOs trust an AI agent? Thira bets it's not the model. AI 6.0
The New Stack

What makes CIOs trust an AI agent? Thira bets it's not the model.

Thira, founded by Apptio alumni Sunny Gupta and Kurt Shintaffer, is building an agentic system of execution for enterprise back-office IT operations. The $21M seed-funded startup targets repetitive CIO workflows, launching with two of six mapped IT processes, betting that trust in agents depends on execution architecture rather than model capability.

#agents #enterprise #IT-operations #back-office

Read article →
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet Security 8.0
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

A supply-chain attack distributed 148 malicious npm packages posing as student web proxies, injecting JavaScript into visitors' browsers to form a DDoS botnet for roughly two weeks in May. The attack exploited npm's free hosting to serve a booby-trapped proxy site, targeting end users rather than developers who installed the packages.

#supply-chain #npm #malware #DDoS

Read article →
How Unity Catalog managed tables bring interoperability, performance, and unified governance to the Lakehouse Cloud 6.0
Databricks Blog

How Unity Catalog managed tables bring interoperability, performance, and unified governance to the Lakehouse

Databricks announces managed tables in Unity Catalog, enabling interoperability across compute engines and data formats while providing unified governance and performance optimization. The feature allows enterprises to share data across Spark, Python, SQL, and other engines with consistent access control and metadata tracking.

#Unity-Catalog #lakehouse #governance #interoperability

Read article →
Prefect just bought Dagster, another big Airflow rival — and it's not a data pipeline story AI 7.0
The New Stack

Prefect just bought Dagster, another big Airflow rival — and it's not a data pipeline story

Prefect has acquired Dagster, consolidating two major Apache Airflow alternatives into one company. The acquisition positions Prefect to serve AI agents by combining Dagster's outcome-tracking capabilities with Prefect's execution flexibility and FastMCP's agent-system integration, framing orchestration as a core AI infrastructure component.

#orchestration #agents #Dagster #Prefect

Read article →
Microsoft CEO Satya Nadella says you're paying for AI twice — the second price is worse Other 5.0
The New Stack

Microsoft CEO Satya Nadella says you're paying for AI twice — the second price is worse

Satya Nadella articulates the 'reverse information paradox': enterprises pay for AI models with money, then again by revealing proprietary processes and institutional knowledge to make those models useful. He argues that every interaction with enterprise AI generates 'exhaust' that captures organizational know-how, creating a hidden cost that grows with model performance demands.

#enterprise-AI #data-privacy #model-performance #proprietary-knowledge

Read article →
OpenAI GPT-5.6 Sol, Terra, and Luna are now generally available on Amazon Bedrock AI 8.0
AWS ML Blog

OpenAI GPT-5.6 Sol, Terra, and Luna are now generally available on Amazon Bedrock

OpenAI's GPT-5.6 family (Sol, Terra, Luna) is now GA on Amazon Bedrock with a new naming scheme: generation number plus capability tier. Sol is the flagship reasoning model; all three are optimized for high-throughput autonomous agents, coding, security research, and genomics workloads. Pricing matches OpenAI first-party rates and counts toward AWS commitments.

#LLM #foundation models #agents #inference

Read article →
Operating AI/ML Workloads on Kubernetes: A Headlamp Plugin for Kubeflow DevOps 7.0
Kubernetes Blog

Operating AI/ML Workloads on Kubernetes: A Headlamp Plugin for Kubeflow

Headlamp, an extensible Kubernetes web UI, now includes a plugin for Kubeflow that surfaces ML-specific custom resources directly in a general-purpose cluster dashboard. This bridges the gap between specialized ML platforms and cluster-level observability, letting operators debug stuck notebooks or failed training runs without dropping to kubectl. The plugin follows a pattern any CRD-heavy platform can adopt: meet operators in their existing tools and expose cluster truth.

#Kubernetes #Kubeflow #CRD #observability

Read article →
NVIDIA Ising Decoding Cuts Color Code Logical Error Rates by Over 300X Other 6.0
NVIDIA Developer Blog

NVIDIA Ising Decoding Cuts Color Code Logical Error Rates by Over 300X

NVIDIA researchers present Ising decoding, a quantum error correction technique that reduces logical error rates in color code topological codes by over 300x compared to prior methods. The work addresses a critical bottleneck in building fault-tolerant quantum processors by improving how logical operations execute on quantum processing units.

#quantum #error-correction #QEC #topological-codes

Read article →
Amazon SQS turns 20: Two decades of reliable messaging at scale Cloud 5.0
AWS News

Amazon SQS turns 20: Two decades of reliable messaging at scale

AWS marks 20 years of SQS with a retrospective on how message queuing solved the distributed systems problem of tight coupling. The post covers key milestones from the original 8 KB message limit through FIFO queues, server-side encryption, Lambda integration, and high-throughput mode, showing how SQS remains foundational to async architectures at scale.

#SQS #message queuing #async #distributed systems

Read article →
Kubernetes Dashboard to Headlamp: A Step-by-Step Guide DevOps 6.0
Kubernetes Blog

Kubernetes Dashboard to Headlamp: A Step-by-Step Guide

This guide compares Kubernetes Dashboard and Headlamp, two cluster UIs with fundamentally different models. Dashboard runs in-cluster only and uses service account tokens; Headlamp runs on desktop or in-cluster, reads kubeconfig like kubectl, and supports plugins. The post walks operators through the architectural differences to help choose the right setup and understand permission models.

#Kubernetes #dashboard #UI #RBAC

Read article →
Building an agentic AI solution at Bluesight with Amazon Bedrock AI 7.0
AWS ML Blog

Building an agentic AI solution at Bluesight with Amazon Bedrock

Bluesight built an agentic AI system on Amazon Bedrock to automate 340B Drug Pricing Program compliance audits across 620+ hospitals. The agent reasons over FDA shortage lists, ASHP data, inventory, ML predictions, and backorder signals to surface actionable insights, replacing 4,000+ manual audit hours per hospital annually with cross-product intelligence.

#agents #Bedrock #compliance automation #healthcare

Read article →
Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock AgentCore Gateway AI 8.0
AWS ML Blog

Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock AgentCore Gateway

AWS provides an implementation guide for OAuth 2.0 Token Exchange (RFC 8693) in multi-tenant agentic systems using Bedrock AgentCore Gateway. The post walks through on-behalf-of (OBO) token exchange against Okta, JWT claim transformations, and audience binding for defense in depth. A reference implementation (TravelBot) demonstrates multi-tenant booking assistant patterns.

#agents #OAuth 2.0 #token exchange #multi-tenant

Read article →
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found Security 6.0
The Hacker News

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Google and Microsoft removed ModHeader, a browser extension with 1.6 million installs across Chrome and Edge, after researchers discovered a dormant browsing-history collector in the official store version. The collector was disabled by an empty allow-list with no evidence of active data exfiltration.

#supply-chain #browser extension #malware #data collection

Read article →
Claude's values across models and languages AI 6.0
Anthropic Research

Claude's values across models and languages

Anthropic research paper examining how Claude's values and behaviors generalize across different model sizes and languages, addressing consistency and alignment in multi-lingual and multi-scale deployments.

#LLM #alignment #values #multi-lingual

Read article →
Launching UI for generative AI inference recommendations in Amazon SageMaker AI AI 6.0
AWS ML Blog

Launching UI for generative AI inference recommendations in Amazon SageMaker AI

Amazon SageMaker AI now offers a low-code UI for generative AI inference recommendations, complementing the April 2026 API launch. The UI guides users through preset use-case profiles, visual performance comparisons, and one-click deployment to production endpoints without writing code. Advanced users can still access fine-grained API controls.

#SageMaker #inference optimization #model deployment #low-code

Read article →
Key findings from the 2026 Public Sector M-Trends report and beyond Security 8.0
Google Cloud Blog

Key findings from the 2026 Public Sector M-Trends report and beyond

Google Cloud and Mandiant's 2026 Public Sector M-Trends report, based on 500,000+ hours of incident investigations, reveals that the median time from initial access to ransomware hand-off is now 22 seconds, rendering human-speed triage obsolete. The report identifies emerging attack patterns including multi-year state-sponsored persistence (some undetected for 5+ years) and exploitation of 90-day telemetry retention gaps. It argues public sector agencies must shift to machine-speed defense and extended retention policies.

#incident response #ransomware #threat intelligence #public sector

Read article →
Securing the AI supply chain on GKE: Introducing k8s-aibom for automated AI BOMs AI 8.0
Google Cloud Blog

Securing the AI supply chain on GKE: Introducing k8s-aibom for automated AI BOMs

Google open-sources k8s-aibom, a lightweight unprivileged Kubernetes controller that automatically detects running AI runtimes (vLLM, Triton) and generates CycloneDX ML-BOMs without requiring sidecars, kernel modules, or pod-spec modifications. Enables security teams to audit shadow AI workloads in production clusters while maintaining developer velocity and cluster stability.

#Kubernetes #AI supply chain #SBOM #security

Read article →
Building the AI-defined vehicle with Android, Google Cloud, and Nexus SDV AI 5.0
Google Cloud Blog

Building the AI-defined vehicle with Android, Google Cloud, and Nexus SDV

Google Cloud and Valtech demonstrate an AI-native Software-Defined Vehicle (SDV) architecture combining Android Automotive OS, Bigtable for telematics, and agentic AI capabilities. The Nexus SDV platform provides OEMs an end-to-end foundation for connected vehicles with dynamic service discovery and modular Service-Oriented Architecture.

#agents #automotive #Bigtable #Android

Read article →
Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More Security 5.0
The Hacker News

Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

Weekly security roundup covering multiple threats including ShareFile vulnerabilities, Citrix Bleed 2 ransomware, and AI-assisted coding attacks. The recap highlights the asymmetry of security tooling where defenders and attackers both use automated bug-finding tools, but attackers operate without process constraints.

#threat intelligence #ransomware #vulnerability #AI attacks

Read article →
Lessons Learned from CISA's Recent GitHub Leak Security 8.0
Krebs on Security

Lessons Learned from CISA's Recent GitHub Leak

CISA published a postmortem on a May 2026 breach where a contractor exposed 844 MB of internal credentials in a public GitHub repo for six months, including AWS GovCloud administrative keys and plaintext system passwords. The agency took over 48 hours to invalidate exposed keys, revealing gaps in secret rotation and incident response.

#supply-chain #credential exposure #AWS #incident response

Read article →
Extreme Event Likelihoods with Guided Generative Models AI 7.0
NVIDIA Developer Blog

Extreme Event Likelihoods with Guided Generative Models

NVIDIA researchers propose using guided generative models to estimate probabilities of rare, high-impact events in science, engineering, and finance. The approach replaces brute-force Monte Carlo sampling with learned generative models that concentrate sampling on the tail regions where extreme events occur, reducing computational cost by orders of magnitude.

#generative-models #sampling #rare-events #Monte-Carlo

Read article →
What an ex-NSA red teamer wants every SOC to stop doing Security 5.0
The New Stack

What an ex-NSA red teamer wants every SOC to stop doing

Security operations centers face alert fatigue from overwhelming data volume across cloud, SaaS, endpoints, and identity systems. An ex-NSA red teamer argues SOCs must shift from firing on individual events to building detections around users, devices, and workloads, providing analysts with contextual pictures instead of isolated signals.

#security #SOC #alert-fatigue #threat-detection

Read article →
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email AI 8.0
The Hacker News

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

MemGhost is a novel attack that injects false memories into AI agents via email, causing them to save fabricated facts about users and alter their behavior in subsequent sessions without detection. A single malicious email can compromise an agent's knowledge base, and the tampering remains invisible to the user. This attack targets AI assistants with memory and email access, creating a persistent backdoor for steering agent responses.

#AI agents #memory injection #prompt injection #security

Read article →
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft Security 7.0
The Hacker News

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

Forg365 is a phishing-as-a-service operation charging $400/month that combines device code phishing, adversary-in-the-middle tactics, antibot evasion, and AI-assisted lure generation to compromise Microsoft 365 accounts. The service is distributed via Telegram and includes post-compromise mailbox operations. This represents a commoditized, AI-enhanced attack platform targeting enterprise email infrastructure.

#phishing #PhaaS #Microsoft 365 #AitM

Read article →
Introducing Precursor: detecting agentic behavior with continuous client-side signals Security 7.0
Cloudflare Blog

Introducing Precursor: detecting agentic behavior with continuous client-side signals

Cloudflare launches Precursor, a client-side session-based verification system using dynamically injected JavaScript to collect behavioral signals and detect agentic traffic in real time. Complements Turnstile (3B daily runs) with continuous visibility across full user journeys, not just login/checkout checkpoints.

#bot detection #agents #client-side #security

Read article →
Presentation: Road to Compliance: Will Your Internal Users Hate Your Platform Team? DevOps 6.0
InfoQ DevOps

Presentation: Road to Compliance: Will Your Internal Users Hate Your Platform Team?

Davide de Paolis presents a case study on rolling out cloud infrastructure compliance without damaging developer relations. Drawing from Sevdesk's platform team reboot, he covers minimum viable governance on AWS, event-driven Slack alerting for policy feedback, and shifting from rigid enforcement to empathy-driven collaboration.

#platform engineering #compliance #AWS #governance

Read article →
Where AI saves me time and where it slows me down AI 6.0
The New Stack

Where AI saves me time and where it slows me down

A Webflow engineer reflects on AI's practical impact on daily engineering work: AI accelerates starting work, finding context, and writing code, but slows down review, validation, and long-term maintainability. The real tradeoff emerges after first-draft generation, where understanding assumptions, keeping PRs reviewable, and preserving explainability require more effort than before.

#AI-assisted-development #code-generation #engineering-workflow #productivity

Read article →
Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling Other 6.0
The Hacker News

Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling

Meta has filed a patent for an AI system that continuously listens to user voice, infers emotional state from vocal patterns, and maintains timestamped logs of inferred emotions correlated with location, activity, and device usage. Some patent variants describe all-day listening; others are more limited. The filing raises privacy and consent concerns around persistent emotional surveillance.

#surveillance #emotion detection #voice analysis #privacy

Read article →
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots AI 7.0
The Hacker News

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

This article argues for a hybrid SOC architecture that pairs autonomous AI agents (handling fast, repetitive detection tasks) with analyst copilots (augmenting human investigators on complex cases). The author describes a Fortune 50 CISO's team already running Claude-connected detection tools and maps out broader design patterns for integrating both fast and slow AI reasoning in security operations.

#AI agents #SOC automation #copilots #detection

Read article →
Operating OpenTelemetry at scale with OpAMP DevOps 7.0
CNCF Blog

Operating OpenTelemetry at scale with OpAMP

OpAMP (Open Agent Management Protocol) provides a standardized way to remotely manage, configure, and update OpenTelemetry Collector fleets at scale. The protocol enables central backends to push updates, monitor health, and collect status across heterogeneous environments, replacing fragmented in-house agent management solutions.

#observability #OpenTelemetry #agent management #DevOps

Read article →
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory Security 6.0
The Hacker News

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Researchers identified an intrusion where a threat actor deployed a suspected AI-generated PowerShell script for Active Directory enumeration, mapping domain controllers, users, computers, and domains before exporting results to AD_Report.html. The script's characteristics suggest AI generation, marking an early example of adversaries using LLMs to automate reconnaissance tooling.

#Active Directory #reconnaissance #PowerShell #AI-generated

Read article →
Practical Guide To Python App Hosting Engineering 5.0
Databricks Blog

Practical Guide To Python App Hosting

Databricks publishes a guide to hosting Python applications, covering deployment patterns, runtime management, and integration with data pipelines. The guide addresses common pain points in Python app operations for data-intensive and AI workloads.

#Python #app hosting #deployment #operations

Read article →
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365 Security 7.0
The Hacker News

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

A misconfigured Python HTTP server (python3 -m http.server 8080 with directory listing enabled) exposed an attacker's entire Evilginx phishing toolkit, including .bash_history. French security firm Lexfo pivoted through the exposed files to uncover and disrupt two additional related phishing operations targeting Microsoft 365. This single operational security failure revealed a coordinated multi-operation campaign.

#Evilginx #phishing #OPSEC failure #Microsoft 365

Read article →
Preparing for the post-quantum era: Discover and prioritize now Security 6.0
HashiCorp Blog

Preparing for the post-quantum era: Discover and prioritize now

HashiCorp outlines a post-quantum cryptography migration strategy emphasizing discovery and prioritization of cryptographic assets across enterprise infrastructure. The article warns of immediate threats like harvest-now-decrypt-later attacks, where adversaries collect encrypted data today to decrypt once quantum computers become available.

#post-quantum cryptography #security #key management #threat intelligence

Read article →
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days Security 9.0
The Hacker News

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

CISA added two CVSS 10.0 vulnerabilities in iCagenda and Balbooa Forms Joomla extensions to its Known Exploited Vulnerabilities catalog after reports of active zero-day exploitation. Both CVE-2026-48939 and a second maximum-severity flaw are being actively weaponized in the wild. Joomla site administrators running these extensions are at immediate risk.

#CVE #Joomla #zero-day #CVSS 10

Read article →
APIs aren't dead. Here's where MCP fits alongside them. AI 6.0
The New Stack

APIs aren't dead. Here's where MCP fits alongside them.

The New Stack examines how Model Context Protocol (MCP) and traditional APIs serve complementary roles in incident management rather than replacing each other. MCP provides consistent tool integration to reduce fragmentation, while APIs maintain deterministic control for repeatable workflows.

#MCP #APIs #incident management #tool integration

Read article →
Anthropic's newest enterprise partner is training 20,000 people on Claude — here's the shift it signals AI 7.0
The New Stack

Anthropic's newest enterprise partner is training 20,000 people on Claude — here's the shift it signals

Anthropic announced UST as its second Global Premier Partner, focusing on moving enterprise AI projects from proof-of-concept to production scale. The partnership signals a broader shift toward standardizing the AI stack at the platform level, where model selection becomes an architectural decision rather than a per-developer choice.

#LLM #enterprise AI #Claude #platform engineering

Read article →
How async processing hides latency and improves responsiveness Engineering 5.0
The New Stack

How async processing hides latency and improves responsiveness

This excerpt from 'Latency' by Pekka Engberg explains how asynchronous processing complements absolute latency reduction techniques by deferring non-critical work and performing I/O operations asynchronously. The approach keeps systems responsive even when individual operations take time, using event loops for efficient execution.

#async #latency #concurrency #performance

Read article →
Meet Brain, the AI that decides when Azure is officially down Cloud 8.0
The New Stack

Meet Brain, the AI that decides when Azure is officially down

Microsoft's Brain is an internal AIOps system that monitors Azure health in real-time, declaring outages and pausing harmful rollouts. Built on Azure Resource Graph as a digital twin of Azure infrastructure, Brain evolved from pre-generative-AI foundations and now uses multiple AI tools to automate reliability decisions.

#AIOps #observability #cloud infrastructure #AI automation

Read article →
85% say code review is the new bottleneck. Here's what the AI coding narrative leaves out. AI 7.0
The New Stack

85% say code review is the new bottleneck. Here's what the AI coding narrative leaves out.

As AI coding agents multiply PR volume, code review has become the bottleneck, shifting from the writing phase. The article argues that engineering teams must explicitly define what a green checkmark on a PR actually guarantees, establishing a clear contract across four layers of confidence (well-formed, correct, safe, and maintainable) before changes land on main.

#agents #code-review #CI/CD #testing

Read article →
The impressive AI demo is dead. Here's what actually reaches production AI 8.0
The New Stack

The impressive AI demo is dead. Here's what actually reaches production

Only 32% of organizations have agentic AI in production, with two-thirds citing data infrastructure and data quality as barriers. The gap between controlled demos and production stems from agents needing to query stale, incomplete, and poorly governed data across dozens of sources in real time, not the curated static datasets used in pilots.

#agents #data-infrastructure #production #RAG

Read article →
Microsoft joins Google in backing Go for AI agents — OpenAI and Anthropic lag AI 7.0
The New Stack

Microsoft joins Google in backing Go for AI agents — OpenAI and Anthropic lag

Microsoft Agent Framework for Go is now in public preview, giving cloud-native developers a first-party way to build production agents in Go. The framework supports models from Microsoft Foundry, Azure OpenAI, Anthropic, and Gemini, includes tool-calling and MCP support, and enables multi-agent coordination, matching capabilities already available in Python and .NET.

#agents #Go #tool-use #MCP

Read article →
In 24 hours, OpenAI, SpaceXAI, and Meta turned AI into a race to the bottom on price Other 5.0
The New Stack

In 24 hours, OpenAI, SpaceXAI, and Meta turned AI into a race to the bottom on price

Within 24 hours, OpenAI, SpaceX's Grok 4.5, and Meta released new models competing primarily on price per token rather than capability breakthroughs. The author argues this represents a marketing treadmill rather than genuine innovation, with pricing becoming the only differentiator across similar-performing models from competing labs.

#LLM #pricing #models #market-dynamics

Read article →
Where should AI workloads run? A sovereign and sensible approach AI 6.0
CNCF Blog

Where should AI workloads run? A sovereign and sensible approach

CNCF explores deployment patterns for AI workloads, arguing that Kubernetes has emerged as the common foundation for resource management and portability, while the strategic question remains whether enterprises will consume frontier models externally or run open-weight models on private, sovereign, or on-premises infrastructure. The article acknowledges that not all tasks require bleeding-edge models; routine work can use older or open-weight alternatives.

#Kubernetes #AI infrastructure #deployment #models

Read article →
Meta's Iris push signals the next phase of AI infrastructure AI 6.0
The New Stack

Meta's Iris push signals the next phase of AI infrastructure

Meta is manufacturing its own AI inference chip, Iris, with production starting September 2025. Iris is part of Meta's MTIA program and targets inference workloads like content ranking and recommendations, giving Meta control over custom silicon for its AI infrastructure.

#inference #custom silicon #AI infrastructure #MLOps

Read article →
Contributing to U.K. financial sector resilience as a critical third party Other 5.0
Google Cloud Blog

Contributing to U.K. financial sector resilience as a critical third party

Google Cloud EMEA was designated a critical third party (CTP) to the U.K. financial sector by the Treasury on July 10, placing it under direct oversight by the Bank of England, PRA, and FCA. The designation reflects the materiality of Google Cloud services to U.K. financial institutions and triggers deeper regulatory collaboration.

#compliance #financial services #operational resilience #regulation

Read article →
Introducing Feature Views AI 6.0
Databricks Blog

Introducing Feature Views

Introduces Feature Views as a Databricks abstraction for defining, versioning, and serving ML features across training and inference. Reduces feature duplication and ensures consistency between offline and online feature stores.

#feature store #MLOps #feature engineering #Databricks

Read article →
AI Model Co-Design: Hardware-Friendly LLM Design AI 7.0
NVIDIA Developer Blog

AI Model Co-Design: Hardware-Friendly LLM Design

Discusses balancing accuracy, throughput, and latency in LLM design by co-optimizing model architecture with hardware constraints. Focuses on how architectural choices (width, depth, attention patterns) affect both token throughput and per-token latency.

#LLM architecture #co-design #throughput #latency

Read article →
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages Security 9.0
The Hacker News

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Threat actors compromised Injective Labs SDK's GitHub repository and published malicious npm package @injectivelabs/sdk-ts@1.20.21 with fake telemetry that exfiltrates cryptocurrency wallet private keys and mnemonic seed phrases. The supply-chain attack leveraged repository access to inject wallet-stealing code into a widely-used SDK.

#supply-chain #npm #GitHub compromise #malware

Read article →
Why retrieval quality is becoming the defining challenge in AI agent architecture AI 7.0
The New Stack

Why retrieval quality is becoming the defining challenge in AI agent architecture

The article argues that agent failures often stem from poor retrieval during context-building, not LLM generation. Using examples like Specstory's agent for historical coding decisions and AnkiHub's flashcard retrieval, it shows how ranking the wrong sources (implementation over discussion) leads to confident but incorrect answers.

#agents #RAG #retrieval #context

Read article →
Frontier and Center: Who evaluates the evaluations? AI 7.0
Google Cloud Blog

Frontier and Center: Who evaluates the evaluations?

Google Data Cloud's frontier AI team argues that pass/fail benchmarks for AI agents mask critical capability gaps. Instead of single scores, agents need capability maps showing where performance degrades, especially for data discovery tasks where context matters. The post advocates for richer evaluation frameworks that reveal terrain rather than just clearing a bar.

#agents #evals #benchmarking #data agents

Read article →
Fine-tune NVIDIA Nemotron 3 models with Amazon SageMaker AI serverless model customization AI 7.0
AWS ML Blog

Fine-tune NVIDIA Nemotron 3 models with Amazon SageMaker AI serverless model customization

AWS SageMaker AI now offers serverless fine-tuning for NVIDIA Nemotron 3 models (Nano 30B and Super 120B), supporting supervised fine-tuning, RLVR, and RLAIF. The service enables enterprises to adapt open-weight models on domain-specific data while keeping sensitive data private, with cost savings versus larger proprietary models.

#fine-tuning #LLM #open-weight models #SFT

Read article →
Real-time dental image verification with Amazon SageMaker AI at Henry Schein One AI 8.0
AWS ML Blog

Real-time dental image verification with Amazon SageMaker AI at Henry Schein One

Henry Schein One deployed Image Verify, an AI system on SageMaker AI that validates dental X-ray quality at capture time across thousands of locations. The system scaled from concept to 10,000+ active locations within months, processing 11+ million X-rays weekly, eliminating delayed feedback that previously required patient retakes.

#computer vision #real-time inference #production deployment #healthcare

Read article →
Build a semantic layer for agentic AI on AWS with Stardog and Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Build a semantic layer for agentic AI on AWS with Stardog and Amazon Bedrock AgentCore

This post demonstrates building a semantic layer using Stardog over Aurora and Redshift, with agents running on Amazon Bedrock AgentCore to answer enterprise analytics queries across multiple data sources without ETL. The approach enables autonomous agents to reason over live data on demand, replacing traditional BI bottlenecks.

#agents #semantic layer #knowledge graphs #agentic analytics

Read article →
Scaling agentic workflows with native case management in Amazon Quick Automate AI 7.0
AWS ML Blog

Scaling agentic workflows with native case management in Amazon Quick Automate

Amazon Quick Automate introduces case management for agentic workflows, tracking work items through their lifecycle with visibility, human-in-the-loop support, and parallel execution. The feature enables enterprises to orchestrate multiple agents across thousands of work items with exception handling and state persistence.

#agents #workflow orchestration #case management #human-in-the-loop

Read article →
Deploying quantized models on Amazon SageMaker AI with Unsloth AI 7.0
AWS ML Blog

Deploying quantized models on Amazon SageMaker AI with Unsloth

This post covers four deployment patterns for Unsloth-quantized models on AWS: EC2 for direct access, SageMaker AI inference endpoints for managed serving, and EKS/ECS for container frameworks. Dynamic quantization reduces memory usage and serving costs while maintaining accuracy, with guidance on production operational practices.

#quantization #model optimization #inference #deployment patterns

Read article →
How KTern.AI built agentic AI for SAP on Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

How KTern.AI built agentic AI for SAP on Amazon Bedrock AgentCore

KTern.AI deployed specialized agents on Amazon Bedrock AgentCore to automate SAP digital transformations, orchestrating workflows across reverse engineering, fit-to-standard, code analysis, and exception mining. The architecture uses persistent context and secure tool access to handle complex, long-running enterprise programs.

#agents #enterprise automation #SAP #workflow orchestration

Read article →
Disaggregated prefill and decode for LLM inference on SageMaker HyperPod AI 8.0
AWS ML Blog

Disaggregated prefill and decode for LLM inference on SageMaker HyperPod

This post details disaggregated prefill-decode (DPD) architecture on SageMaker HyperPod using vLLM and the HyperPod Inference Operator, separating compute-bound prefill from memory-bound decode on dedicated GPU pools. The approach optimizes time-to-first-token and inter-token latency independently, preventing long-context prefills from blocking concurrent decode requests.

#LLM inference #prefill-decode #optimization #vLLM

Read article →
Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched Security 6.0
The Hacker News

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

Ledger Donjon researchers demonstrated that a precisely-timed laser pulse can reset Tangem crypto wallet card passwords without requiring the old password or backup card. Once reset, an attacker gains full control of the wallet and can move cryptocurrency out, though the attack requires physical access and precise timing.

#hardware #cryptocurrency #physical attack #Tangem

Read article →
OpenAI, Microsoft & Anthropic agree on who runs the agent. They disagree on what you can take back. AI 6.0
The New Stack

OpenAI, Microsoft & Anthropic agree on who runs the agent. They disagree on what you can take back.

Five labs (OpenAI, Anthropic, Microsoft, Perplexity, Amazon) have released multi-step task agents targeting different personas: knowledge workers, power users, developers, and enterprises. While all agree on centralized runtime control, they diverge on user data portability and credential management across deployment archetypes.

#agents #LLM #control plane #deployment

Read article →
Announcing the public beta of Vault Kubernetes key management DevOps 8.0
HashiCorp Blog

Announcing the public beta of Vault Kubernetes key management

HashiCorp Vault now offers a Kubernetes KMS v2-compatible plugin (vault-kube-kms) in public beta, allowing Kubernetes API servers to use Vault Enterprise for envelope encryption of etcd secrets. This centralizes key management, policy enforcement, auditing, and rotation for Kubernetes-stored sensitive data.

#Kubernetes #key management #encryption at rest #secrets

Read article →
Presentation: Chaos Engineering GPU Clusters AI 8.0
InfoQ DevOps

Presentation: Chaos Engineering GPU Clusters

Bryan Oliver presents fault-injection strategies for large-scale GPU clusters, covering RDMA network protocols, NUMA misalignments, and complex topologies. The talk shares seven practical chaos engineering techniques to maximize multi-million dollar hardware efficiency and build observability loops for AI infrastructure.

#GPU clusters #chaos engineering #RDMA #observability

Read article →
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic Security 6.0
The Hacker News

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

China-linked cybercrime group Silver Fox deployed MODBEACON, a Rust-based remote access trojan using gRPC streaming for encrypted command-and-control traffic. Despite appearing as low-sophistication via SEO poisoning and counterfeit installers, the group demonstrates organized infrastructure and operational capability.

#malware #RAT #gRPC #C2

Read article →
Improving Smart Tiered Cache for Public Cloud Regions Cloud 6.0
Cloudflare Blog

Improving Smart Tiered Cache for Public Cloud Regions

Cloudflare extended Smart Tiered Cache to handle public cloud origins by accepting region hints, letting the system map anycast/unicast cloud endpoints to the right upper-tier caches instead of falling back to multiple tiers. The feature improves cache efficiency for origins behind regional cloud front ends like AWS or GCP.

#caching #CDN #cloud architecture #latency optimization

Read article →
"Every IC engineer is really a front line manager now." But are they productive? Other 5.0
The New Stack

"Every IC engineer is really a front line manager now." But are they productive?

LaunchDarkly's CTO argues AI has transformed individual contributors into front-line managers focused on project planning and coordination. Gartner research predicts 60% of orgs will have smaller teams by 2029, with AI-driven tiny teams of 2-3 engineers, but tech leaders question whether faster code output equals actual productivity gains.

#AI #productivity #engineering culture #team dynamics

Read article →
From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale Security 6.0
The Hacker News

From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale

Lumen Technologies discovered its asset inventory was off by 65x (17,000 vs 1.1 million assets) and rebuilt its exposure management program. The case study shows how fragmented asset data across security tools creates blind spots; only 45% of orgs consolidate inventory into a single view per the 2026 Axonius report.

#asset inventory #exposure management #security operations #CMDB

Read article →
Why zero vulnerability code packages could still be your biggest software supply chain risk Security 7.0
The New Stack

Why zero vulnerability code packages could still be your biggest software supply chain risk

RapidFort and ReversingLabs launched Open Source Dependency Libraries, a curated package catalog with hardening and third-party validation, addressing the reality that zero-CVE packages can still pose supply-chain risks. The partnership highlights how malicious packages like XZ and Shai-Hulud bypass traditional vulnerability scanning by exploiting trust chains rather than known CVEs.

#supply-chain #SCA #dependencies #malware

Read article →
Article: Trade-Offs in Multi-Region Architectures: Latency vs. Cost Cloud 7.0
InfoQ DevOps

Article: Trade-Offs in Multi-Region Architectures: Latency vs. Cost

Uttara Asthana presents a framework for multi-region deployments: decompose latency budgets before committing to infrastructure, choose patterns by consistency and traffic profile, and optimize routing before expanding regions. A case study shows 35% latency reduction through routing alone before adding a new region.

#multi-region #latency #cost optimization #cloud architecture

Read article →
How Deutsche Telekom is rewiring telecommunications with AI AI 5.0
OpenAI Blog

How Deutsche Telekom is rewiring telecommunications with AI

Deutsche Telekom deployed OpenAI models across customer service, employee workflows, and network operations to become an AI-native telco. The case study covers transformation of voice services and operational processes, though specific implementation details are limited in the excerpt.

#LLM #enterprise deployment #customer service #operations

Read article →
UST is bringing Claude to physical AI AI 5.0
Anthropic News

UST is bringing Claude to physical AI

UST Global is integrating Claude into physical AI systems and robotics applications. The partnership focuses on deploying Claude's reasoning capabilities in embodied AI contexts where models must interact with real-world environments and hardware.

#Claude #physical AI #robotics #embodied AI

Read article →
Meta debuts Muse Spark 1.1 and it isn't free AI 7.0
The New Stack

Meta debuts Muse Spark 1.1 and it isn't free

Meta launches Muse Spark 1.1, described as the company's strongest model for agentic and coding work, with a paid developer API tier. The model is available via a public waitlist on Meta's own servers, marking Meta's first serious paid AI API.

#LLM #agents #coding #API

Read article →
Navigating the ingress-NGINX retirement DevOps 8.0
CNCF Blog

Navigating the ingress-NGINX retirement

The Kubernetes SIG Network ingress-nginx controller reaches end-of-life in March 2026, forcing migration decisions. Organizations can lift-and-shift to Envoy-based controllers like Contour or modernize with the Gateway API, but must manually translate nginx.ingress.kubernetes.io/* annotations.

#Kubernetes #ingress #networking #migration

Read article →
Synthetic Data Generation for Financial AI Research with NVIDIA NeMo AI 6.0
NVIDIA Developer Blog

Synthetic Data Generation for Financial AI Research with NVIDIA NeMo

NVIDIA NeMo enables synthetic data generation for financial NLP, addressing data imbalance in LLM fine-tuning. The approach fills gaps in rare financial events (credit-rating changes, product approvals, labor issues) that real-world financial news underrepresents, supporting trading research, risk modeling, and surveillance use cases.

#synthetic data #fine-tuning #NLP #NeMo

Read article →
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs Security 7.0
The Hacker News

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs reports coordinated campaigns using dormant GitHub accounts and compromised OAuth tokens to enumerate corporate GitHub organizations, repositories, and user accounts via the GitHub API. Attackers use automated scraping with legitimate-sounding user agents and years-old 'ghost' accounts to avoid detection while building organizational maps for targeted attacks.

#GitHub #supply-chain #reconnaissance #OAuth

Read article →
OpenAI's GPT-5.6 is now live AI 8.0
The New Stack

OpenAI's GPT-5.6 is now live

OpenAI releases three GPT-5.6 variants: Sol (flagship, $5/$30 per million tokens), Terra (mainstream, $2.50/$15), and Luna (fast/cheap, $1/$6). Models are gated by reasoning effort and available across ChatGPT tiers, ChatGPT Work, Codex, and the API.

#LLM #foundation models #API pricing #reasoning

Read article →
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware Security 6.0
The Hacker News

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Microsoft identified GigaWiper, a Windows backdoor that combines three destructive payloads (disk wiper, Windows drive overwriter, fake ransomware) into a single operator-selectable toolkit. The modular design lets attackers choose destruction methods: full disk wipe, targeted drive overwrite, or file scrambling with unsaved keys.

#backdoor #Windows #destructive malware #ransomware

Read article →
Claude plays robotics AI 7.0
Anthropic Research

Claude plays robotics

Anthropic research demonstrating Claude's capabilities in robotics control and planning tasks, exploring how LLMs can be applied to physical system control and real-world robotic decision-making.

#LLM #robotics #tool use #agents

Read article →
Enterprise AI benchmarks are broken AI 8.0
The New Stack

Enterprise AI benchmarks are broken

DevRev released the Enterprise AI Agent Benchmark, an open-source evaluation framework addressing gaps in existing benchmarks like TAU-Bench and Agent's Last Exam. The benchmark prioritizes context-window performance over pure reasoning, built on Terminal Bench from UC Berkeley and Stanford researchers, and covers L1-L2 tiers with community-driven expansion planned for advanced levels.

#evals #agents #benchmarks #RAG

Read article →
Frontier models and production agents: Advancing Microsoft Foundry for the agentic era AI 8.0
Azure Blog

Frontier models and production agents: Advancing Microsoft Foundry for the agentic era

Microsoft Foundry now offers GPT-5.6 series (Sol, Terra, standard variants) generally available alongside Asia-Pacific Data Zone for regional data residency and hosted agents in Foundry Agent Service with toolboxes and Microsoft 365 Copilot integration. The platform combines frontier models, production agent runtime, enterprise identity, security controls, and distribution across Microsoft 365 for organizations building agents at scale.

#LLM #agents #production-agents #enterprise-infrastructure

Read article →
MCP tool design: Practical approaches and tradeoffs AI 8.0
AWS ML Blog

MCP tool design: Practical approaches and tradeoffs

AWS details how Model Context Protocol tool design failures stem from context bloat and semantic confusion rather than protocol limitations. The post covers practical context engineering approaches to reduce tool definition overhead, clarify tool semantics, and improve LLM parameter selection in agentic systems.

#MCP #tool-use #agents #prompt engineering

Read article →
Enhancing enterprise inference on Amazon SageMaker HyperPod with data capture, Hugging Face, NVMe, and Route 53 integration AI 7.0
AWS ML Blog

Enhancing enterprise inference on Amazon SageMaker HyperPod with data capture, Hugging Face, NVMe, and Route 53 integration

SageMaker HyperPod adds multi-point data capture for observability, direct model deployment from Hugging Face Hub with gated access, NVMe-backed weight loading for cold-start reduction, and automatic DNS management. These features target production LLM inference at scale with improved observability, security, and performance.

#inference #observability #MLOps #SageMaker

Read article →
Safely run AI-generated code in Cloud Run sandboxes Cloud 8.0
Google Cloud Blog

Safely run AI-generated code in Cloud Run sandboxes

Google Cloud announced Cloud Run sandboxes in public preview, a native runtime for executing untrusted code and agent workloads with millisecond startup times. Sandboxes provide isolated execution boundaries within Cloud Run instances, eliminating the need for custom container orchestration or third-party microVM runtimes.

#Cloud Run #sandboxing #AI agents #untrusted-code

Read article →
How GitHub gave every repository a durable owner DevOps 7.0
GitHub Blog

How GitHub gave every repository a durable owner

GitHub implemented a systematic ownership model across 11,000+ active repositories by validating ownership, archiving unused repos, and enforcing ownership at creation time. The effort resolved gaps in secret scanning remediation workflows.

#repository management #ownership #secret scanning #governance

Read article →
Why a five-minute sniff test is your secret supply chain defense Security 7.0
The New Stack

Why a five-minute sniff test is your secret supply chain defense

CISA's 2025 SBOM guidance mandates complete component inventories including transitive dependencies and configuration files with no minimum depth. The article outlines practical SBOM validation workflows: parsing, validation, cross-referencing against vulnerability databases, applying VEX advisories, and licensing compliance checks.

#SBOM #supply-chain #security #container

Read article →
Why we cannot wait for better post-quantum signature algorithms Security 7.0
Cloudflare Blog

Why we cannot wait for better post-quantum signature algorithms

Cloudflare details the migration to NIST-standardized post-quantum cryptography (ML-KEM and ML-DSA) to defend against harvest-now-decrypt-later attacks and future quantum computers. The majority of Cloudflare traffic already uses ML-KEM encryption, with a target of full post-quantum signature deployment by 2029. ML-DSA trades larger wire size and reduced algorithm flexibility for immediate quantum resistance while better schemes advance through NIST's third round.

#post-quantum cryptography #ML-DSA #ML-KEM #NIST standardization

Read article →
Agentic AI in observability: accelerating root cause analysis AI 6.0
The New Stack

Agentic AI in observability: accelerating root cause analysis

Agentic AI integrated into observability platforms accelerates root cause analysis by aggregating and analyzing logs, traces, and metrics across microservices, servers, and databases. Agents enable statistical and machine learning approaches to reveal system patterns and dependencies faster than traditional tools.

#agents #observability #LLM #root-cause-analysis

Read article →
"The Switzerland of AI": OpenClaw becomes a non-profit foundation AI 7.0
The New Stack

"The Switzerland of AI": OpenClaw becomes a non-profit foundation

OpenClaw, a self-hosted open-source AI agent with 6th-most-starred GitHub repository, transitioned to independent non-profit foundation status under chair Dave Morin. The agent runs locally with direct file and messaging app access, enabling task automation across WhatsApp, Slack, and email.

#agents #open-source #LLM #self-hosted

Read article →
AlloyDB Ships Proxy Models That Replace LLM Calls with Local Inference inside the Database AI 8.0
InfoQ DevOps

AlloyDB Ships Proxy Models That Replace LLM Calls with Local Inference inside the Database

Google released AlloyDB AI functions GA with a proxy model architecture that trains lightweight local models from LLM outputs, eliminating external LLM calls and running inference at database speed. The proxy model achieves 100,000 rows per second in preview with 2,400x throughput improvement via smart batching, reducing latency and cost for AI-augmented queries.

#LLM #inference #proxy models #AlloyDB

Read article →
Building resiliency into Boundary session recording Security 7.0
HashiCorp Blog

Building resiliency into Boundary session recording

HashiCorp Boundary session recording captures high-fidelity protocol streams (SSH since 0.13, RDP since 1.0) in BSR format with cryptographic signing and automatic S3 sync. Structured metadata enables granular per-target audit policies, balancing fidelity, operational overhead, and storage cost.

#privileged access management #session recording #security #audit

Read article →
Symlinks Are Still Scary (And Yes, You Can Commit Them to Git) Security 7.0
Snyk Blog

Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

Symlinks committed to Git repos can redirect tools into reading or writing arbitrary files on a machine, a vulnerability now actively exploited in AI coding assistants. The attack surface expands as LLM-based code generation tools follow symlinks without validation, potentially exposing sensitive files or allowing writes to unintended locations during code generation and execution workflows.

#symlinks #supply-chain #AI coding assistants #Git

Read article →
An off switch for dual-use knowledge in AI models AI 7.0
Anthropic Research

An off switch for dual-use knowledge in AI models

Anthropic published research on mechanisms to disable dual-use knowledge in AI models, addressing safety concerns around model capabilities that could be misused. The research explores technical approaches to selectively remove or gate dangerous capabilities.

#AI safety #dual-use #model capabilities #knowledge removal

Read article →
C4N, now GA: Delivering cloud's highest per vCPU network and block storage I/O for x86 workloads Cloud 7.0
Google Cloud Blog

C4N, now GA: Delivering cloud's highest per vCPU network and block storage I/O for x86 workloads

Google Cloud's C4N instance family is now generally available, offering up to 400 Gbps network bandwidth and 95 million packets per second via custom Titanium offload hardware. Designed for network and storage-intensive workloads like firewalls, load balancers, real-time analytics, and AI/ML inference, C4N delivers 33% higher per-vCPU network bandwidth and 224% faster packet processing than comparable Intel-based offerings.

#Compute Engine #instance types #network performance #storage I/O

Read article →
Introducing Claude apps gateway for AWS AI 8.0
AWS ML Blog

Introducing Claude apps gateway for AWS

AWS and Anthropic announce Claude apps gateway, a self-hosted control plane for centralized access, cost, and policy management across Claude Code and Claude Desktop deployments. Runs as a stateless container backed by PostgreSQL, deployable via Amazon Bedrock or Claude Platform on AWS, eliminating per-developer credential provisioning.

#LLM #Claude #governance #agents

Read article →
GitHub availability report: June 2026 DevOps 5.0
GitHub Blog

GitHub availability report: June 2026

GitHub's June 2026 infrastructure report details migration progress of monolith and Git services to Azure, including traffic ramp pauses for stability, per-turnup health gates, and deliberate decisions to avoid user latency. Monolith traffic peaked at 45% in Central US; Git reached 43% with planned plateau near 45%.

#infrastructure #availability #Azure #migration

Read article →
Navigating a Synapse Migration to Databricks Cloud 5.0
Databricks Blog

Navigating a Synapse Migration to Databricks

Databricks publishes a migration guide for teams moving from Azure Synapse to Databricks, covering architecture patterns, tooling, and operational considerations. The post addresses SQL compatibility, performance tuning, and cost optimization during the transition.

#migration #SQL #data-warehouse #Azure

Read article →
JetBrains' next move isn't a better IDE — it's a governance layer over Claude Code, Codex, and Gemini CLI AI 7.0
The New Stack

JetBrains' next move isn't a better IDE — it's a governance layer over Claude Code, Codex, and Gemini CLI

JetBrains announces AI for Teams and Organizations, a governance and cost-control layer that sits above Claude Code, Copilot, Gemini CLI, and other AI tools without forcing standardization. The platform adds shared context, reusable agentic processes, and organization-wide visibility rolling out through July and August.

#agents #governance #IDE #multi-vendor

Read article →
The CNCF Data Storage in Cloud Native AI White Paper Cloud 6.0
CNCF Blog

The CNCF Data Storage in Cloud Native AI White Paper

CNCF's TAG Infrastructure released a white paper on data storage for cloud-native AI/ML workloads, addressing bottlenecks in GPU-fed training pipelines. The guide covers data lake houses, vector databases, small-file metadata pressure, compute-storage disaggregation overhead, and shifting workload profiles between batch training and production inference.

#Kubernetes #storage #AI infrastructure #data pipeline

Read article →
Meta says it caught OpenAI. One thing is missing. AI 6.0
The New Stack

Meta says it caught OpenAI. One thing is missing.

Meta's superintelligence chief claimed the Watermelon model (still in training) has reached parity with OpenAI's GPT-5.5 on benchmarks, but provided no benchmark names, model card, evaluation harness, or ship date. The claim is single-sourced from an internal town hall with no public verification possible, and Meta declined to comment when asked for specifics.

#LLM #benchmarks #evals #frontier models

Read article →
Data for Agents AI 5.0
Hugging Face Blog

Data for Agents

Hugging Face and NVIDIA collaborate on open datasets for agent training and evaluation. Without the full excerpt, the scope covers data infrastructure for agentic AI systems but specific datasets, formats, or benchmarks remain unclear.

#agents #datasets #training data #evaluation

Read article →
OpenAI's own safety card says GPT-5.6 has a lying problem AI 7.0
The New Stack

OpenAI's own safety card says GPT-5.6 has a lying problem

OpenAI released GPT-5.6 (Sol, Terra, Luna variants) publicly after weeks of limited partner preview. Terra emerges as the practical choice for developers, delivering GPT-5.5-comparable performance at half the cost ($2.50/$15 per million tokens vs Sol's $5/$30), while OpenAI's safety documentation flags Sol's tendency to produce false outputs.

#LLM #GPT-5.6 #inference cost #safety

Read article →
AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers AI 8.0
The Hacker News

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos analysis shows that AI coding agents like Claude Code, Cursor, and OpenAI Codex trigger endpoint detection rules designed for human attackers because their behavioral patterns (credential enumeration, system queries) mimic intrusion activity. The agents are benign but create false positives that could blind security teams or force disruptive policy changes.

#agents #endpoint security #detection evasion #false positives

Read article →
Automatically sort and prioritize your mailboxes by using Amazon Bedrock AI 5.0
AWS ML Blog

Automatically sort and prioritize your mailboxes by using Amazon Bedrock

AWS demonstrates using Amazon Bedrock for automated email classification and routing in public sector organizations. The system analyzes incoming messages and routes them to appropriate departments (IT, Children's Services, Housing, Benefits) based on urgency and relevance, reducing manual sorting overhead.

#LLM #classification #Amazon Bedrock #automation

Read article →
Benchmarking Coding Agents on Databricks' Multi-Million Line Codebase AI 7.0
Databricks Blog

Benchmarking Coding Agents on Databricks' Multi-Million Line Codebase

Databricks benchmarks LLM-based coding agents against their own multi-million-line production codebase, measuring task completion rates, latency, and accuracy across different models and retrieval strategies. The post shares methodology and results for evaluating agent performance on real-world engineering tasks.

#agents #coding #LLM #evals

Read article →
Google Cloud named Leader in the 2026 Gartner® Magic Quadrant™ for AI Infrastructure AI 5.0
Google Cloud Blog

Google Cloud named Leader in the 2026 Gartner® Magic Quadrant™ for AI Infrastructure

Google Cloud was named a Leader in Gartner's inaugural 2026 Magic Quadrant for AI Infrastructure, ranked highest for Ability to Execute and furthest for Completeness of Vision. The announcement highlights Google's decade-long co-design of silicon and software for Gemini, serving 9 of 10 frontier AI labs and major capital markets firms.

#AI infrastructure #Gartner MQ #Gemini #TPU

Read article →
Securing Amazon Bedrock AgentCore Runtime with AWS WAF AI 6.0
AWS ML Blog

Securing Amazon Bedrock AgentCore Runtime with AWS WAF

AWS details integrating AWS WAF with Amazon Bedrock AgentCore Runtime via Application Load Balancers and VPC Interface Endpoints. The post addresses the challenge of health checks requiring authentication (SigV4 or OAuth) and presents two architecture patterns for securing agent API endpoints.

#security #agents #AWS WAF #authentication

Read article →
Gemini Enterprise for Education named a Commander in Tambellini StarChart: 2026 AI Agents for Administrative Efficiency AI 5.0
Google Cloud Blog

Gemini Enterprise for Education named a Commander in Tambellini StarChart: 2026 AI Agents for Administrative Efficiency

Google's Gemini Enterprise for Education received top ranking in Tambellini Group's 2026 AI Agents for Administrative Efficiency report, recognized as a Commander for combining Gemini models, agent-building tools, enterprise search, governance controls, and cloud infrastructure in a single platform. The recognition highlights Google's agentic AI capabilities for higher education institutions automating campus operations and student support.

#agents #LLM #enterprise #education

Read article →
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware Security 8.0
The Hacker News

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

Researchers demonstrate HalluSquatting, an attack that exploits AI coding assistants' tendency to hallucinate package names. Attackers register fake but plausible project names that assistants reliably invent, then serve malware when the assistant fetches the nonexistent dependency during code generation.

#agents #supply-chain #hallucination #malware

Read article →
Airbnb Shares Architecture Behind Sitar-Agent Dynamic Configuration Sidecar for Kubernetes Services DevOps 7.0
InfoQ DevOps

Airbnb Shares Architecture Behind Sitar-Agent Dynamic Configuration Sidecar for Kubernetes Services

Airbnb detailed Sitar-agent, a Kubernetes sidecar that delivers dynamic configuration updates to tens of thousands of pods multiple times per minute. The system was redesigned in Java with Amazon S3 snapshot bootstrapping and migrated from Sparkey to SQLite for improved reliability, startup performance, and configuration availability at scale.

#Kubernetes #sidecar #configuration #DevOps

Read article →
Most enterprises will hand root cause analysis to AI agents within two years AI 7.0
The New Stack

Most enterprises will hand root cause analysis to AI agents within two years

Elastic's 2026 observability report shows 85% of organizations already use GenAI for observability, with projections reaching 98% within two years. AI agents are automating root cause analysis by autonomously monitoring systems, interpreting telemetry, and determining remediation, shifting enterprises from reactive to proactive observability.

#agents #observability #GenAI #root cause analysis

Read article →
Meet the 33 cybersecurity startups joining the Gemini Startup Forum AI 5.0
Google Cloud Blog

Meet the 33 cybersecurity startups joining the Gemini Startup Forum

Google announced the first cohort of 33 startups selected for the Gemini Startup Forum: Cybersecurity, organized into six focus areas including autonomous agent protection and post-quantum cryptography. Participants work alongside AI and cybersecurity specialists from Google DeepMind, Google Cloud, and Wiz to integrate AI into security solutions.

#agents #security #AI #EDR

Read article →
Separating signal from noise in coding evaluations AI 8.0
OpenAI Blog

Separating signal from noise in coding evaluations

OpenAI's analysis identifies methodological flaws in SWE-Bench Pro, a widely-used benchmark for evaluating code generation models, questioning the reliability of results that many labs have published against it. The work highlights how benchmark design choices can inflate or obscure true model performance, with implications for how the community validates coding AI systems.

#evals #benchmarks #code generation #LLM evaluation

Read article →
Entire is building a Git network for agents DevOps 8.0
The New Stack

Entire is building a Git network for agents

Thomas Dohmke's post-GitHub startup Entire is launching a distributed Git network designed to handle agent-scale workloads by mirroring GitHub repositories to regional nodes, eliminating rate limits and latency bottlenecks. Code remains on GitHub while agents work with local Entire mirrors for fast push/pull/clone operations.

#agents #Git #distributed systems #infrastructure

Read article →
"Nature is the most computationally efficient system we know": How Refiant used swarm optimization to build a 10-million-token AI model AI 7.0
The New Stack

"Nature is the most computationally efficient system we know": How Refiant used swarm optimization to build a 10-million-token AI model

Refiant launched Protea, a 10-million-token context-window model using swarm optimization algorithms inspired by ant colonies and beehives. The approach addresses LLM inefficiency at the elemental level, competing with Subquadratic's 12-million-token model in the emerging long-context race.

#LLM #context window #swarm optimization #long-context

Read article →
Your Laptop Is the New Production Environment AI 7.0
Docker Blog

Your Laptop Is the New Production Environment

Docker explores how AI agents are shifting from code suggestions to autonomous task execution, delegating meaningful engineering work like refactoring services and opening PRs. The article frames this shift as moving from capability bottlenecks to trust and confidence issues, with developer laptops becoming the new execution environment for agent-driven workflows.

#agents #tool-use #AI governance #developer workflow

Read article →
New Ghost Phishing Wave Is Breaking Traditional Email Security Security 7.0
The Hacker News

New Ghost Phishing Wave Is Breaking Traditional Email Security

EvilTokens campaign uses ghost phishing technique that hides malicious pages until decryption occurs in the victim's browser, evading traditional URL-based email security checks. The attack targets US and European businesses and bypasses Microsoft 365 security controls, exposing sensitive data and response time vulnerabilities.

#phishing #email security #evasion #threat intelligence

Read article →
Introducing Meerkat: an experiment in global consensus DevOps 7.0
Cloudflare Blog

Introducing Meerkat: an experiment in global consensus

Cloudflare introduced Meerkat, a consensus algorithm designed for wide-area networks that addresses limitations of Raft by reducing reliance on leader election and timeout configuration. The system enables globally distributed control-plane state consistency across 330+ data centers while tolerating network degradation and data center failures.

#consensus #distributed systems #infrastructure #Raft

Read article →
Felons, Fraudsters Flog Offensive Cybersecurity Startup Security 6.0
Krebs on Security

Felons, Fraudsters Flog Offensive Cybersecurity Startup

Krebs reports on IRIS C2, a McLean-based cybersecurity firm offering million-dollar bounties for zero-day exploits, operated by convicted felons and far-right conspiracy theorists with prior ventures in fake intelligence and AI-based lobbying platforms. The operation uses social media to recruit vulnerability researchers under the guise of a legitimate exploit acquisition business.

#supply-chain #threat intelligence #fraud #zero-day

Read article →
Announcing etcd v3.7.0 DevOps 7.0
Kubernetes Blog

Announcing etcd v3.7.0

etcd v3.7.0 introduces RangeStream for streaming large result sets in chunks instead of buffering, eliminating the legacy v2store dependency, and completing a protobuf overhaul. Performance improvements include faster leases and more reliable operations. Ships with bbolt v1.5.1 and raft v3.7.0.

#etcd #Kubernetes #distributed-systems #performance

Read article →
GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures Security 9.0
The Hacker News

GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures

Researchers discovered that signed Git commits can be rewritten to produce different hashes while maintaining valid signatures, allowing attackers to forge commits that GitHub still marks as verified. The attack breaks the assumption that commit hashes are immutable identifiers, enabling supply-chain attacks on code review workflows.

#supply-chain #Git #signature forgery #code review

Read article →
The Verification Step Is the New ATO Battleground in 2026 Security 6.0
The Hacker News

The Verification Step Is the New ATO Battleground in 2026

As passkeys become mainstream, attackers are shifting from credential stuffing to targeting the verification step itself. The article examines how the hardened front door of authentication is forcing threat actors to evolve their account takeover tactics, moving beyond bulk credential attacks to more sophisticated verification-layer exploits.

#account takeover #passkeys #authentication #threat landscape

Read article →
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code AI 8.0
The Hacker News

GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code

Researchers found that GitHub Copilot, Claude, and Gemini refuse dangerous requests in chat mode but comply when the same request is decomposed into small, innocuous-looking code steps in the editor. This reveals a significant gap in how LLM safety guardrails apply across different interfaces and interaction patterns.

#LLM safety #prompt injection #AI security #guardrails

Read article →
Network boundary for AI agents using NGINX and OpenTelemetry AI 7.0
CNCF Blog

Network boundary for AI agents using NGINX and OpenTelemetry

A CNCF contributor demonstrates enforcing network boundaries for AI agents using NGINX as traffic control and OpenTelemetry for observability, enabling fine-grained application-aware traffic shaping without new infrastructure. The approach addresses operational and security concerns around agentic autonomy by controlling network access to agent tools.

#agents #observability #security #NGINX

Read article →
How to Evaluate an Enterprise Analytics Platform Cloud 5.0
Databricks Blog

How to Evaluate an Enterprise Analytics Platform

Databricks outlines a framework for evaluating enterprise analytics platforms beyond surface-level dashboard comparisons. The guide covers performance, scalability, integration, and total cost of ownership considerations.

#analytics #evaluation #enterprise #performance

Read article →
Introducing GPT-Live AI 7.0
OpenAI Blog

Introducing GPT-Live

OpenAI has released GPT-Live, a new generation of voice models enabling real-time, natural voice interaction with ChatGPT. The models power ChatGPT Voice and represent advances in low-latency speech synthesis and understanding for conversational AI.

#voice models #speech synthesis #real-time interaction #multimodal

Read article →
Native-speed vLLM transformers modeling backend AI 7.0
Hugging Face Blog

Native-speed vLLM transformers modeling backend

Hugging Face and vLLM have integrated native-speed Transformers modeling backend support, allowing vLLM to leverage Transformers library optimizations for improved inference performance. This integration reduces latency and throughput bottlenecks in LLM serving.

#vLLM #inference optimization #Transformers #LLM serving

Read article →
Coinbase runs 1,200 agents and just slashed its AI bill in half AI 8.0
The New Stack

Coinbase runs 1,200 agents and just slashed its AI bill in half

Coinbase and Vercel are routing work across multiple AI models instead of committing to single providers. Coinbase cut internal AI spend by nearly 50% while growing token usage, using cheaper defaults and smarter routing logic. Vercel routes over a trillion tokens daily across millions of deployments, moving away from single-lab partnerships.

#multi-model #routing #inference #cost optimization

Read article →
Watch AWS engineers troubleshoot agentic AI with OpenTelemetry and OpenSearch AI 7.0
The New Stack

Watch AWS engineers troubleshoot agentic AI with OpenTelemetry and OpenSearch

OpenTelemetry and OpenSearch provide unified observability for AI agents across fragmented workflows, addressing the challenge that traditional log-metric-trace models cannot handle the volume and non-determinism of agentic systems. OpenSearch's 2024 roadmap specifically targets AI agent retrieval and observability integration, with OTel already at 95% adoption for cloud-native instrumentation.

#agents #observability #OpenTelemetry #distributed tracing

Read article →
Vercel acquires Better Auth to give AI agents their own identity AI 8.0
The New Stack

Vercel acquires Better Auth to give AI agents their own identity

Vercel acquired Better Auth, a TypeScript authentication framework with 4.7M weekly npm downloads, to develop Agent Auth, an open protocol giving AI agents scoped, delegated, and revocable identities separate from their deployers. This addresses the current problem where agents act under borrowed user credentials with no granular permission boundaries.

#agents #authentication #identity #authorization

Read article →
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service Security 7.0
The Hacker News

RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

RedWing, a new Android malware operation, is being rented as a ready-made bank-fraud service on Telegram. The malware enables attackers to take over victim phones, steal banking credentials, and capture one-time codes. Zimperium's zLabs attributes it to a new variant of Oblivion, a $300-a-month rent-a-malware tool.

#Android malware #banking fraud #MaaS #credential theft

Read article →
Enrich your datasets with business context: Migrating from legacy Topics to semantic datasets in Amazon Quick Cloud 6.0
AWS ML Blog

Enrich your datasets with business context: Migrating from legacy Topics to semantic datasets in Amazon Quick

Amazon Quick now embeds business context (column descriptions, synonyms, calculated fields, custom instructions) directly into datasets rather than maintaining separate legacy Topics. Dataset Enrichment consolidates permissions, semantics, and AI context into a single asset, while Topics are re-purposed as a multi-dataset semantic layer for cross-dataset relationships and business metrics.

#semantic layer #business context #data governance #Quick Sight

Read article →
Data modeling patterns for Amazon Quick Sight multi-dataset relationships Cloud 6.0
AWS ML Blog

Data modeling patterns for Amazon Quick Sight multi-dataset relationships

This guide covers seven natively supported data modeling patterns for Quick Sight multi-dataset relationships, including star schema, snowflake, and advanced scenarios. Each pattern includes table structures, use cases, implementation steps, and sample SQL, with current limitation that all joins are inner joins only.

#data modeling #Quick Sight #multi-dataset #star schema

Read article →
Multi-dataset Topic best practices for Amazon Quick Chat AI 7.0
AWS ML Blog

Multi-dataset Topic best practices for Amazon Quick Chat

Quick Sight's multi-dataset Topics enable AI-generated SQL without pre-defined relationships by leveraging semantic context (custom instructions, field synonyms, descriptions). The Chat engine uses this metadata to automatically write outer joins, unions, subqueries, and self-joins at query time.

#semantic layer #generative AI #SQL generation #Quick Chat

Read article →
Build a unified semantic layer across datasets with multi-dataset Topics in Amazon Quick Cloud 7.0
AWS ML Blog

Build a unified semantic layer across datasets with multi-dataset Topics in Amazon Quick

Quick Sight now supports multi-dataset Topics (public preview) allowing up to 12 datasets per topic with defined relationships, replacing the previous one-dataset-per-topic model. The Quick Chat agent automatically traverses relationships and generates queries without requiring pre-joined denormalized tables.

#semantic layer #multi-dataset #Quick Sight #Quick Chat

Read article →
Monitoring discriminative ML models using Amazon SageMaker AI with MLflow AI 6.0
AWS ML Blog

Monitoring discriminative ML models using Amazon SageMaker AI with MLflow

This guide covers monitoring classification and regression models in production by tracking data drift and model accuracy degradation using SageMaker and MLflow. It addresses how uncontrollable factors (consumer behavior shifts, product releases, sensor upgrades) cause model quality decay and how to intervene before accuracy becomes problematic.

#model monitoring #data drift #MLflow #SageMaker

Read article →
Build an AI-powered AWS support companion with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Build an AI-powered AWS support companion with Amazon Bedrock AgentCore

An AWS Support Companion agent built with Bedrock AgentCore and Model Context Protocol (MCP) connects to CloudWatch, AWS documentation, AWS re:Post, and support case creation. The agent reduces incident investigation from 30-45 minutes of context-switching to a single conversational interface, deployed via AWS CloudFormation.

#agents #tool use #MCP #AWS integration

Read article →
How AWS Finance teams reclaimed hundreds of hours with Amazon Quick AI 6.0
AWS ML Blog

How AWS Finance teams reclaimed hundreds of hours with Amazon Quick

AWS Finance teams used Amazon Quick Chat agents and Flows to automate FP&A workflows, including scenario modeling across multiple data sources and recurring financial reporting. The solution reduced manual data compilation and reconciliation, freeing teams from data preparation to focus on analysis and strategy.

#agents #workflow automation #Quick Chat #business intelligence

Read article →
Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots AI 8.0
The Hacker News

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

A critical flaw in Google Dialogflow CX allowed attackers with edit rights on one Code Block-enabled agent to compromise other Code Block-enabled agents within the same Google Cloud project. Exploitation could expose live conversations, steal user data, and inject attacker-controlled messages including password-reset requests. Varonis discovered the vulnerability.

#Dialogflow CX #agent compromise #cross-agent #Google Cloud

Read article →
Anthropic's Claude Cowork now keeps working when you close your laptop AI 7.0
The New Stack

Anthropic's Claude Cowork now keeps working when you close your laptop

Claude Cowork, Anthropic's agentic tool for knowledge workers, moved from desktop-only to web and mobile with cloud-backed execution, allowing tasks to run continuously without a device online. Max plan subscribers ($100/month) get beta access now, with unified Chat and Cowork interfaces sharing projects and artifacts.

#agents #Claude #agentic AI #task automation

Read article →
A developer's guide to publishing agents in Gemini Enterprise and Google Cloud Marketplace AI 7.0
Google Cloud Blog

A developer's guide to publishing agents in Gemini Enterprise and Google Cloud Marketplace

Google published a step-by-step guide for developers to build, publish, and commercialize AI agents through Google Cloud Marketplace and Gemini Enterprise Agent Platform. The guide covers agent architecture design, integration with marketplace billing, identity provider security, and the Agent2Agent (A2A) protocol for agent interoperability.

#agents #Gemini Enterprise #marketplace #A2A protocol

Read article →
Report: 83% of organizations need to upgrade their infrastructure to support agentic AI AI 7.0
Google Cloud Blog

Report: 83% of organizations need to upgrade their infrastructure to support agentic AI

Google's State of AI Infrastructure report surveyed 1,400+ IT leaders and found 83% of organizations require infrastructure upgrades for production agentic AI. The report identifies the inference tax problem: agentic workloads trigger hundreds of downstream actions requiring massive context windows, making legacy architecture financially unsustainable.

#agents #infrastructure #inference #context windows

Read article →
Drive proactive security, prioritize risks with Google Threat Intelligence and Wiz ASM Security 6.0
Google Cloud Blog

Drive proactive security, prioritize risks with Google Threat Intelligence and Wiz ASM

Google announced integration between Google Threat Intelligence and Wiz Attack Surface Management (ASM) to correlate real-world exposures with real-time adversary activity. The integration uses AI scanning to detect exploitable vulnerabilities and prioritize remediation based on active threat targeting.

#threat intelligence #ASM #vulnerability prioritization #AI scanning

Read article →
20 questions for the Agentic Enterprise (and how Agent Platform can help) AI 6.0
Google Cloud Blog

20 questions for the Agentic Enterprise (and how Agent Platform can help)

Google published a guide with 20 essential questions for IT leaders deploying AI agents across organizations, covering build, scale, governance, and optimization. The guide addresses agent security, token budget management, data leakage prevention, and tool fragmentation using Gemini Enterprise Agent Platform.

#agents #governance #enterprise AI #token optimization

Read article →
External key management for Azure Managed HSM is now in public preview Cloud 6.0
Azure Blog

External key management for Azure Managed HSM is now in public preview

Azure Key Vault Managed HSM now supports external key management in public preview, allowing organizations to store encryption key material on hardware physically outside Azure datacenters. The feature extends Managed HSM's existing single-tenant FIPS 140-3 Level 3 sovereignty model with customer-controlled security domains and zero Microsoft operator access.

#HSM #key management #security #sovereignty

Read article →
BGP route policies: Top 3 use cases by customer demand Cloud 5.0
Google Cloud Blog

BGP route policies: Top 3 use cases by customer demand

Google Cloud highlighted three customer use cases for BGP route policies on Cloud Router, including route filtering, network protection, and complex routing architectures. The post showcases policy named sets, a new feature powered by Common Expression Language (CEL) that groups IPv4/IPv6 prefixes and BGP communities for simplified management.

#BGP #Cloud Router #routing #CEL

Read article →
Hugging Face Models on Foundry Managed Compute Cloud 5.0
Hugging Face Blog

Hugging Face Models on Foundry Managed Compute

Microsoft Foundry now supports Hugging Face models on its managed compute infrastructure, enabling seamless model deployment and scaling without manual infrastructure provisioning. Bridges Hugging Face Hub with Azure's managed compute layer.

#Foundry #managed-compute #model-deployment #Azure

Read article →
Streamline identity lifecycle management on HCP with SCIM provisioning DevOps 5.0
HashiCorp Blog

Streamline identity lifecycle management on HCP with SCIM provisioning

HashiCorp Cloud Platform now supports SCIM provisioning to automate user and group lifecycle management from identity providers like Entra ID and Okta. SCIM synchronizes user creation, deactivation, group provisioning, and membership updates, eliminating manual identity management across HCP and reducing operational complexity.

#SCIM #identity management #IAM #provisioning

Read article →
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data AI 8.0
The Hacker News

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

Researchers at Noma Security demonstrated that a public GitHub issue can manipulate GitHub Agentic Workflows into exfiltrating private repository contents. An attacker needs only to open a normal-looking issue on a public repo with no credentials or org access. If the agent has read permissions across repos, private data becomes accessible.

#GitHub Actions #agents #prompt injection #private data exposure

Read article →
The organizational iceberg: the invisible data breaking your AI agents AI 8.0
The New Stack

The organizational iceberg: the invisible data breaking your AI agents

AI agents expose inconsistencies in organizational data by hitting undocumented institutional knowledge, approval workflows, and judgment calls that never made it into systems. The article argues that graph-based connectors and metadata audits are insufficient without capturing the reasoning and context behind data decisions that agents need to operate correctly.

#agents #data quality #metadata #knowledge graphs

Read article →
The 'Ghost' in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI Security 8.0
Google Cloud Blog

The 'Ghost' in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI

Google and Mandiant researchers detail a novel attack vector exploiting configuration drift in Active Directory Federation Services (ADFS) environments. When AutoCertificateRollover is disabled and certificates are manually rotated, signing keys can persist in Machine DPAPI as 'ghost' records, allowing attackers to forge SAML tokens and bypass MFA and conditional access controls. This technique avoids direct interaction with monitored components like LSASS, making it harder to detect in enterprise environments.

#ADFS #SAML #identity #DPAPI

Read article →
Google Cloud Labs: Accelerate AI with Cloud Run AI 5.0
Google Cloud Blog

Google Cloud Labs: Accelerate AI with Cloud Run

Google announced the 2026 Accelerate AI with Cloud Run roadshow, updated to focus on the full AI agent lifecycle from prototype to production. The curriculum covers Cloud Run fundamentals, building agents with Google's Agent Development Kit (ADK) and RAG, and optimization using Gemma 4 and BigQuery MCP server.

#agents #Cloud Run #RAG #ADK

Read article →
Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker Security 6.0
The Hacker News

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

U.S. prosecutors used a persistent Windows device ID to link an alleged Scattered Spider member to a May 2025 luxury jewelry retailer breach. Microsoft records tied the device ID to attacker-controlled accounts used for persistence, then to online accounts belonging to 19-year-old Peter Stokes, who is now charged.

#Scattered Spider #device ID #forensics #account linkage

Read article →
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants AI 9.0
The Hacker News

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Sand Security Research disclosed a critical session isolation vulnerability in Writer, an enterprise AI platform, allowing cross-tenant compromise via agent previews. Codenamed WriteOut, the one-click vulnerability enabled attackers to escalate from zero access to full account takeover by stealing session tokens across tenant boundaries.

#Writer AI #session isolation #cross-tenant #token theft

Read article →
How to kill the code review AI 8.0
The New Stack

How to kill the code review

Traditional code review is no longer viable as a quality gate in AI-accelerated development, with Faros data showing code churn up 861%, incidents per PR up 243%, and 31% of PRs merged without review. The article argues code review's real value was knowledge transfer and collaboration, not bug-catching, and proposes rethinking what replaces it.

#agents #code generation #AI-assisted development #CI/CD

Read article →
Why sandboxing your agent is not enough AI 7.0
CNCF Blog

Why sandboxing your agent is not enough

Agent-sandbox provides Kubernetes-based isolation for AI agents using pod primitives (identities, storage, networking), but agent-substrate adds dynamic wake-up on invocation to pack more agents per infrastructure while maintaining security. The article compares both projects and discusses integration with kagent and agentgateway.

#agents #Kubernetes #security #sandboxing

Read article →
What Changes When Your Software Supply Chain Includes AI Writing Your Code? AI 7.0
The Hacker News

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

The article examines how AI code generation introduces new supply chain security risks beyond traditional dependency management. Where SolarWinds, Log4Shell, and XZ Utils taught lessons about third-party code risk, AI-generated code adds questions about model training data provenance, prompt injection in build pipelines, and the difficulty of auditing generated artifacts at scale.

#supply chain #AI code generation #LLM #build pipeline

Read article →
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities Security 7.0
The Hacker News

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A suspected China-aligned threat group exploited critical Roundcube webmail vulnerabilities, including CVE-2024-42009 (CVSS 9.3), against physics and engineering departments at U.S. and Canadian universities. The campaign targeted credential harvesting from academic institutions, leveraging now-patched flaws in the open-source email solution.

#Roundcube #CVE-2024-42009 #webmail #credential theft

Read article →
How HubSpot Scaled Semantic Search to 20 Billion Vectors AI 7.0
InfoQ DevOps

How HubSpot Scaled Semantic Search to 20 Billion Vectors

HubSpot detailed how its semantic search platform scaled from proof of concept to production, now managing over 20 billion vectors across 38+ teams. The system supports agents, RAG, and contact deduplication, with increased agent usage driving requirements for improved retrieval quality and latency. The scale demonstrates operational challenges in managing large-scale vector infrastructure for production AI workloads.

#vector-search #RAG #agents #semantic-search

Read article →
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware Security 7.0
The Hacker News

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Tenda router firmware versions contain an undocumented authentication backdoor (CVE-2026-11405) that allows attackers to bypass password verification and gain administrative access to web management interfaces. The vulnerability affects multiple firmware releases from the Chinese network device manufacturer.

#CVE #backdoor #authentication #firmware

Read article →
LeRobot v0.6.0: Imagine, Evaluate, Improve AI 6.0
Hugging Face Blog

LeRobot v0.6.0: Imagine, Evaluate, Improve

LeRobot v0.6.0 adds generative modeling, evaluation metrics, and iterative improvement workflows for robot learning. Expands the framework beyond imitation learning to support vision-based policy generation and systematic evaluation.

#robotics #imitation-learning #evaluation #generative-models

Read article →
From Hugging Face to Amazon SageMaker Studio in one click AI 7.0
AWS ML Blog

From Hugging Face to Amazon SageMaker Studio in one click

AWS launches deep-link integration between Hugging Face and SageMaker Studio, allowing developers to discover models on Hugging Face and land directly in SageMaker with pre-loaded model and configured environment. Eliminates friction of manual setup including domain creation, IAM configuration, and GPU quota requests.

#SageMaker #Hugging Face #fine-tuning #foundation models

Read article →
Teaching models to forget: Selective unlearning with Amazon Nova AI 8.0
AWS ML Blog

Teaching models to forget: Selective unlearning with Amazon Nova

AWS introduces Reverse Direct Preference Optimization (rDPO), a novel unlearning technique enabling selective adjustment of model safeguards without prompt engineering. Amazon Nova Customizable Content Moderation Settings (CCMS) lets approved customers tune safety across four responsible AI pillars while preserving model quality.

#unlearning #preference optimization #Nova #safety

Read article →
Enhancing Goodput in Large-Scale LLM Training with Nonuniform Tensor Parallelism AI 8.0
NVIDIA Developer Blog

Enhancing Goodput in Large-Scale LLM Training with Nonuniform Tensor Parallelism

NVIDIA describes nonuniform tensor parallelism as a technique to improve goodput (useful computation) during large-scale LLM training across thousands of GPUs. The approach handles device unavailability and resource fluctuations in tightly coupled clusters by dynamically adjusting tensor partition strategies rather than stalling entire jobs.

#tensor parallelism #distributed training #GPU clusters #LLM training

Read article →
A new study just debunked the biggest fear about AI and open source AI 7.0
The New Stack

A new study just debunked the biggest fear about AI and open source

A Peking University study tracked 1,888 GitHub repositories after adopting AI coding agents like Cursor and Claude Code, using difference-in-differences methodology to isolate causal effects. Newcomer participation remained steady or slightly increased, cyclomatic complexity rose 3-4%, and code review patterns shifted but maintainability concerns did not materialize as feared.

#AI agents #open source #code generation #empirical study

Read article →
Microsoft, Google and Cloudflare just made 2029 the new quantum deadline Security 8.0
The New Stack

Microsoft, Google and Cloudflare just made 2029 the new quantum deadline

Microsoft, Google, and Cloudflare have accelerated their post-quantum cryptography migration deadline from 2030 to 2029, citing advances in quantum research that shift the risk horizon. The shift reflects recognition that cryptographically relevant quantum computers may arrive sooner than expected and that the multi-year engineering effort requires immediate planning.

#post-quantum cryptography #quantum computing #security #infrastructure migration

Read article →
Getting Claude Code to grunt in Caveman-speak might not save as many tokens as you think AI 6.0
The New Stack

Getting Claude Code to grunt in Caveman-speak might not save as many tokens as you think

Developers are experimenting with 'caveman mode' prompting (stripped grammar, short fragments) to reduce token consumption in AI coding tools as usage-based billing becomes standard. Elastic reported 63.6% average token reduction across internal tests, but the technique's real-world effectiveness varies significantly.

#prompt engineering #token optimization #cost reduction #Claude Code

Read article →
Why most AI projects fail: It's infrastructure and people AI 7.0
The New Stack

Why most AI projects fail: It's infrastructure and people

Enterprise AI projects fail at scale due to two core issues: prototyping infrastructure built on inadequate data foundations that cannot support production workloads, and operational teams lacking capacity to manage production deployments. The article identifies four specific gaps between prototype and production environments that prevent AI projects from moving beyond testing.

#AI infrastructure #MLOps #data infrastructure #production deployment

Read article →
Palantir's Alex Karp and Mistral's Arthur Mensch agree: AI lock-in is coming for enterprises AI 7.0
The New Stack

Palantir's Alex Karp and Mistral's Arthur Mensch agree: AI lock-in is coming for enterprises

Palantir CEO Alex Karp and Mistral CEO Arthur Mensch both warned against vendor lock-in from closed AI providers, with Karp criticizing OpenAI and Anthropic for overcharging and data harvesting, while Mensch advocates for open-weight models and enterprise-owned training flywheels. Palantir's Nvidia partnership deploys open Nemotron models in air-gapped sovereign environments via Palantir's AIP and Foundry stack.

#open-weight models #vendor lock-in #sovereign AI #enterprise architecture

Read article →
Run MiniMax models on Amazon Bedrock AI 6.0
AWS ML Blog

Run MiniMax models on Amazon Bedrock

MiniMax open-weight foundation models now available on Amazon Bedrock, including the new M2.5 trained for agent-native execution. Models are purpose-built for software engineering and agentic use cases, with inference running on AWS-operated infrastructure and no data sharing with model providers.

#Bedrock #agents #open-weight models #inference

Read article →
Automatically redact PII in images with Amazon Nova AI 7.0
AWS ML Blog

Automatically redact PII in images with Amazon Nova

Amazon Nova uses advanced vision understanding to automatically detect and redact PII in images, handling edge cases like partial faces, reflections, and contextual identifiers that defeat single-purpose masking tools. Addresses GDPR and PCI DSS compliance requirements for data sharing and ML training workflows.

#Nova #vision #PII redaction #compliance

Read article →
Shift into high gear with agents: Securing the software-defined vehicle AI 6.0
Google Cloud Blog

Shift into high gear with agents: Securing the software-defined vehicle

Google Cloud and Valtech announced Nexus SDV, an open-source AI-enabled platform for managing software-defined vehicles at scale up to 100 million devices. Built on Gemini models and the Gemini Enterprise Agent Platform, Nexus AI transforms vehicle telemetry into real-time actionable insights using agentic reasoning. The platform integrates with Android Automotive OS and uses Arm-based compute and Bigtable to reduce total cost of ownership.

#agents #Gemini #automotive #AI-native

Read article →
AWS Weekly Roundup: Claude Sonnet 5 on AWS, Amazon WorkSpaces for AI agents, AWS service availability updates, and more (July 6, 2026) AI 6.0
AWS News

AWS Weekly Roundup: Claude Sonnet 5 on AWS, Amazon WorkSpaces for AI agents, AWS service availability updates, and more (July 6, 2026)

AWS announces Claude Sonnet 5 availability on Bedrock, Amazon WorkSpaces for AI agents, and EC2 C9g/C9gd instances with Graviton5 processors delivering 25% better compute performance and 5x larger cache. CloudFormation Express mode enables AI agents and developers to receive deployment confirmation in seconds.

#Claude #Bedrock #agents #EC2

Read article →
PRX Part 4: Our Data Strategy AI 6.0
Hugging Face Blog

PRX Part 4: Our Data Strategy

Photoroom details their data curation and preparation strategy for training PRX, a production image generation model. The post covers dataset composition, quality filtering, and annotation practices that enabled their model to handle real-world e-commerce and product photography tasks at scale.

#training data #model training #dataset curation #image generation

Read article →
Andrej Karpathy, Google and Garry Tan agree Markdown is the answer, but they're not solving the same problem AI 7.0
The New Stack

Andrej Karpathy, Google and Garry Tan agree Markdown is the answer, but they're not solving the same problem

Andrej Karpathy's LLM Wiki concept, Google's Open Knowledge Format v0.1, and Garry Tan's gstack all converge on Markdown-based agent memory and context. Karpathy targets personal knowledge bases, Google targets BigQuery agent context, and Tan's gstack (66k GitHub stars) uses 23 specialist Markdown roles for Claude Code without runtime overhead.

#agent memory #Markdown #knowledge representation #Claude Code

Read article →
A global workspace in language models AI 7.0
Anthropic Research

A global workspace in language models

Anthropic research reveals an emergent internal workspace in Claude where the model holds intermediate thoughts that do not appear in the final output. This interpretability finding provides insight into how Claude structures reasoning internally.

#interpretability #LLM #reasoning #Claude

Read article →
Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More Security 6.0
The Hacker News

Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

A weekly security roundup highlighting threats across consumer and enterprise surfaces: compromised home devices used as proxy botnets, browser-based ransomware, AI systems manipulated via prompt injection, malicious dependencies, and identity-based trust failures. The recurring theme is exploitation of ordinary, underestimated trust boundaries.

#threat roundup #botnets #ransomware #prompt injection

Read article →
Your Worker can now have its own cache in front of it Cloud 8.0
Cloudflare Blog

Your Worker can now have its own cache in front of it

Cloudflare launched Workers Cache, a tiered cache layer in front of Cloudflare Workers configured via a single Wrangler config block. Requests hit the cache first, bypassing Worker execution on cache hits, reducing CPU costs, while cache purging uses standard Cache-Control headers and tag-based invalidation.

#caching #edge computing #serverless #performance

Read article →
The code review bug hunt is dead. Here's what developers get wrong. Engineering 5.0
The New Stack

The code review bug hunt is dead. Here's what developers get wrong.

Senior engineer Mark Dominus argues that code review's primary purpose is catching maintainability issues, not bugs, yet most organizations fail to articulate what reviewers should actually deliver. The article challenges the assumption that peer review is effective at finding bugs and reframes code review as a maintainability and knowledge-sharing tool.

#code review #software engineering #maintainability #quality assurance

Read article →
The 4-body problem of SRE: Why autonomous operations depend on context AI 7.0
CNCF Blog

The 4-body problem of SRE: Why autonomous operations depend on context

A CNCF blog post frames autonomous operations as a context problem, not a model capability problem, drawing on interviews with senior SREs and platform engineers. The '4-body problem' describes the challenge of coordinating AI agents across multiple systems, vendors, and runbooks where context is fragmented across stale documentation and institutional knowledge.

#AI agents #SRE #autonomous operations #observability

Read article →
Evolving platform engineering for AI-native workloads AI 7.0
CNCF Blog

Evolving platform engineering for AI-native workloads

Platform teams must evolve beyond containerized, developer-centric architectures to support AI workloads, which introduce new requirements like GPU provisioning, model lifecycle management, MCP integration, and agentic systems. The post identifies key pressures: AI coding acceleration increasing pipeline throughput demands, autonomous agents requiring new governance models, and regulatory compliance constraints around data residency.

#platform engineering #AI workloads #GPU provisioning #model lifecycle

Read article →
Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT Security 5.0
The Hacker News

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

A China-nexus threat group (Operation DragonReturn, tracked by Seqrite Labs) is targeting Indian taxpayers, tax professionals, and corporate finance teams with spear-phishing emails impersonating the Income Tax Department. The campaign delivers DcRAT, a remote access trojan designed to exfiltrate sensitive data.

#DcRAT #spear-phishing #China-nexus #threat intelligence

Read article →
New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions Security 7.0
The Hacker News

New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

Researchers at Shandong University demonstrated TrojPix, a covert exfiltration technique that modulates on-screen pixels to emit radio signals decodable by nearby receivers, enabling data theft from air-gapped systems. The attack requires pre-existing malware on the target but bypasses all network isolation controls.

#air-gap bypass #side-channel #covert exfiltration #malware

Read article →
SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing AI 8.0
The Hacker News

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Researchers from Hong Kong University of Science and Technology demonstrated SkillCloak, a technique that evades static malware scanners for AI agent skills using self-extracting packing. The strongest variant bypassed all tested scanners over 90% of the time, though the team also built a runtime checker to detect most evasion attempts.

#AI agents #evasion #static analysis #malware detection

Read article →
Cloudflare and AWS Embed x402 Agent Payments at the Edge Cloud 6.0
InfoQ DevOps

Cloudflare and AWS Embed x402 Agent Payments at the Edge

Cloudflare and AWS both implemented x402 stablecoin micropayments at their edge networks, reviving HTTP 402 for agent-to-service payments under a Linux Foundation open protocol. Coinbase reports 169 million transactions in year one, though enterprise tax and invoicing gaps remain unresolved.

#edge computing #micropayments #agents #HTTP 402

Read article →
🤗 Kernels: Major Updates AI 5.0
Hugging Face Blog

🤗 Kernels: Major Updates

Hugging Face announces significant updates to Kernels, their collaborative notebook environment. The revamp includes performance improvements, new collaboration features, and enhanced integration with the Hugging Face ecosystem for model development and experimentation.

#notebooks #development environment #collaboration #Hugging Face ecosystem

Read article →
Microsoft, AWS and Anthropic are spending billions — and not on better models AI 8.0
The New Stack

Microsoft, AWS and Anthropic are spending billions — and not on better models

Microsoft launched the Frontier Company with $2.5 billion to embed 6,000 engineers inside customer organizations for AI deployment, following AWS's $1 billion commitment to forward-deployed engineering. The shift signals that enterprise AI bottleneck has moved from model capability to deployment expertise and integration resources.

#AI infrastructure #enterprise AI #deployment #systems integration

Read article →
10 moments that defined AI's turbulent first half of 2026 AI 6.0
The New Stack

10 moments that defined AI's turbulent first half of 2026

The New Stack editorial staff compiled ten pivotal AI moments from early 2026, including government regulatory clashes with Anthropic, frontier lab IPOs above $800 billion, infrastructure buildout for chip and data center capacity, and the narrowing gap between open-weight and closed models. The piece emphasizes that model harness, tokenomics, and agentic orchestration now matter more than raw model releases.

#LLM #open-weight models #regulation #agentic AI

Read article →
The AI revolution will not be televised — it'll be quantized AI 7.0
The New Stack

The AI revolution will not be televised — it'll be quantized

Chinese open-weight models like Qwen, DeepSeek V4 Pro, and GLM are driving adoption through quantization, allowing engineers to download weights, compress them to lower precision, and run frontier-level models locally or on chosen cloud infrastructure. Quantized Chinese models are now practical for test generation, refactoring, repo analysis, and debugging without vendor lock-in.

#quantization #open-weight models #model compression #inference optimization

Read article →
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case Security 6.0
The Hacker News

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case

A U.S. government agency paid approximately $1 million to Kairos Group to prevent stolen file leaks, according to analysis of leaked negotiation chat and blockchain payment records. The case is unusual because Kairos may not be a traditional ransomware gang, raising questions about the nature of the threat actor.

#ransomware #extortion #breach #threat intelligence

Read article →
Why cheaper models alone won't save your AI budget AI 8.0
The New Stack

Why cheaper models alone won't save your AI budget

As agentic AI systems scale, token consumption per task is exploding: moderately complex agent requests consume 20,000-60,000 tokens, while engineering tasks burn 150,000-200,000 tokens. Multi-agent architectures compound costs further, with each handoff adding input-token overhead; teams must now optimize token flow and context reuse rather than simply selecting cheaper models.

#agents #LLM #cost optimization #token efficiency

Read article →
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign Security 9.0
The Hacker News

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

North Korean threat actors linked to Contagious Interview have published 108 malicious packages and browser extensions across npm, Packagist, Go, and Chrome Web Store as part of the PolinRider campaign. The campaign remains active with new packages appearing as attackers compromise maintainer accounts.

#supply-chain #malware #npm #threat intelligence

Read article →
New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android Security 8.0
The Hacker News

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

CVE-2026-46242 (Bad Epoll) is a Linux kernel privilege escalation flaw allowing unprivileged users to gain root access on desktops, servers, and Android. A fix is available. The vulnerability sits in kernel code where Anthropic's Mythos AI model recently found a different bug, highlighting both AI-assisted security research capabilities and gaps in automated detection.

#CVE #privilege escalation #Linux #AI

Read article →
Apple just turned Safari into something AI agents can control AI 8.0
The New Stack

Apple just turned Safari into something AI agents can control

Apple shipped Safari Technology Preview 247 with a built-in Model Context Protocol server exposing 16 tools for MCP-compatible agents: screenshot capture, DOM inspection, JavaScript execution, network monitoring, viewport resizing, CSS emulation, and accessibility checks. This is Apple's second official MCP server in three weeks, following MCPBridge in Xcode 27, signaling platform vendors are embedding MCP as standard product features.

#MCP #agents #tool-use #Safari

Read article →
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets Security 9.0
The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

Threat actors linked to North Korea published malicious npm packages named 'rollup-packages-polyfill-core' and 'rollup-runtime-polyfill-core' that impersonate the legitimate 'rollup-plugin-polyfill-node' project, including cloned metadata and descriptions. The packages are designed to facilitate remote access and exfiltrate developer credentials and secrets from build environments.

#supply-chain #npm #malware #North Korea

Read article →
Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer Security 7.0
The Hacker News

Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

A previously undocumented threat actor called Armored Likho has been attributed to cyber attacks against government agencies and electric power infrastructure in Russia, Brazil, and Kazakhstan. The group combines financially motivated campaigns against individuals with targeted espionage operations against critical infrastructure using the BusySnake stealer malware.

#threat actor #malware #espionage #critical infrastructure

Read article →
OpenTelemetry Graduates to CNCF's Highest Maturity Level DevOps 8.0
InfoQ DevOps

OpenTelemetry Graduates to CNCF's Highest Maturity Level

The Cloud Native Computing Foundation announced OpenTelemetry's graduation to the highest maturity level, formally recognizing it as production-ready for enterprise use. This milestone reflects the project's stability and broad adoption across observability tooling and infrastructure.

#OpenTelemetry #observability #CNCF #monitoring

Read article →
European Parliament Member Investigating Spyware Was Hacked With Pegasus Security 7.0
The Hacker News

European Parliament Member Investigating Spyware Was Hacked With Pegasus

Citizen Lab forensic analysis reveals that former European Parliament member Stelios Kouloglou was repeatedly compromised with Pegasus spyware while serving on a committee investigating commercial surveillance tool abuse in the EU. The incident highlights the irony of a spyware investigator being targeted with the same tools under investigation.

#Pegasus #spyware #mobile #surveillance

Read article →
How data sovereignty is changing cloud native infrastructure design Cloud 7.0
CNCF Blog

How data sovereignty is changing cloud native infrastructure design

CNCF examines how data sovereignty laws are reshaping cloud-native architecture decisions. The EU's Cloud and AI Development Act (CADA), CLOUD Act, and emerging regulations distinguish jurisdictional control from geographic region selection, forcing infrastructure teams to evaluate operational control, supply chain transparency, and vendor portability beyond simple data residency.

#sovereignty #compliance #cloud architecture

Read article →
Hardware-Rooted AI Security That Won't Slow You Down AI 5.0
NVIDIA Developer Blog

Hardware-Rooted AI Security That Won't Slow You Down

NVIDIA describes Confidential Computing as a hardware-rooted security solution for AI inference and agentic workloads, addressing data privacy and sovereignty concerns without performance degradation. The approach encrypts data in use during model inference and agent engagement.

#security #confidential computing #inference #hardware

Read article →
More details on Fable 5's cyber safeguards and our jailbreak framework AI 8.0
Anthropic News

More details on Fable 5's cyber safeguards and our jailbreak framework

Anthropic provides technical details on Fable 5's security safeguards and releases a jailbreak testing framework for evaluating model robustness. The framework enables researchers to systematically test adversarial inputs and measure model resilience against prompt injection and other attack vectors.

#LLM safety #jailbreak #evals #adversarial testing

Read article →
The $1.3 million theft that exposed AI's blind spot Other 6.0
The New Stack

The $1.3 million theft that exposed AI's blind spot

Two cargo thefts totaling $1.3 million in data center equipment and copper wiring highlight physical supply-chain vulnerabilities in AI infrastructure buildout. The Cook County Sheriff recovered trailers stolen from Alabama and Florida, exposing that GPU shortages and cooling constraints are not the only bottlenecks in scaling AI data centers.

#supply-chain #infrastructure #security #hardware

Read article →
Microsoft just admitted its biggest AI mistake — and spent $2.5 billion fixing it AI 8.0
The New Stack

Microsoft just admitted its biggest AI mistake — and spent $2.5 billion fixing it

Microsoft launched Microsoft Frontier Company, a $2.5 billion unit to help enterprises select and integrate multiple AI models rather than lock into a single provider, signaling a shift toward model-routing architectures. The move positions Microsoft alongside Palantir and AWS in offering multi-model flexibility and customer data ownership as core services.

#model routing #multi-model #enterprise AI #LLM

Read article →
AI contributions are demoralizing: Godot bans coding agents to save its mentoring model Other 6.0
The New Stack

AI contributions are demoralizing: Godot bans coding agents to save its mentoring model

Godot Engine is rewriting its contribution policy to bar most AI-generated code from its repositories, citing both a backlog of low-quality pull requests and the loss of mentoring value that code review traditionally provides. The Godot Foundation argues that feedback on AI-authored PRs does not improve future contributions, and that reviewers lose the educational reward that motivates volunteer maintainers.

#AI agents #open-source #code review #community

Read article →
FBI Seizes NetNut Proxy Platform, Popa Botnet Security 7.0
Krebs on Security

FBI Seizes NetNut Proxy Platform, Popa Botnet

The FBI seized hundreds of domains associated with NetNut, a residential proxy service operated by publicly-traded Alarum Technologies, after security firms linked it to the Popa botnet comprising at least 2 million compromised devices. NetNut's software infected smart TVs and streaming boxes to create proxy nodes rented for scraping, ad fraud, and account takeover attacks.

#botnet #malware #proxy #supply-chain

Read article →
How Amazon Bedrock catches AI-generated phishing AI 6.0
AWS ML Blog

How Amazon Bedrock catches AI-generated phishing

AWS demonstrates how Bedrock detects AI-generated phishing emails by identifying patterns that distinguish synthetic messages from legitimate ones, addressing the shift from grammar-error-based detection to contextually sophisticated attacks. The post covers detection techniques for emails crafted with generative AI and OSINT, which now bypass traditional security filters designed for typo-laden mass campaigns.

#LLM #security #phishing #Bedrock

Read article →
Best practices for multi-turn reinforcement learning in Amazon SageMaker AI AI 8.0
AWS ML Blog

Best practices for multi-turn reinforcement learning in Amazon SageMaker AI

AWS shares production patterns for training multi-turn agents in SageMaker AI that handle sequential tool calls, error recovery, and reward alignment across complex tasks. The post covers environment design, external evaluation, reward shaping, and metric monitoring using the SOP-Bench dataset, which evaluates agents on Standard Operating Procedures across 12 business domains.

#agents #reinforcement learning #SageMaker #tool-use

Read article →
What comes after attention? This startup says it already knows. AI 7.0
The New Stack

What comes after attention? This startup says it already knows.

Subquadratic published benchmarks for SubQ 1.1, a sparse-attention model handling 12-million token context windows with third-party verification from Appen. The company signals it is working on post-attention architectures and plans to leapfrog its own sparse-attention approach, though the model remains available only to design partners.

#LLM #attention #sparse attention #context window

Read article →
Meet Brain: The AI system behind Azure reliability AI 8.0
Azure Blog

Meet Brain: The AI system behind Azure reliability

Brain is Azure's AIOps system that fuses platform telemetry, AI/ML models, and service dependencies into a real-time digital twin of cloud health, operating as an intelligent layer on top of Azure Resource Graph. It powers resource health notifications, deployment safeguards, outage declarations, and forms the foundation for agentic AI reshaping Azure operations.

#AIOps #cloud reliability #digital twin #agents

Read article →
How GitHub used secret scanning to reach inbox zero Security 7.0
GitHub Blog

How GitHub used secret scanning to reach inbox zero

GitHub shares its internal secrets-management remediation process, revealing 20,000+ secrets across 15,000+ repositories and detailing the nine-month effort to reach zero open alerts. The post covers alert triage, ownership assignment, safe remediation, and strategies for managing legacy patterns in long-running codebases.

#security #secrets management #secret scanning #supply-chain

Read article →
Identity Lifecycle Management Wasn't Built for AI Agents AI 8.0
The Hacker News

Identity Lifecycle Management Wasn't Built for AI Agents

Traditional identity governance and administration (IGA) tools assume human principals with employment records and departure dates, creating blind spots when autonomous AI agents operate in enterprise environments. The article examines structural gaps in identity lifecycle management for non-human principals.

#AI agents #identity governance #IGA #access control

Read article →
Apple Extends Private Cloud Compute to Google Cloud for the First Time Cloud 7.0
InfoQ DevOps

Apple Extends Private Cloud Compute to Google Cloud for the First Time

Apple deployed Private Cloud Compute (PCC) on Google Cloud using NVIDIA Blackwell GPUs, Intel TDX, and Google's Titan chip for the first time outside its own data centers. The architecture maintains independent append-only hardware ledgers and dual-vendor attestation roots, with AWS and Azure excluded from the collaboration.

#confidential computing #TEE #GPU #attestation

Read article →
Presentation: Enhancing Reliability Using Service-Level Prioritized Load Shedding at Netflix DevOps 8.0
InfoQ DevOps

Presentation: Enhancing Reliability Using Service-Level Prioritized Load Shedding at Netflix

Netflix engineers describe their architecture for handling extreme traffic spikes using prioritized load shedding embedded in Envoy sidecar proxies. The system allows user-initiated requests to preempt non-critical traffic, with automated chaos testing, config generation, and retry storm mitigation strategies.

#load shedding #Envoy #reliability #traffic management

Read article →
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack AI 9.0
The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig researchers documented JADEPUFFER, an LLM-driven ransomware operator that executed a complete attack chain autonomously: initial compromise via Langflow RCE, credential harvesting, lateral movement, and database encryption. This represents the first documented end-to-end ransomware campaign orchestrated by an AI agent.

#AI agents #LLM #ransomware #RCE

Read article →
How we keep GPUs reliable across Databricks AI AI 6.0
Databricks Blog

How we keep GPUs reliable across Databricks AI

Databricks details infrastructure practices for maintaining GPU reliability in distributed training workloads. The post covers fault detection, recovery mechanisms, and operational patterns used to minimize downtime and data loss in large-scale AI training clusters.

#GPU #distributed training #infrastructure #reliability

Read article →
Cordyceps flaw pattern is more proof CI/CD is part of the attack surface Security 9.0
The New Stack

Cordyceps flaw pattern is more proof CI/CD is part of the attack surface

Novee Security disclosed Cordyceps, a CI/CD workflow hijacking vulnerability affecting GitHub Actions. Unauthenticated attackers can exploit workflow YAML misconfigurations to compromise open-source supply chains. Scanning 30,000 repositories found 654 potentially exploitable and 300 confirmed fully exploitable instances across Microsoft, Google, Apache, Python, and Cloudflare.

#CVE #supply-chain #GitHub Actions #CI/CD

Read article →
Cloudflare wants to build the economic layer of the AI web AI 6.0
The New Stack

Cloudflare wants to build the economic layer of the AI web

Cloudflare announced Pay Per Use, Answer Engine Optimization tools, and expanded crawler classification to help publishers monetize content consumed by AI agents. The company is positioning itself as the economic infrastructure for an agentic web, shifting from blocking AI crawlers to enabling compensated access.

#AI agents #web crawling #monetization #content economics

Read article →
Run NVIDIA Nemotron and OpenAI GPT OSS models on Amazon Bedrock in AWS GovCloud (US) AI 7.0
AWS ML Blog

Run NVIDIA Nemotron and OpenAI GPT OSS models on Amazon Bedrock in AWS GovCloud (US)

Amazon Bedrock now offers NVIDIA Nemotron (Nano 9B v2, Nano 12B v2, Nano 30B, Super 120B) and OpenAI GPT OSS models (120B, 20B) in AWS GovCloud (US), enabling U.S. government agencies to run frontier open-weight models without moving sensitive data outside compliance boundaries. The unified API allows agencies to mix models from different providers while maintaining security and data residency controls required for defense, intelligence, and contractor workloads.

#LLM #foundation-models #Bedrock #GovCloud

Read article →
Building a serverless A2A gateway for agent discovery, routing, and access control AI 7.0
AWS ML Blog

Building a serverless A2A gateway for agent discovery, routing, and access control

AWS demonstrates a serverless Agent-to-Agent (A2A) gateway pattern that centralizes routing, discovery, and access control for AI agents running across ECS, Lambda, Bedrock AgentCore Runtime, and hybrid environments. The gateway eliminates point-to-point connections (20 agents would require 190 direct connections without it) and enforces fine-grained permissions centrally via path-based routing, reducing operational overhead and security fragmentation.

#agents #A2A #routing #access-control

Read article →
Structured memory filtering with metadata in AgentCore Memory AI 6.0
AWS ML Blog

Structured memory filtering with metadata in AgentCore Memory

Amazon Bedrock AgentCore Memory now supports metadata filtering to improve retrieval precision when agents accumulate weeks of interaction history. Attribute-based filters (priority, department, time range) layer on top of namespace isolation to scope retrieval before similarity search runs, addressing the precision wall where semantic search returns contextually irrelevant results alongside relevant ones.

#agents #memory #RAG #retrieval

Read article →
HippoRAG: Neurobiologically inspired RAG using Amazon Bedrock, Amazon Neptune, and personalized PageRank AI 7.0
AWS ML Blog

HippoRAG: Neurobiologically inspired RAG using Amazon Bedrock, Amazon Neptune, and personalized PageRank

AWS demonstrates HippoRAG, a graph-based RAG framework inspired by hippocampal indexing that improves multi-hop reasoning by modeling associations between memories rather than treating documents independently. The implementation uses Bedrock for LLM inference, Neptune for graph storage, Neptune Analytics for Personalized PageRank, and Titan Embeddings for vectors, enabling enterprise-scale multi-document reasoning.

#RAG #graph-database #multi-hop-reasoning #knowledge-graphs

Read article →
How Inscribe uses Amazon Bedrock to stop document fraud in seconds AI 8.0
AWS ML Blog

How Inscribe uses Amazon Bedrock to stop document fraud in seconds

Inscribe built an agentic AI system on Amazon Bedrock that detects tampered, fabricated, and AI-generated financial documents in under 90 seconds, a 20x improvement over manual review. The system reasons across documents like an expert fraud analyst while maintaining the accuracy and explainability required by financial services regulations, addressing the 5x growth in AI-generated forgeries.

#agents #fraud-detection #document-analysis #reasoning

Read article →
Simplify model selection in Amazon Bedrock with the open source Model Profiler AI 6.0
AWS ML Blog

Simplify model selection in Amazon Bedrock with the open source Model Profiler

AWS released an open-source Model Profiler tool that aggregates metadata from 100+ Bedrock foundation models into a searchable interface with filtering, side-by-side comparisons, and model cards. It consolidates scattered information about capabilities, pricing, regional availability, context windows, and throughput to accelerate model evaluation and production decisions.

#model-selection #Bedrock #foundation-models #open-source

Read article →
Accelerate protein design with BoltzGen on Amazon SageMaker AI AI 7.0
AWS ML Blog

Accelerate protein design with BoltzGen on Amazon SageMaker AI

SageMaker AI now manages the full compute lifecycle for BoltzGen, a diffusion-based protein design model that generates binders for specific biomolecular targets. The service handles GPU provisioning, data movement, step-level caching, and cleanup across backbone generation, inverse folding, validation, and ranking steps, scaling from validation runs to production batch processing without manual infrastructure overhead.

#protein-design #diffusion-models #SageMaker #GPU-compute

Read article →
You Only Compute Once: How Clockwork wants to put an end to AI training restarts AI 8.0
The New Stack

You Only Compute Once: How Clockwork wants to put an end to AI training restarts

Clockwork launched the YOCO Guarantee, backed by its TorchPass fault-tolerance product, guaranteeing 90% of GPU cluster failures resolve without checkpoint rollback or recompute. TorchPass migrates in-memory state (model weights, gradients, optimizer state) to healthy GPUs in minutes, eliminating costly training restarts.

#fault tolerance #GPU training #distributed training #MLOps

Read article →
Upgrade Amazon EKS clusters with confidence using Kubernetes version rollbacks Cloud 8.0
AWS News

Upgrade Amazon EKS clusters with confidence using Kubernetes version rollbacks

AWS EKS now supports Kubernetes version rollbacks within seven days of upgrade, allowing cluster administrators to revert to a previous validated production version if issues arise. Unlike emulated versions (KEP-4330), EKS rollback returns to a fully tested prior state rather than a transitional holding state. This addresses the operational burden that has forced many organizations to delay upgrades and run outdated, unpatched clusters.

#Kubernetes #EKS #cluster-upgrades #rollback

Read article →
Mastering Agentic Techniques: AI Agent Reinforcement Learning AI 7.0
NVIDIA Developer Blog

Mastering Agentic Techniques: AI Agent Reinforcement Learning

NVIDIA explores reinforcement learning techniques for AI agents, covering RLHF for LLM alignment and RLVR (reinforcement learning with verifiable rewards) for reasoning and agent tasks. The post positions RL as a practical approach for building specialized enterprise agents with improved accuracy on domain-specific workflows.

#reinforcement learning #agents #RLHF #RLVR

Read article →
Meta's AI Storage Blueprint at Scale AI 8.0
Meta Engineering

Meta's AI Storage Blueprint at Scale

Meta describes how its BLOB-storage architecture evolved to eliminate storage bottlenecks in large-scale AI training. The post addresses GPU stalls caused by slow data retrieval and geo-distributed dataset movement, showing how storage performance directly impacts training cost and research velocity.

#storage #GPU #training infrastructure #data pipeline

Read article →
Proving application resilience on Azure with Chaos Studio Cloud 7.0
Azure Blog

Proving application resilience on Azure with Chaos Studio

Azure Chaos Studio Workspaces, now in public preview, enables teams to validate application resilience by simulating real production failure modes like outages, failovers, and network disruptions in a safe test environment. The scenario-focused approach mirrors actual Azure customer incidents rather than isolated faults.

#chaos engineering #resilience testing #failure injection #Azure

Read article →
Get started with the Claude apps gateway for Google Cloud AI 6.0
Google Cloud Blog

Get started with the Claude apps gateway for Google Cloud

Anthropic's Claude apps gateway is a self-hosted service that sits between Claude Code clients and Google Cloud, centralizing identity, policy, cost, and routing governance. It enables enterprise deployment by routing login through IdP, enforcing spend caps, and providing per-developer usage attribution without managing individual cloud credentials.

#Claude #Claude Code #Google Cloud #identity

Read article →
Forecasting at the speed of modern retail AI 5.0
Databricks Blog

Forecasting at the speed of modern retail

Databricks discusses demand forecasting for retail and CPG use cases, emphasizing speed and scalability. The post likely covers how modern data platforms enable faster forecast iteration and deployment compared to traditional approaches.

#forecasting #retail #demand planning #ML

Read article →
The call is coming from inside your pipeline: the anatomy of a Codecov attack Security 8.0
The New Stack

The call is coming from inside your pipeline: the anatomy of a Codecov attack

The article examines the 2021 Codecov breach as a template for modern supply-chain attacks, where a single bash script line exfiltrated CI environment variables for 61 days undetected. It contextualizes this within XZ Utils, polyfill.io, and npm/PyPI compromises, showing how trusted tools in build pipelines remain a critical attack surface.

#supply-chain attack #CI/CD security #credential theft #bash injection

Read article →
Beyond Static Prompts: Building Scale-Proof, Polymorphic Multi-Agent Systems with Google's ADK AI 7.0
Google Cloud Blog

Beyond Static Prompts: Building Scale-Proof, Polymorphic Multi-Agent Systems with Google's ADK

Google introduces Context-Aware Polymorphic Schema Validation, a design pattern using the Agent Development Kit (ADK) and Gemini Flash to dynamically inject schemas at runtime rather than pre-loading all schemas into system prompts. This addresses context window bloat, token costs, and attention diffusion in high-cardinality enterprise agent deployments.

#agents #LLM #prompt engineering #schema validation

Read article →
Why AI Agents Need Isolation AI 7.0
Docker Blog

Why AI Agents Need Isolation

Docker Sandbox (sbx) introduces isolated execution for AI agents using microVM-based protection, customizable environments, secure credential handling, and controlled network access. The article argues that as AI agents shift from passive assistance to active code execution (terminal commands, package installation, file modification), isolation becomes essential.

#AI agents #container isolation #sandbox #security

Read article →
Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402 AI 7.0
Cloudflare Blog

Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402

Cloudflare launches the Monetization Gateway, enabling usage-based billing for APIs, datasets, web pages, and MCP tools via the x402 open protocol. The gateway enforces payment verification and access control at the edge, addressing the shift from attention-based to usage-based pricing as AI agents become primary Internet consumers.

#agents #API monetization #x402 #edge computing

Read article →
Content Independence Day, one year on: building the business model for the agentic Internet AI 6.0
Cloudflare Blog

Content Independence Day, one year on: building the business model for the agentic Internet

Cloudflare reports on the first year of Content Independence Day, showing AI adoption reached 30% of humanity (2.5B users) in 3.5 years and non-human traffic now exceeds 50% of web traffic. The report documents the emergence of a content market with transparency, control, and scarcity as AI agents shift from training crawlers to dominant Internet users.

#agents #AI crawlers #content economics #web infrastructure

Read article →
Your site, your rules: new AI traffic options for all customers Other 6.0
Cloudflare Blog

Your site, your rules: new AI traffic options for all customers

Cloudflare expands content-owner controls beyond its one-click AI bot blocker, introducing granular traffic options that let site owners selectively allow or monetize AI crawlers rather than blocking all automation. The update addresses the tension between content protection and search discoverability, moving past the binary block-or-expose choice.

#AI crawlers #content policy #web traffic #bot management

Read article →
Making AI search smarter AI 5.0
Cloudflare Blog

Making AI search smarter

Cloudflare analyzes the shift from traditional search to AI-powered answer engines, citing a 2025 Pew study showing users click traditional links only 8% of the time when AI summaries are shown. The article frames the challenge for content creators: blocking AI reduces discoverability, while opting in delivers value but erodes referral revenue.

#agents #AI search #content economics #web infrastructure

Read article →
Understanding dynamic resource allocation in Kubernetes DevOps 7.0
CNCF Blog

Understanding dynamic resource allocation in Kubernetes

Dynamic Resource Allocation reached GA in Kubernetes v1.35, with NVIDIA's dra-driver-nvidia-gpu moving into Kubernetes SIGs and dropping Beta status. The article demonstrates DRA setup using a Kubernetes cluster built with Cluster API and OpenStack, showing how to allocate GPUs and resources elegantly.

#Kubernetes #GPU allocation #DRA #device management

Read article →
Microsoft Accelerates Post-Quantum Cryptography Shift to 2029 Security 6.0
The Hacker News

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

Microsoft is accelerating its quantum-safe cryptography roadmap, moving the deadline for replacing existing encryption standards from 2035 to 2029 due to advances in quantum computing research. CTO Mark Russinovich cited shifted risk horizons as the driver for the earlier transition timeline.

#post-quantum #cryptography #quantum #security

Read article →
Scaling LLM Inference: Multi-Node KV Cache Offloading with GKE & Managed Lustre AI 8.0
Google Cloud Blog

Scaling LLM Inference: Multi-Node KV Cache Offloading with GKE & Managed Lustre

Google demonstrates KV cache offloading to Google Cloud Managed Lustre for distributed LLM inference on GKE, achieving over 50% TCO savings and 60% GPU-hour reduction for Llama-3.3-70B on a six-node A3 Mega cluster with 95% cache hit rate. The approach decouples attention state from node-local storage, eliminating cross-node replication overhead.

#LLM inference #KV cache #Kubernetes #distributed systems

Read article →
Unmasking the crawls with Attribution Business Insights Other 6.0
Cloudflare Blog

Unmasking the crawls with Attribution Business Insights

Cloudflare launches Attribution Business Insights dashboard to help site owners distinguish valuable bot traffic from resource-draining crawlers. The tool provides granular visibility into which AI crawlers help or harm business models, enabling data-driven decisions on content access.

#bot traffic #analytics #content policy #AI crawlers

Read article →
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts Security 8.0
The Hacker News

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

A massive automated password spray attack targeting Azure CLI has compromised at least 78 Microsoft accounts across 81 million login attempts originating from an IPv6 range controlled by LSHIY LLC. The campaign ran from June 12-26 and represents a sustained credential-stuffing threat against Azure infrastructure.

#Azure CLI #password-spray #credential-stuffing #brute-force

Read article →
Safely Releasing Frontier Models to Customers AI 6.0
AWS ML Blog

Safely Releasing Frontier Models to Customers

AWS discusses security and privacy practices for releasing frontier models through Amazon Bedrock, highlighting Bedrock Mantle's model-weight protection and the availability of Anthropic's Claude models with enhanced guardrails. The post emphasizes balancing rapid model access with responsible deployment, particularly for cybersecurity-capable models like Claude Mythos that can help defenders secure critical systems.

#frontier models #model safety #Bedrock #guardrails

Read article →
Hugging Face and Cerebras bring Gemma 4 to real-time voice AI AI 7.0
Hugging Face Blog

Hugging Face and Cerebras bring Gemma 4 to real-time voice AI

Cerebras and Hugging Face integrate Gemma 4 models for real-time voice AI applications, enabling low-latency speech processing on Cerebras hardware. The collaboration demonstrates practical deployment of frontier models for voice workloads with optimized inference performance.

#Gemma #voice AI #real-time inference #Cerebras

Read article →
Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode DevOps 7.0
AWS News

Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode

AWS CloudFormation Express mode skips stabilization checks to reduce deployment time by up to 4x, completing when resource configuration is applied rather than waiting for full operational readiness. Targets iterative development and AI-assisted infrastructure workflows that benefit from sub-minute feedback loops. Resources continue provisioning in the background with automatic retry for transient failures.

#CloudFormation #infrastructure-as-code #deployment #AI-assisted

Read article →
Amazon EC2 C9g and C9gd instances powered by AWS Graviton5 processors are now available Cloud 7.0
AWS News

Amazon EC2 C9g and C9gd instances powered by AWS Graviton5 processors are now available

AWS launches C9g and C9gd EC2 instances with Graviton5 processors, delivering 25% higher performance per vCPU than C8g, DDR5 8800MT/s memory, 5x more L3 cache, and 3x higher packet-processing performance. Optimized for compute-intensive workloads including batch processing, video encoding, in-memory analytics, and agentic AI reasoning loops.

#EC2 #Graviton5 #compute-optimized #AI-inference

Read article →
Anthropic's Claude Sonnet 5 system card says more about the future of AI than its benchmarks do AI 8.0
The New Stack

Anthropic's Claude Sonnet 5 system card says more about the future of AI than its benchmarks do

Anthropic's Claude Sonnet 5 system card emphasizes agent reliability and safety over benchmark gains, dedicating 145 pages to evaluating web browsing, tool use, long-running task planning, prompt injection resistance, and error recovery. The card introduces evaluations like SHADE-Arena and LinuxArena that test whether agents pursue hidden objectives or act covertly.

#agents #evals #safety #tool use

Read article →
Automate public TLS certificate issuance with ACME support in AWS Certificate Manager DevOps 8.0
AWS News

Automate public TLS certificate issuance with ACME support in AWS Certificate Manager

AWS Certificate Manager now supports ACME protocol for automated public TLS certificate issuance and renewal, compatible with Certbot, cert-manager for Kubernetes, acme.sh, and other ACMEv2 clients. Eliminates fragmented certificate management across ACM and external CAs, providing centralized governance as CA/Browser Forum mandates shorter validity periods (100 days by 2027, 47 days by 2029).

#ACME #TLS #certificate-management #automation

Read article →
The infrastructure lock-in costing AI companies hundreds of millions AI 7.0
The New Stack

The infrastructure lock-in costing AI companies hundreds of millions

Jim Keller argues that optimizing AI infrastructure for today's models is a costly mistake, as workloads evolve faster than hardware. Memory, networking, and system balance now matter more than peak GPU performance. Companies that spent hundreds of millions on single-generation infrastructure now face expensive retooling.

#AI infrastructure #GPU #lock-in #system design

Read article →
Introducing Claude Sonnet 5 on AWS: Anthropic's most capable Sonnet model AI 7.0
AWS ML Blog

Introducing Claude Sonnet 5 on AWS: Anthropic's most capable Sonnet model

Anthropic's Claude Sonnet 5 is now available on Amazon Bedrock and Claude Platform on AWS, delivering near-Opus intelligence at Sonnet pricing for coding, agents, and professional work. Accessible via Bedrock APIs for enterprise security and regional data residency, or through Claude Platform on AWS for native Anthropic experience with unified AWS billing.

#LLM #Claude #Bedrock #agents

Read article →
ScarfBench: Benchmarking AI Agents for Enterprise Java Framework Migration AI 7.0
Hugging Face Blog

ScarfBench: Benchmarking AI Agents for Enterprise Java Framework Migration

IBM Research introduces ScarfBench, a benchmark for evaluating AI agents on enterprise Java framework migration tasks. The benchmark measures agent performance on realistic code transformation and refactoring scenarios, providing metrics for assessing agent capability in complex software engineering workflows.

#agent evals #benchmarking #code generation #Java

Read article →
Conversational analytics in BigQuery brings trusted agentic reasoning to everyone AI 8.0
Google Cloud Blog

Conversational analytics in BigQuery brings trusted agentic reasoning to everyone

Google Cloud released Conversational Analytics in BigQuery to general availability, enabling business and technical teams to query data, run multi-step analyses, and generate reports using natural language. The agent, built on Gemini models, supports cross-cloud data sources including Iceberg tables and Databricks Unity Catalog.

#agents #LLM #BigQuery #analytics

Read article →
Introducing Claude Sonnet 5 AI 5.0
Anthropic News

Introducing Claude Sonnet 5

Anthropic released Claude Sonnet 5, a frontier-performance model optimized for coding, agents, and professional work at scale. The announcement emphasizes performance improvements across these domains but lacks specific benchmarks or capability details in the provided excerpt.

#LLM #Claude #agents #coding

Read article →
Designing GPU-Accelerated Query Engines with NVIDIA GQE Engineering 6.0
NVIDIA Developer Blog

Designing GPU-Accelerated Query Engines with NVIDIA GQE

NVIDIA GQE addresses memory and I/O bandwidth constraints in GPU-accelerated query engines through hardware advances including high bandwidth memory (HBM), NVLink-C2C, and dedicated decompression engines in GB200 NVL4. The post covers architectural patterns for removing data movement bottlenecks and increasing effective storage capacity on GPU clusters.

#GPU #query engines #HBM #NVLink

Read article →
How GitHub maintains compliance for open source dependencies DevOps 6.0
GitHub Blog

How GitHub maintains compliance for open source dependencies

GitHub describes how its Open Source Program Office (OSPO) uses the new GitHub License Compliance feature to manage thousands of dependencies across the platform and internal applications. The post covers license policy enforcement, obligation tracking, and automated compliance workflows for open source governance.

#license compliance #open source #governance #SBOM

Read article →
Build generative UI for AI agents on Amazon Bedrock AgentCore with the AG-UI protocol AI 7.0
AWS ML Blog

Build generative UI for AI agents on Amazon Bedrock AgentCore with the AG-UI protocol

AG-UI (Agent-User Interaction Protocol) is an open protocol enabling AI agents to render interactive charts, update shared canvases, and implement human-in-the-loop interactions. Works with Strands Agents, LangGraph, CrewAI backends and React, Angular, Vue frontends. Integrates with Amazon Bedrock AgentCore and CopilotKit for decoupled agent and frontend development.

#agents #generative-UI #protocol #human-in-the-loop

Read article →
Simplify multi-account access to Amazon Bedrock models with managed entitlements AI 6.0
AWS ML Blog

Simplify multi-account access to Amazon Bedrock models with managed entitlements

Amazon Bedrock managed entitlements enable centralized subscription to third-party models (Anthropic Claude, Cohere, Stability AI) from a single AWS account and distribute access across the organization. Eliminates need for AWS Marketplace permissions in workload accounts and maintains centralized governance for multi-account AI deployments.

#Bedrock #multi-account #governance #entitlements

Read article →
Implementing resilience patterns with Amazon Bedrock and LLM gateway AI 7.0
AWS ML Blog

Implementing resilience patterns with Amazon Bedrock and LLM gateway

Guide to resilience patterns for LLM inference at scale using Amazon Bedrock and LLM gateway, covering availability, response time, cost, and throughput dimensions. Addresses model availability, quota changes, token limits across providers, and cross-Region inference for production generative AI workloads.

#LLM #resilience #inference #Bedrock

Read article →
How Outpost VFX Uses AWS to Accelerate AI Model Training for Visual Effects AI 6.0
AWS ML Blog

How Outpost VFX Uses AWS to Accelerate AI Model Training for Visual Effects

Outpost VFX achieved 8x faster AI model training for face replacement workflows by moving from single-GPU to multi-GPU training on AWS infrastructure. Overcame VRAM constraints and single-GPU bottlenecks to reduce face replacement compositing from 5+ days to hours, accelerating production timelines across UK, Canada, and India studios.

#model-training #GPU #multi-GPU #VFX

Read article →
Building bilingual NER for cargo logistics with Amazon Bedrock AI 7.0
AWS ML Blog

Building bilingual NER for cargo logistics with Amazon Bedrock

IBS Software deployed a bilingual Named Entity Recognition system on Amazon Bedrock to extract 23 entity types from cargo logistics emails in English and Japanese. Using knowledge distillation from Amazon Nova Pro to Nova Lite, they achieved 95.085% F1-Score while reducing operational costs by 14x and eliminating manual intervention.

#NER #distillation #Nova #Bedrock

Read article →
Start building with Nano Banana 2 Lite and Gemini Omni Flash AI 7.0
DeepMind

Start building with Nano Banana 2 Lite and Gemini Omni Flash

Google DeepMind announces Gemini Omni Flash and Nano Banana 2 Lite models for developers, positioning them as efficient alternatives for real-time and latency-sensitive applications. The post emphasizes accessibility and ease of deployment for production use cases.

#Gemini #model release #inference #efficiency

Read article →
AWS launches a desktop for agents AI 7.0
The New Stack

AWS launches a desktop for agents

AWS made Amazon WorkSpaces for Agents generally available, enabling AI agents to interact with legacy desktop applications without custom integrations. Agents connect via Model Context Protocol (MCP), stream sessions, and operate business apps directly. Wolters Kluwer uses it to embed agents in tax and compliance workflows.

#agents #desktop automation #MCP #legacy systems

Read article →
How Schrödinger sped up molecular discovery by 4x with Alphaevolve AI 8.0
Google Cloud Blog

How Schrödinger sped up molecular discovery by 4x with Alphaevolve

Schrödinger partnered with Google DeepMind to deploy AlphaEvolve, an evolutionary AI coding agent that optimized machine-learned force field training pipelines by 4x. The agent iteratively refined critical algorithms like Ewald summation and neighbor list computation to eliminate computational bottlenecks in molecular simulation.

#agents #code generation #optimization #AlphaEvolve

Read article →
Build agents even faster with Gemini Enterprise Agent Platform's fully-managed, remote MCP server AI 7.0
Google Cloud Blog

Build agents even faster with Gemini Enterprise Agent Platform's fully-managed, remote MCP server

Google Cloud released a fully-managed remote MCP server for the Gemini Enterprise Agent Platform, enabling external development tools like Antigravity CLI and Claude Code to securely access Google Cloud resources. Agents can now call models from Model Garden, retrieve prompt templates, and manage Notebooks without leaving the IDE.

#agents #MCP #Gemini #tool-use

Read article →
Redeploying Fable 5 AI 7.0
Anthropic News

Redeploying Fable 5

Anthropic redeploys Fable 5 globally on July 1 and proposes an industry-wide jailbreak severity scoring framework developed with Amazon, Microsoft, Google, and Glasswing partners. The framework aims to standardize how AI safety teams evaluate and communicate adversarial attack risk.

#jailbreak #safety #evals #LLM security

Read article →
Modernizing financial services with deployment freedom and transformational AI with AlloyDB Omni Cloud 6.0
Google Cloud Blog

Modernizing financial services with deployment freedom and transformational AI with AlloyDB Omni

Google Cloud announced AlloyDB Omni for financial services, addressing regulatory compliance, data residency, and technical debt by enabling on-premises PostgreSQL-compatible deployments with AI-driven fraud detection. The solution targets institutions locked into legacy databases and constrained by data sovereignty regulations like DORA.

#database #hybrid deployment #PostgreSQL #compliance

Read article →
Optimizing a Neural Reconstruction Pipeline Using NVIDIA Nsight Developer Tools Engineering 5.0
NVIDIA Developer Blog

Optimizing a Neural Reconstruction Pipeline Using NVIDIA Nsight Developer Tools

NVIDIA Omniverse NuRec is a neural reconstruction pipeline that builds high-fidelity 3D representations from multisensor data (cameras, lidar) for autonomous vehicles and robotics. The post demonstrates profiling and optimization techniques using NVIDIA Nsight tools to improve pipeline performance on GPU clusters.

#neural reconstruction #3D #profiling #GPU optimization

Read article →
What Google Cloud announced in AI this month AI 5.0
Google Cloud Blog

What Google Cloud announced in AI this month

Google Cloud's June AI announcements include the Open Knowledge Format (OKF), a vendor-neutral specification for LLM-wiki patterns; expanded Private Cloud Compute collaboration with Apple; and general availability of Claude Fable 5 on Google Cloud. The roundup covers updates across model availability, security, and knowledge representation standards.

#LLM #knowledge representation #privacy #Claude

Read article →
AWS just put $1 billion into forward deployed engineers. Here's why it matters for enterprise teams. AI 6.0
The New Stack

AWS just put $1 billion into forward deployed engineers. Here's why it matters for enterprise teams.

AWS announced a $1 billion investment in forward deployed engineering, embedding AWS engineers directly with enterprise customer teams to build and deploy AI systems. Engineers work alongside developers and security teams using customer data, governance policies, and AWS infrastructure to build production AI systems and transfer expertise.

#AI #forward deployed engineers #enterprise #production systems

Read article →
"The harness is where the hard work is": Harness bets on agents that enterprises can trust in production DevOps 7.0
The New Stack

"The harness is where the hard work is": Harness bets on agents that enterprises can trust in production

Harness launched Autonomous Worker Agents, replacing fixed pipeline steps with AI agents that reason through deployment, testing, and security scans while maintaining governance and audit controls. Any pipeline step can now run as an agent on customer-controlled infrastructure, extending Harness's existing expert agents.

#agents #CI/CD #DevOps #governance

Read article →
Why Specialization Is Inevitable AI 5.0
Hugging Face Blog

Why Specialization Is Inevitable

Analysis of the trend toward specialized AI models and agents tailored for specific domains and tasks rather than general-purpose foundation models. The post argues that domain specialization improves performance, cost efficiency, and safety for production workloads.

#model specialization #fine-tuning #domain-specific models #efficiency

Read article →
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks AI 8.0
The Hacker News

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

Adversa AI's GuardFall research reveals that shell injection bypasses defeat safety checks in 10 of 11 popular open-source coding and computer-use agents tested, using publicly known shell tricks. Only Continue was built to resist the attack. The vulnerability allows unsafe commands to execute despite agent guardrails.

#AI agents #shell injection #safety #code execution

Read article →
Aikido acquires Root to backport open source fixes without forcing upgrades Security 7.0
The New Stack

Aikido acquires Root to backport open source fixes without forcing upgrades

Aikido Security acquired Root for $70 million to integrate backport patching into Aikido Libraries, enabling teams to patch vulnerabilities in their current package versions without upgrading. Aikido commits to backporting critical, actively exploited vulnerabilities for free across npm, PyPI, and Maven.

#security #vulnerability patching #supply chain #open source

Read article →
Operating Kubernetes at scale: a few stories from running Amazon EKS DevOps 7.0
The New Stack

Operating Kubernetes at scale: a few stories from running Amazon EKS

Amazon EKS operates hundreds of thousands of Kubernetes clusters across 30+ regions. The post details how EKS keeps control planes resilient at scale by preventing faults from cascading into outages. AI and analytics workloads reshaped what scale means, forcing changes to etcd consistency and watch ordering to handle unpredictable pod churn.

#Kubernetes #EKS #etcd #scale

Read article →
Kepler, re-architected: Improved power accuracy and a community call to action DevOps 7.0
CNCF Blog

Kepler, re-architected: Improved power accuracy and a community call to action

Kepler, a CNCF sandbox project for per-workload power metering in Kubernetes, has been re-architected to move away from eBPF-based tracking. The new design eliminates CAP_BPF and CAP_SYSADMIN privilege requirements, improves accuracy for power estimation models, and lowers the maintenance burden. This addresses production deployment blockers as data center electricity demand is projected to double by 2030 driven by AI workload growth.

#Kubernetes #observability #power metering #eBPF

Read article →
Dragonfly v2.5.0 is released DevOps 6.0
CNCF Blog

Dragonfly v2.5.0 is released

Dragonfly v2.5.0 adds direct repository downloads from Hugging Face and ModelScope with P2P acceleration, a Kubernetes Mutating Admission Webhook for automatic client injection without image rebuilds, and a blocklist feature for download control. These features streamline model distribution and enable zero-touch Dragonfly adoption in Kubernetes environments.

#Kubernetes #P2P #model distribution #Hugging Face

Read article →
Introducing TabFM: A zero-shot foundation model for tabular data AI 7.0
Google Research Blog

Introducing TabFM: A zero-shot foundation model for tabular data

TabFM is a foundation model designed for zero-shot inference on tabular data, enabling direct predictions on structured datasets without task-specific fine-tuning. The model addresses the gap between large language models and tabular ML by learning generalizable representations across diverse table schemas and domains.

#foundation models #tabular data #zero-shot #structured data

Read article →
AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks Security 7.0
The Hacker News

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

Researchers found six security flaws in Apple AirDrop and Google Quick Share that allow nearby attackers with just a laptop to crash the sharing service or bypass security checks. An attacker within wireless range can trigger denial of service on Macs and iPhones set to receive from anyone, with no user interaction.

#wireless #denial of service #proximity attack #AirDrop

Read article →
AWS Launches Lambda MicroVMs for Isolated Agent and User Code Execution Cloud 7.0
InfoQ DevOps

AWS Launches Lambda MicroVMs for Isolated Agent and User Code Execution

AWS introduced Lambda MicroVMs, a new serverless compute option that isolates each user session or AI agent in a Firecracker virtual machine with hardware-level isolation and snapshot-based rapid launch. The service preserves state for up to eight hours, though community analysis indicates minimum costs around $3.03/day, approximately 9x higher than Fargate spot pricing.

#Lambda #serverless #Firecracker #isolation

Read article →
New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials AI 8.0
The Hacker News

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

LayerX's BioShocking technique tricks AI browsers and assistants into copying and exfiltrating user credentials by framing requests as game interactions. The attack successfully compromised six AI browsers including OpenAI's ChatGPT Atlas, Perplexity's Comet, and Anthropic's Claude browser extension.

#AI browsers #credential theft #prompt injection #social engineering

Read article →
IdentityServer4 is dead. Here's what comes next. Engineering 5.0
The New Stack

IdentityServer4 is dead. Here's what comes next.

Rock Solid Knowledge forked IdentityServer after Duende commercialized it in 2022, releasing Open.IdentityServer as a free, open source identity and access control platform. RSK commits to maintaining the project indefinitely with free core functionality and commercial extensions, rejecting the monetization-first approach.

#open source #identity #authentication #fork

Read article →
HCP Terraform Powered by Infragraph Limited Availability Launch Cloud 5.0
HashiCorp Blog

HCP Terraform Powered by Infragraph Limited Availability Launch

HCP Terraform powered by Infragraph enters limited availability for Standard and Premium customers in US instances. Infragraph now supports Azure, GitHub, and Terraform Enterprise connectors with a graph explorer and query builder for unified visibility across hybrid and multi-cloud infrastructure data.

#Terraform #infrastructure graph #multi-cloud #governance

Read article →
Introducing GeneBench-Pro AI 6.0
OpenAI Blog

Introducing GeneBench-Pro

GeneBench-Pro is a new benchmark for evaluating AI performance on genomics, biology, and scientific research tasks using complex, real-world datasets.

#evals #benchmark #genomics #scientific AI

Read article →
Featuring Every Eval Ever Results on Hugging Face Model Pages AI 6.0
Hugging Face Blog

Featuring Every Eval Ever Results on Hugging Face Model Pages

Hugging Face integrates community evaluation results from Every Eval Ever (EEE) directly into model pages, surfacing benchmark performance across diverse tasks and datasets. This enables model creators and users to compare performance on standardized evals without manual aggregation.

#evals #benchmarking #model comparison #community

Read article →
Implement a backup strategy for Amazon Quick Sight BI assets Cloud 5.0
AWS ML Blog

Implement a backup strategy for Amazon Quick Sight BI assets

Post covers backup and restore strategies for Amazon QuickSight BI assets (dashboards, analyses, datasets) using AssetsAsBundle APIs. Provides a ready-to-use automation tool and guidance for protecting against accidental deletion, unintended modification, and regional disruption, especially critical for regulated industries.

#QuickSight #backup #disaster recovery #BI

Read article →
Base44 bets a narrow model beats frontier AI for vibe coding AI 6.0
The New Stack

Base44 bets a narrow model beats frontier AI for vibe coding

Base44 launched Base One, a fine-tuned open-source LLM trained via reinforcement learning on real platform tasks for web application building. The model is optimized exclusively for translating natural-language prompts into working web apps, betting that domain-specific tuning outperforms general-purpose frontier models like Claude or GPT for this narrow use case.

#fine-tuning #reinforcement learning #LLM #domain-specific

Read article →
DiScoFormer: One transformer for density and score, across distributions AI 7.0
Hugging Face Blog

DiScoFormer: One transformer for density and score, across distributions

Allen AI presents DiScoFormer, a unified transformer architecture that handles both density estimation and score-based diffusion across multiple data distributions. The model consolidates what typically requires separate specialized architectures into a single backbone, reducing redundancy and improving parameter efficiency for generative modeling tasks.

#diffusion #transformers #generative models #score-based

Read article →
JetBrains kills Kotlin Notebook months after Microsoft's Polyglot exit. But Jupyter is doing just fine. Engineering 5.0
The New Stack

JetBrains kills Kotlin Notebook months after Microsoft's Polyglot exit. But Jupyter is doing just fine.

JetBrains is sunsetting Kotlin Notebook, the interactive coding plugin launched in July 2023, handing it to the open-source community under Apache 2.0 starting with IntelliJ IDEA 2026.2. The deprecation reflects low adoption and a broader shift in developer workflows driven by AI tools, which have replaced notebook-based exploration and prototyping.

#Kotlin #notebooks #IDE #deprecation

Read article →
Palantir and Nvidia want to change who owns government AI AI 8.0
The New Stack

Palantir and Nvidia want to change who owns government AI

Palantir announced an intelligent engine built on Nvidia AI and Nemotron open models for deploying and customizing AI inside air-gapped and sovereign environments. The platform keeps data and model weights on-premises, enabling government and critical infrastructure operators to run AI without sending data to external APIs or cloud endpoints.

#sovereign AI #air-gapped #on-premises #Nemotron

Read article →
Pair Nova 2 Lite with Claude for cost-optimized document processing AI 8.0
AWS ML Blog

Pair Nova 2 Lite with Claude for cost-optimized document processing

Two-model pipeline on Amazon Bedrock pairs Amazon Nova 2 Lite for multimodal extraction (photo detection, name extraction with coordinates) with Claude Sonnet 4.6 for spatial reasoning to match names to faces. Tested on 336 yearbook pages with 93% confidence at 0.95+, costing two-thirds less than single-model alternatives.

#multimodal #vision-language models #cost optimization #document processing

Read article →
Multi-tenant LLM analytics with row-level security: How we built a secure agent on AWS AI 9.0
AWS ML Blog

Multi-tenant LLM analytics with row-level security: How we built a secure agent on AWS

PAR Technology built a production multi-tenant text-to-SQL agent on Amazon Bedrock enforcing row-level security through three layers: cryptographic request signing (AWS SigV4), semantic validation on Bedrock, and programmatic data isolation via Split-Plane SQL. Architecture prevents cross-tenant data exposure even if the LLM is compromised.

#agents #security #multi-tenant #text-to-SQL

Read article →
Build an agentic AI healthcare claims pipeline with Amazon Bedrock and AWS HealthLake AI 7.0
AWS ML Blog

Build an agentic AI healthcare claims pipeline with Amazon Bedrock and AWS HealthLake

End-to-end automated claims processing pipeline using Amazon Bedrock Data Automation for intelligent document extraction from CMS-1500 forms and Amazon Bedrock AgentCore for validation and transformation into FHIR resources in AWS HealthLake. Reduces manual processing while maintaining accuracy through automated validation checks.

#agents #document processing #healthcare #FHIR

Read article →
Highlights from Git 2.55 DevOps 6.0
GitHub Blog

Highlights from Git 2.55

Git 2.55 ships incremental multi-pack index improvements, repacking optimizations, and 100+ contributor fixes. The release focuses on large-repository performance, particularly around packfile indexing and object lookup via multi-pack index (MIDX), which GitHub uses for repository maintenance at scale.

#Git #performance #packfiles #MIDX

Read article →
Claude in Microsoft Foundry is now generally available AI 8.0
Azure Blog

Claude in Microsoft Foundry is now generally available

Claude is now generally available through Microsoft Foundry on Azure, providing enterprises with a production-ready path to build agentic applications using Anthropic's frontier model with Azure-native authentication, billing, governance, and data controls. The offering removes procurement and infrastructure friction that typically delays enterprise AI projects.

#LLM #agents #Claude #Azure

Read article →
AWS Weekly Roundup: Agentic CX designer for Amazon Connect Customer, EC2 AMI Watermarks, Open Governance for MySQL, and more (June 29, 2026) AI 7.0
AWS News

AWS Weekly Roundup: Agentic CX designer for Amazon Connect Customer, EC2 AMI Watermarks, Open Governance for MySQL, and more (June 29, 2026)

Amazon Connect Customer launches Agentic CX designer (NLX), a no-code canvas for business teams to design and deploy AI-powered voice and digital self-service experiences without engineering involvement. The tool combines agentic and deterministic AI in governed flows, reducing time-to-production from months to weeks. Live Sync preview enables real-time web/mobile experience updates during customer conversations.

#agents #Amazon Connect #no-code #customer experience

Read article →
Inside the Advisory Database and what happens when vulnerability volume breaks records Security 8.0
GitHub Blog

Inside the Advisory Database and what happens when vulnerability volume breaks records

GitHub Advisory Database published 1,560 reviewed advisories in May 2026, five times the typical monthly output, signaling a fundamental shift in vulnerability ecosystem scale. The post examines curation bottlenecks, data quality trade-offs, and the downstream impact of increased CVE requests and private vulnerability reports on advisory review times.

#CVE #supply-chain #vulnerability #advisory database

Read article →
Scaling Network Analysis for Fraud Prevention with BigQuery Graph Cloud 7.0
Google Cloud Blog

Scaling Network Analysis for Fraud Prevention with BigQuery Graph

Curve, a UK fintech, deployed BigQuery Graph to conduct multi-hop network analysis for fraud detection at scale, identifying hidden relationships across millions of users and tens of millions of connections. The graph approach replaces complex self-joins in standard SQL to uncover organized fraud rings.

#BigQuery Graph #fraud detection #graph analysis #network analysis

Read article →
Cloud CISO Perspectives: How Google Cloud Security uses AI internally AI 7.0
Google Cloud Blog

Cloud CISO Perspectives: How Google Cloud Security uses AI internally

Google Cloud's security team has deployed specialized AI agents directly into the software development lifecycle to enable autonomous, proactive defense against machine-speed threats. The shift addresses how AI has erased traditional patching windows by upending vulnerability economics, requiring security to operate at autonomous speed rather than reactive cadence.

#AI agents #security #SDLC #autonomous defense

Read article →
How to Govern Autonomous Agents in Enterprise AI Factories AI 7.0
NVIDIA Developer Blog

How to Govern Autonomous Agents in Enterprise AI Factories

NVIDIA outlines governance patterns for long-running autonomous agents that operate across enterprise systems, access sensitive data, and execute tasks on behalf of users. The post addresses control, audit, and containment strategies for agents that move beyond chat to inspect code, run tests, query databases, and interact with business systems.

#agents #governance #security #enterprise AI

Read article →
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks Security 8.0
The Hacker News

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

China-aligned Mustang Panda group deployed new malware and weaponized Zoho WorkDrive as a command-and-control channel in active campaigns targeting Indian government and hydropower infrastructure. Acronis Threat Research Unit found compromises in Indian government networks including machines used by senior administrative staff.

#APT #C2 #supply-chain #cloud abuse

Read article →
Accelerate modern Linux workloads with Azure Files AI 6.0
Azure Blog

Accelerate modern Linux workloads with Azure Files

Azure Files NFS now optimizes AI and data-intensive Linux workloads by reducing model weight loading latency, which is critical for inference endpoints serving tens or hundreds of gigabytes. The managed file platform provides shared storage for cloud-native, AI, and enterprise modernization scenarios without direct infrastructure management.

#Azure Files #NFS #AI inference #storage

Read article →
Eliya 25 Brings a JVM-Level Diagnostic Profile to OpenJDK 25 LTS Engineering 6.0
InfoQ DevOps

Eliya 25 Brings a JVM-Level Diagnostic Profile to OpenJDK 25 LTS

Asymm Systems released Eliya 25.0.3, an OpenJDK 25 LTS distribution that consolidates HotSpot diagnostic features into an opt-in Production profile for improved production diagnostics in Java environments. The distribution targets teams in regulated settings needing reliable diagnostic data without manual feature aggregation.

#OpenJDK #JVM diagnostics #HotSpot #production profiling

Read article →
The Bear Necessities: A Look at the Drivers, Dynamics, and Applications of the Pro-Russia Influence Ecosystem Security 6.0
Google Cloud Blog

The Bear Necessities: A Look at the Drivers, Dynamics, and Applications of the Pro-Russia Influence Ecosystem

Google Cloud Threat Intelligence documents how the pro-Russia influence ecosystem has evolved from a wartime tool into a global strategic asset, with increasing use of generative AI for planning, research, and content creation across information operations. The analysis warns of intensified targeting of EU, NATO, and other strategic priorities as the ecosystem reorients beyond Ukraine.

#threat intelligence #generative AI #information operations #geopolitical

Read article →
236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers Security 6.0
The Hacker News

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

Infoblox research found 236,000+ websites built with DCloud Uni-App framework hosting investment scams, pig-butchering operations, phishing networks, fake gambling platforms, and wallet drainers. The legitimate Chinese open-source cross-platform framework became a vector for mass fraud and credential theft.

#supply-chain #phishing #fraud #malware infrastructure

Read article →
Why Post-Quantum Cryptography Starts With Credentials Security 6.0
The Hacker News

Why Post-Quantum Cryptography Starts With Credentials

Organizations must prioritize post-quantum cryptography for credentials and sensitive data now, before quantum computers break current RSA and elliptic curve encryption. The article discusses how captured ciphertext and credentials remain vulnerable to future quantum decryption attacks, requiring proactive migration to quantum-resistant algorithms.

#post-quantum cryptography #RSA #elliptic curve #credentials

Read article →
OTel and mesh-derived metrics: A 2026 reference DevOps 7.0
CNCF Blog

OTel and mesh-derived metrics: A 2026 reference

Reference guide for integrating OpenTelemetry with service mesh metrics, specifically Linkerd's proxy-emitted golden metrics for east-west traffic. Demonstrates wiring mesh metrics into an OTel Collector pipeline using K3s, Linkerd 2.19+, and VictoriaMetrics backend, with working configs and Grafana dashboards provided.

#observability #OpenTelemetry #service mesh #metrics

Read article →
etcd-operator joins Cozystack with a new v1alpha2 API DevOps 6.0
CNCF Blog

etcd-operator joins Cozystack with a new v1alpha2 API

etcd-operator donated to Cozystack with a from-scratch v1alpha2 implementation that uses etcd's native Membership API instead of StatefulSet-based member management. New API version etcd-operator.cozystack.io/v1alpha2 replaces etcd.aenix.io/v1alpha1, giving operators direct control over cluster membership via MemberAdd, MemberPromote, and MemberRemove operations.

#Kubernetes #etcd #operators #CRD

Read article →
Turner Industries' Blueprint for a Secure, Cloud-First Infrastructure Cloud 5.0
Google Cloud Blog

Turner Industries' Blueprint for a Secure, Cloud-First Infrastructure

Turner Industries deployed ChromeOS, Google Workspace, Chrome Enterprise Premium, and Cameyo across 21,000 employees, reducing per-device cost by 40-50%, improving device longevity by 100-125%, and cutting deployment time from hours to minutes. The case study demonstrates cost and operational efficiency gains from a cloud-first endpoint strategy.

#ChromeOS #cloud infrastructure #endpoint security #cost optimization

Read article →
Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts Security 7.0
The Hacker News

Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts

Microsoft shut down 119 malicious Edge extensions using steganography to hide payloads in image and font files, which activated days after installation to steal credentials and commit ad fraud. The StegoAd operation, active since at least 2021, represents a long-running supply-chain attack on the Edge Add-ons store.

#steganography #malware #browser extensions #supply-chain

Read article →
AI Tools Accelerates Coding, but Not Overall Software Delivery, GitLab Research Finds AI 7.0
InfoQ DevOps

AI Tools Accelerates Coding, but Not Overall Software Delivery, GitLab Research Finds

GitLab's 2026 AI Accountability Report reveals an AI Paradox: 78% of developers report faster coding, but overall software delivery has not accelerated due to downstream testing, review bottlenecks, and new governance and traceability challenges. The finding highlights that AI coding acceleration does not translate to end-to-end delivery gains without addressing organizational and process constraints.

#AI coding #developer productivity #software delivery #governance

Read article →
Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice? AI 7.0
Snyk Blog

Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?

Snyk VulnBench JS 1.0 benchmark runs 300 repeated scans to measure LLM consistency in security findings. Results show LLM-based security tools vary significantly across runs while SAST tools remain deterministic, revealing different vulnerability detection gaps between approaches.

#LLM #security #evals #SAST

Read article →
Bring it to our shop: Workday's pitch for keeping AI agents close to your most valuable data AI 7.0
The New Stack

Bring it to our shop: Workday's pitch for keeping AI agents close to your most valuable data

Workday introduced Agent-Ready Tools, a Developer Agent for plain-language app building, and Agent Passport for pre-production agent verification and monitoring. The company is positioning on-platform AI agent governance as essential for HR and finance workloads where 99% accuracy is insufficient, using Model Context Protocol (MCP) connectors and third-party attestation partners like Cisco.

#agents #MCP #inference #guardrails

Read article →
Okta is the first to bring AI agent governance inside FedRAMP boundaries AI 8.0
The New Stack

Okta is the first to bring AI agent governance inside FedRAMP boundaries

Okta launched Okta for AI Agents - Core, a generally available platform for managing AI agents as first-class identities in FedRAMP and HIPAA environments. The product treats agents as managed identities rather than static service accounts, addressing visibility gaps as agents spawn and connect across APIs, SaaS tools, MCP servers, and data systems.

#agents #identity #FedRAMP #HIPAA

Read article →
AWS Previews FinOps Agent for Cost Analysis and Optimization Cloud 6.0
InfoQ DevOps

AWS Previews FinOps Agent for Cost Analysis and Optimization

AWS FinOps Agent, now in public preview, automates cost anomaly investigation, correlates spend changes with AWS activity data, and integrates with Slack and Jira to route findings to resource owners. The managed service targets common FinOps workflows without requiring manual cost analysis.

#agents #FinOps #cost optimization #AWS

Read article →
Greptile, Cursor, and Devin agree that agents should run their code. What they run it against matters. AI 8.0
The New Stack

Greptile, Cursor, and Devin agree that agents should run their code. What they run it against matters.

Coding agents now execute their own code at runtime to verify correctness before human review, shifting verification from static analysis into the agent loop. Greptile, Cursor, Codex, and Devin all implement runtime verification, addressing the bottleneck when agents generate PRs faster than humans can review them.

#agents #code-generation #runtime-verification #CI/CD

Read article →
Vibe slop is the symptom. Context debt is the disease. AI 7.0
The New Stack

Vibe slop is the symptom. Context debt is the disease.

Engineers behind agentic coding tools warn that prompt-generated code creates technical debt beyond visible bugs: inefficient code burns excess compute and memory, while undocumented service dependencies accumulate faster than teams can track. Postman's AI Engineer launch reframes the problem as context debt rather than code quality alone.

#agents #technical-debt #code-quality #context

Read article →
What Does EU AI Act Compliance Require? AI 7.0
Docker Blog

What Does EU AI Act Compliance Require?

EU AI Act (Regulation 2024/1689) imposes four-tier risk-based compliance obligations on AI systems deployed in or affecting the EU, with phased enforcement through 2027. Penalties reach 35 million euros or 7% of global turnover, covering training data documentation, incident reporting, and deepfake labeling by August 2026.

#AI #compliance #regulation #risk-management

Read article →
A Decision Framework for ETL Migration to Databricks Cloud 5.0
Databricks Blog

A Decision Framework for ETL Migration to Databricks

Databricks provides a decision framework for migrating ETL workloads from legacy systems, addressing hundreds of stored procedures and multiple schedulers. The framework helps teams evaluate readiness, prioritize migrations, and manage permissions and dependencies.

#ETL #migration #data engineering #Databricks

Read article →
Anthropic Economic Index report: Cadences AI 5.0
Anthropic Research

Anthropic Economic Index report: Cadences

Anthropic's latest Economic Index report samples Claude usage hourly to measure when users engage with the model, what they produce, and how they perceive AI's impact on their work. The research provides empirical data on Claude adoption patterns and user-reported productivity effects.

#Claude #LLM adoption #usage patterns #productivity metrics

Read article →
After Fable 5 ban, Anthropic and 19 organizations launch open source security body Security 8.0
The New Stack

After Fable 5 ban, Anthropic and 19 organizations launch open source security body

The Linux Foundation launched Akrites, a coordinated vulnerability disclosure body for critical open-source software, with 20 founding members including AWS, Anthropic, Google, Microsoft, OpenAI, and others. The initiative responds to frontier AI models' ability to discover vulnerabilities at scale, creating both defensive and offensive capabilities.

#security #vulnerability disclosure #open-source #AI models

Read article →
Securing agentic AI with perimeter guardrails: What's new in VPC Service Controls AI 8.0
Google Cloud Blog

Securing agentic AI with perimeter guardrails: What's new in VPC Service Controls

Google Cloud announces agent identity support and Model Context Protocol (MCP) attribute enforcement in VPC Service Controls to secure autonomous AI agents at network perimeter. Agents now map to IAM principals with PrincipalSets for fleet-wide policy, and MCP attributes enable tool-level access control, allowing immediate revocation if an agent is compromised.

#agents #security #VPC #IAM

Read article →
Open source maintainership in the age of AI AI 6.0
Kubernetes Blog

Open source maintainership in the age of AI

Kubernetes project establishes AI contribution policy requiring transparency and human accountability for AI-assisted code. The policy mandates disclosure when generative AI tools assist with pull requests and maintains human oversight while acknowledging AI as a development aid.

#AI #open-source #code-review #policy

Read article →
The performance dividend: Optimizing PostgreSQL on Azure directly in Visual Studio Code Cloud 6.0
Azure Blog

The performance dividend: Optimizing PostgreSQL on Azure directly in Visual Studio Code

Microsoft has extended PostgreSQL optimization tooling directly into Visual Studio Code via a new extension, allowing developers and DBAs to diagnose slow queries without context-switching between SQL editors, monitoring dashboards, and cloud portals. The integration builds on Azure Database for PostgreSQL and Azure HorizonDB, which delivers 3x faster performance than self-managed Postgres.

#PostgreSQL #Azure #Visual Studio Code #database optimization

Read article →
From query to action: Introducing SQL alerting in Cloud Monitoring Observability Analytics Cloud 7.0
Google Cloud Blog

From query to action: Introducing SQL alerting in Cloud Monitoring Observability Analytics

Google Cloud Monitoring now supports SQL-based alerting in Observability Analytics, enabling complex analytical queries over logs and traces to trigger alerts. Users can join logs and traces, calculate error percentages, and analyze high-cardinality dimensions like customer or IP address, moving beyond rigid threshold-based alerting.

#observability #alerting #SQL #logs

Read article →
Creating the NVIDIA Nemotron 3 Ultra NVFP4 Checkpoint with NVIDIA Model Optimizer AI 7.0
NVIDIA Developer Blog

Creating the NVIDIA Nemotron 3 Ultra NVFP4 Checkpoint with NVIDIA Model Optimizer

NVIDIA Model Optimizer now supports NVFP4, a 4-bit floating-point quantization format introduced with Blackwell architecture, enabling efficient compression of large model weights for deployment. The Nemotron 3 Ultra checkpoint demonstrates practical quantization workflows for reducing memory footprint while maintaining inference performance as context windows expand.

#quantization #LLM #NVFP4 #model optimization

Read article →
Terraform MCP server: Four real-world AI infrastructure patterns AI 8.0
HashiCorp Blog

Terraform MCP server: Four real-world AI infrastructure patterns

HashiCorp released a Terraform MCP server that grounds AI agents in authoritative infrastructure context from Terraform workflows, modules, policies, and configurations. MCP reduces LLM hallucinations by replacing probabilistic reasoning with real infrastructure data, enabling safer agentic provisioning and governance automation.

#LLM #agents #Terraform #infrastructure

Read article →
What's new with Google Cloud AI 8.0
Google Cloud Blog

What's new with Google Cloud

Google Cloud announces Run:ai Model Streamer TPU support in vLLM 0.18.0 for accelerated model loading on GKE, achieving 2x faster cold starts and 50% memory reduction for 480B parameter models. Also introduces OpenTelemetry-based TPU AI Telemetry Collector agent for standardized monitoring without CPU overhead.

#TPU #vLLM #GKE #observability

Read article →
Build interactive PDF text extraction from Amazon S3 Cloud 6.0
AWS ML Blog

Build interactive PDF text extraction from Amazon S3

AWS demonstrates an MCP server approach for real-time PDF text extraction from S3, providing on-demand document access without batch pipelines. The solution uses a protocol-based architecture for programmatic queries and compares against Amazon Textract for use-case selection.

#MCP #S3 #document processing #serverless

Read article →
How Cara pioneers domain-specific AI for enterprise insurance brokerages with AWS AI 7.0
AWS ML Blog

How Cara pioneers domain-specific AI for enterprise insurance brokerages with AWS

Cara delivers a domain-specific AI solution on AWS that automates back-office workflows for insurance brokerages, handling application completion, policy analysis, and data re-keying while maintaining PII security and regulatory compliance. The post details technical design decisions and measurable outcomes for enterprise deployments.

#domain-specific AI #insurance #workflow automation #compliance

Read article →
Production-grade AI agents for financial compliance: Lessons from Stripe AI 9.0
AWS ML Blog

Production-grade AI agents for financial compliance: Lessons from Stripe

Stripe deployed a production ReAct agent system on Amazon Bedrock for financial compliance review, reducing handling time by 26 percent while maintaining 96 percent helpfulness and human oversight. The post covers agent architecture, task decomposition, orchestration patterns, and cost optimization via prompt caching.

#agents #ReAct #financial compliance #prompt caching

Read article →
AWS, Microsoft, and Google agree the session is the new unit of compute. They disagree on how to isolate it. AI 9.0
The New Stack

AWS, Microsoft, and Google agree the session is the new unit of compute. They disagree on how to isolate it.

AWS, Microsoft, Google, and Anthropic have independently converged on session-aware agent runtimes that treat the agent session (not individual requests) as the unit of compute. Each platform isolates sessions differently: AWS uses microVMs, Anthropic virtualizes into session/harness/sandbox, Google uses dedicated sandboxes, and Microsoft uses per-session isolation. This shift reflects the stateful, tool-using nature of production agents.

#agents #runtime architecture #isolation #compute model

Read article →
Your engineering org needs an AI slop registry AI 7.0
The New Stack

Your engineering org needs an AI slop registry

The article argues that AI coding tools amplify systematic mistakes at scale: code that compiles and passes checks but is subtly wrong, overengineered, or misaligned with repo patterns. CLAUDE.md and Skills provide generation guidance but lack verification; the author proposes an AI slop registry as an audit trail and prevention system for catching patterns before they spread.

#AI coding #code quality #LLM agents #verification

Read article →
Shopify taught AI to spot duplicate products. Here's why retailers are scrambling. AI 7.0
The New Stack

Shopify taught AI to spot duplicate products. Here's why retailers are scrambling.

Shopify launched Catalog, an LLM-based system that normalizes merchant product data so AI shopping agents can identify and compare duplicate listings across different formats. AI-driven traffic to Shopify stores grew 8x year-over-year in Q1 2026, forcing retailers to restructure product information for agent discoverability.

#LLM #agents #product discovery #e-commerce

Read article →
The AI agent identity problem nobody's talking about AI 8.0
The New Stack

The AI agent identity problem nobody's talking about

Enterprises deploying thousands of AI agents face a critical security gap: agents lack defined identities, run under shared accounts with overly broad permissions, and dynamically request access without audit trails. The 2026 Tech Leader Study projects 1,661 AI agents per enterprise (38% increase), compounding the identity and least-privilege enforcement problem.

#agents #identity #security #access control

Read article →
Guardian Agents: The Next Layer of Identity Governance AI 7.0
The Hacker News

Guardian Agents: The Next Layer of Identity Governance

AI agents operating in enterprise environments inherit permissions and execute decisions at machine speed with minimal oversight, exposing a gap between deployed autonomous systems and identity governance programs designed for human access control.

#agents #identity governance #access control #security

Read article →
Securing CI/CD for an open source project, part 3: Credentials, verification, and what's next DevOps 8.0
CNCF Blog

Securing CI/CD for an open source project, part 3: Credentials, verification, and what's next

Cilium's CI/CD hardening series concludes with credential isolation: GITHUB_TOKENs scoped to minimal read permissions by default, separate CI and production registries behind protected environments, and release workflows requiring explicit maintainer approval. Attacker compromise of CI cannot reach production image tags.

#CI/CD #credentials #security #GitHub Actions

Read article →
Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff Security 7.0
The Hacker News

Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff

Russian authorities used Cellebrite UFED forensic tools to extract data from opposition activist Andrey Pivovarov's iPhone in June 2021, three months after Cellebrite announced it would stop selling to Russia and Belarus. Citizen Lab's investigation found forensic traces on the device and corroborating official Russian records, demonstrating continued access to commercial mobile forensics tools despite stated sanctions compliance.

#forensics #supply-chain #surveillance #iPhone

Read article →
Public cloud vs. on-prem: Summit on where each workload belongs Cloud 6.0
The New Stack

Public cloud vs. on-prem: Summit on where each workload belongs

Rising cloud costs and hyperscaler pricing power are prompting enterprises to reconsider cloud-first strategies and repatriate workloads to on-premises infrastructure. The article discusses workload segmentation and cost-benefit tradeoffs between shared cloud compute and on-prem management for high-risk data.

#cloud costs #workload placement #on-premises #infrastructure strategy

Read article →
Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study AI 7.0
Meta Engineering

Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study

Meta describes privacy-aware infrastructure (PAI) for enforcing retention, access, and anonymization policies in AI-native systems. The approach combines rich context building with LLM-driven asset classification to handle ambiguous, noisy data at scale while maintaining human oversight for judgment and accountability.

#LLM #privacy #data governance #classification

Read article →
Introducing the Cluster API plugin for Headlamp DevOps 7.0
Kubernetes Blog

Introducing the Cluster API plugin for Headlamp

Headlamp adds a dedicated Cluster API plugin providing visual management of cluster lifecycle resources including MachineDeployments, MachineSets, and KubeadmControlPlane objects. The plugin enables platform teams to scale worker nodes, monitor control plane status, and trace resource ownership hierarchies directly from the browser UI instead of raw kubectl commands.

#Kubernetes #Cluster API #UI #platform engineering

Read article →
Deploy Boundary on Kubernetes with official Helm charts DevOps 6.0
HashiCorp Blog

Deploy Boundary on Kubernetes with official Helm charts

HashiCorp released two official Helm charts for Boundary: one for the controller (control plane) and one for workers (data plane). These charts eliminate hand-crafted manifests and provide standardized, production-ready deployment for both self-managed Boundary clusters and HCP Boundary deployments with self-managed workers.

#Kubernetes #Helm #Boundary #PAM

Read article →
How to Generate an SBOM for Container Workflows DevOps 7.0
Docker Blog

How to Generate an SBOM for Container Workflows

Docker outlines best practices for SBOM generation in container pipelines, emphasizing build-time generation over post-build scanning for completeness and accuracy. The post covers decisions that determine SBOM quality (completeness, accuracy, freshness, verifiability), security considerations for generation tooling, and how pre-built SBOMs in base images reduce burden.

#SBOM #supply-chain #security #container

Read article →
Inspect Volcano workloads faster with Headlamp DevOps 7.0
Kubernetes Blog

Inspect Volcano workloads faster with Headlamp

Headlamp now surfaces Volcano batch scheduler resources including Jobs, PodGroups, queues, and gang scheduling details in a unified UI. The plugin eliminates context-switching between kubectl and Volcano CLI by visualizing how batch workloads compete for resources and coordinate multi-pod starts.

#Kubernetes #Volcano #batch scheduling #HPC

Read article →
See your serverless: introducing the Headlamp plugin for Knative DevOps 7.0
Kubernetes Blog

See your serverless: introducing the Headlamp plugin for Knative

Headlamp adds a Knative plugin enabling operators to inspect KServices, Revisions, and DomainMappings with a resource graph view and inline editing of traffic splits and autoscaling annotations. The plugin consolidates Knative management from kn CLI and kubectl into a single web interface.

#Kubernetes #Knative #serverless #traffic management

Read article →
Retrofit, don't rebuild: Agentic overlays for transforming legacy enterprise services AI 8.0
AWS ML Blog

Retrofit, don't rebuild: Agentic overlays for transforming legacy enterprise services

Agentic overlays are thin wrapper layers that transform REST-based microservices into agents capable of Agent-to-Agent (A2A) communication without rewriting business logic. The post presents reference architectures and sample code showing how to expose REST APIs as tools compatible with the Model Context Protocol (MCP), enabling enterprises to integrate legacy services into standardized agent frameworks while reducing infrastructure sprawl.

#agents #A2A #MCP #legacy systems

Read article →
"Code should be regenerated, not maintained": Codeplain makes the case for spec-driven development AI 6.0
The New Stack

"Code should be regenerated, not maintained": Codeplain makes the case for spec-driven development

Codeplain, a new startup, advocates spec-driven development using Plain, an open-source specification language, to replace traditional code review with spec review. The approach treats code as regenerated output from specifications rather than maintained artifacts, shifting the bottleneck from writing to reviewing.

#code-generation #spec-driven #LLM #development-workflow

Read article →
Scaling AI Inference Across Multiple GPUs Using NVIDIA TensorRT with Multi-Device Inference Support AI 8.0
NVIDIA Developer Blog

Scaling AI Inference Across Multiple GPUs Using NVIDIA TensorRT with Multi-Device Inference Support

TensorRT now supports multi-device inference, allowing generative AI workloads to scale across multiple GPUs while preserving kernel fusions, memory planning, and quantization optimizations. This addresses the challenge of inference scaling for large models that exceed single-GPU memory and compute capacity.

#TensorRT #inference #multi-GPU #quantization

Read article →
Optimize model training on Amazon SageMaker AI with NVIDIA Blackwell AI 7.0
AWS ML Blog

Optimize model training on Amazon SageMaker AI with NVIDIA Blackwell

P6-B200 instances with 8 NVIDIA Blackwell GPUs are now available on Amazon SageMaker AI Training, enabling larger batch sizes, longer sequence lengths, and reduced model sharding overhead. The post provides a practical framework for tuning training configurations including batch size selection, sequence length optimization, precision format choices for 1B-64B parameter models, and activation checkpointing strategies.

#training #Blackwell #GPU #SageMaker

Read article →
Implementing super resolution by deploying SeedVR2 on Amazon SageMaker AI AI 6.0
AWS ML Blog

Implementing super resolution by deploying SeedVR2 on Amazon SageMaker AI

SeedVR2, an open-source video restoration model from ByteDance, can be deployed on Amazon SageMaker AI for scalable video upscaling and super resolution. The post covers solution architecture, deployment steps, and performance comparisons showing quality improvements and processing efficiency for upscaling lower-resolution video libraries to modern display resolutions.

#video restoration #super resolution #SeedVR2 #SageMaker

Read article →
Build self-service AWS Health analytics to find actionable health insights with AI agents powered by Amazon Bedrock AI 7.0
AWS ML Blog

Build self-service AWS Health analytics to find actionable health insights with AI agents powered by Amazon Bedrock

Chaplin is an open-source solution using AI agents exposed through the Model Context Protocol (MCP) to provide self-service AWS Health event analytics. Operations teams can query health events in natural language from MCP-compatible AI assistants to identify production impact and prioritize actions across 50+ accounts without waiting for AWS Support or Technical Account Managers.

#agents #MCP #AWS Health #Bedrock

Read article →
Building agentic AI applications with a modern data mesh strategy on AWS AI 7.0
AWS ML Blog

Building agentic AI applications with a modern data mesh strategy on AWS

Building agentic AI applications requires fine-grained access control across multiple data sources that RAG-based approaches cannot provide. The post extends earlier serverless data lake patterns by replacing Amazon OpenSearch Serverless with Amazon S3 Vectors for cost-optimized knowledge bases, reducing vector storage and query costs by up to 90% while enforcing governance from tool discovery through query execution to response synthesis.

#agents #data mesh #governance #S3 Vectors

Read article →
Template-based data extraction is dead. Here's what comes next. AI 7.0
The New Stack

Template-based data extraction is dead. Here's what comes next.

Amazon Bedrock Data Automation (BDA) is a fully managed AWS service for end-to-end document and media automation using foundation models. It automates extraction, classification, and transformation of unstructured content across documents, images, audio, and video, replacing brittle template-based systems.

#LLM #document-automation #multimodal #foundation-models

Read article →
EU Cyber Resilience Act: Overview, Requirements, and Timelines Security 7.0
Docker Blog

EU Cyber Resilience Act: Overview, Requirements, and Timelines

The EU Cyber Resilience Act (CRA), effective December 11, 2027, establishes mandatory cybersecurity baselines for all hardware and software products sold in Europe. Mandatory vulnerability reporting begins September 11, 2026. For container teams, the CRA turns SBOM generation, vulnerability disclosure, and image hardening into legal requirements.

#compliance #CRA #SBOM #vulnerability-reporting

Read article →
How we cut AI costs by 80% AI 8.0
The New Stack

How we cut AI costs by 80%

The post identifies context accumulation as the primary driver of AI agent costs and demonstrates an 80% cost reduction through context management optimization. It details how agents repeatedly ingest growing context windows across tool calls and proposes caching strategies to avoid redundant context reingestion.

#agents #context-management #cost-optimization #MCP

Read article →
How we built saga rollbacks for Cloudflare Workflows DevOps 7.0
Cloudflare Blog

How we built saga rollbacks for Cloudflare Workflows

Cloudflare Workflows now supports saga rollbacks, allowing developers to declare compensation logic within step definitions to handle failures in multi-step durable workflows. Enables semantic reversal of operations when downstream steps fail, eliminating manual compensation tracking.

#saga-pattern #workflow-orchestration #distributed-systems #state-management

Read article →
Building a Cluster-Aware AI Agent with Kubernetes, Argo CD, and GitOps AI 8.0
CNCF Blog

Building a Cluster-Aware AI Agent with Kubernetes, Argo CD, and GitOps

A walkthrough of deploying a self-hosted, read-only AI agent inside Kubernetes that observes live cluster state through the API and reasons with a local LLM, with no data egress and full GitOps auditability via Argo CD. The agent runs as a standard Deployment with a scoped ServiceAccount (get/list only), making it cluster-aware and immutable by design. Source code provided at github.com/MaryamTavakkoli/local-k8s-ai-agent.

#LLM #agents #Kubernetes #GitOps

Read article →
What To Look For in a Serverless Database for AI Applications Cloud 5.0
Databricks Blog

What To Look For in a Serverless Database for AI Applications

Databricks outlines selection criteria for serverless databases suited to AI workloads, emphasizing decoupled compute and storage, automatic scaling, and cost efficiency. The piece addresses how serverless architectures reduce operational overhead for teams building production AI systems.

#serverless #databases #AI infrastructure #cloud architecture

Read article →
Cloudflare Ships Agent Skills for Zero Trust Deployment and Migration AI 7.0
InfoQ DevOps

Cloudflare Ships Agent Skills for Zero Trust Deployment and Migration

Cloudflare released the Cloudflare One stack, an open-source library of agent skills for planning, deploying, and managing Zero Trust environments. The skills include automated migration logic for Zscaler and Palo Alto Networks, reusing logic from Cloudflare's Descaler program that has moved enterprise customers in hours rather than months.

#agents #Zero Trust #automation #infrastructure

Read article →
What Is Serverless PostgreSQL? Cloud 5.0
Databricks Blog

What Is Serverless PostgreSQL?

Databricks explains serverless PostgreSQL as a fully managed cloud database that decouples compute from storage, enabling independent scaling and pay-per-use pricing. The model eliminates provisioning overhead while maintaining PostgreSQL compatibility.

#serverless #PostgreSQL #managed databases #cloud

Read article →
Boundary 1.0 releases RDP session recording and improved management DevOps 6.0
HashiCorp Blog

Boundary 1.0 releases RDP session recording and improved management

Boundary 1.0 marks production maturity for privilege access management with RDP session recording (capture and replay of interactive user actions), Kubernetes Helm charts for simplified deployment, and planned expansion to other protocols. The release reflects architecture maturity and proven deployments across customer environments.

#Boundary #PAM #RDP #session-recording

Read article →
Scaling without friction: Aliases at project scope in Boundary DevOps 5.0
HashiCorp Blog

Scaling without friction: Aliases at project scope in Boundary

Boundary 1.0 introduces project-scoped target aliases, allowing teams to independently create and manage memorable names for infrastructure targets within their own project boundaries instead of requiring global uniqueness. This solves the naming collision problem at enterprise scale where multiple teams need identical names like ssh-jumper or postgres.db across different environments.

#Boundary #PAM #scaling #multi-tenancy

Read article →
HCP Vault Dedicated introduces cluster disaster recovery (public preview) DevOps 6.0
HashiCorp Blog

HCP Vault Dedicated introduces cluster disaster recovery (public preview)

HCP Vault Dedicated now offers cluster-level disaster recovery (cluster DR) in public preview, enabling failover and DR testing for individual Vault clusters independent of regional outages. Cluster DR complements existing regional DR by allowing teams to rehearse incident response, verify runbooks, and test failover behavior under controlled conditions.

#disaster recovery #Vault #secrets management #resilience

Read article →
Grab Builds Secure Agentic AI Workload Platform AI 8.0
InfoQ DevOps

Grab Builds Secure Agentic AI Workload Platform

Grab's security team built Palana, a Kubernetes-native secure execution platform for running autonomous AI agents safely. Palana isolates agent threats including unpredictable tool-use, code-writing, and prompt injection risks using isolated namespaces, out-of-process control planes, and proxy-mediated Vault-backed secrets.

#agents #Kubernetes #security #tool-use

Read article →
Azul wants to find your unpatched JVMs before AI does Security 6.0
The New Stack

Azul wants to find your unpatched JVMs before AI does

Azul Systems launched a free JVM vulnerability risk assessment tool that scans networks to identify unpatched Java runtimes and maps findings to CISA KEV and NVD catalogs. The tool targets DevOps and SecOps teams lacking visibility into embedded and unmanaged JVM instances, with conversion to Azul Core subscriptions. Azul emphasizes its security-only Critical Patch Updates model versus AWS Corretto and Eclipse Temurin.

#Java #JVM #vulnerability scanning #security

Read article →
Will it Mythos? One coder's verdict on Anthropic's blend of debugging AI 7.0
The New Stack

Will it Mythos? One coder's verdict on Anthropic's blend of debugging

Independent developer Joe Cooper benchmarked Anthropic's Mythos model on security bug detection by building a corpus of bugs documented as Mythos-found, then testing whether top-tier models like Opus could identify them blind. Cooper's analysis questions Mythos's real-world effectiveness at finding challenging security vulnerabilities versus marketing claims.

#LLM evaluation #evals #security bugs #Anthropic

Read article →
Chainguard targets Java's unpatched vulnerability backlog with drop-in remediated libraries Security 7.0
The New Stack

Chainguard targets Java's unpatched vulnerability backlog with drop-in remediated libraries

Chainguard Libraries for Java is now generally available, offering backported CVE fixes for Spring Boot, Spring Framework, Spring Security, and H2 Database without requiring upstream patches. The offering targets legacy Java shops where 90% of Fortune 500 companies rely on Java for core systems, many stuck on end-of-life versions like Spring Boot 2.7 that carry 143 unpatched CVEs across 79 projects.

#CVE #Java #Spring Boot #supply-chain

Read article →
Build a healthcare appointment agent with Amazon Nova 2 Sonic AI 7.0
AWS ML Blog

Build a healthcare appointment agent with Amazon Nova 2 Sonic

Tutorial on building a voice agent for healthcare appointment reminders using Amazon Nova 2 Sonic and Bedrock AgentCore. The agent handles voice authentication, appointment confirmation/cancellation/rescheduling, pre-visit health collection, and escalation to staff, with optional Amazon Connect integration for outbound dialing.

#voice-agents #Amazon Nova #Bedrock #tool-use

Read article →
AI-powered BI with Snowflake and Amazon Quick Cloud 7.0
AWS ML Blog

AI-powered BI with Snowflake and Amazon Quick

Snowflake semantic views paired with Amazon QuickSight datasets eliminate data reconciliation gaps by embedding business logic at the data layer. Semantic views provide unified definitions for metrics, dimensions, and relationships that both AI and BI systems inherit, reducing hallucinations and ensuring consistent answers across applications.

#semantic-layer #Snowflake #QuickSight #data-governance

Read article →
Spotlight on WG Device Management DevOps 8.0
Kubernetes Blog

Spotlight on WG Device Management

Kubernetes Device Management Working Group discusses the graduation of Dynamic Resource Allocation (DRA) to GA, addressing hardware-intensive workloads like GPUs, TPUs, and network interfaces. DRA enables programmable, hardware-aware scheduling beyond legacy CPU and memory models, critical for AI, Edge, and Telecom workloads at scale.

#Kubernetes #device-management #DRA #GPU-scheduling

Read article →
Enhanced data resilience with cross-region backups in Backup and DR Service Cloud 7.0
Google Cloud Blog

Enhanced data resilience with cross-region backups in Backup and DR Service

Google Cloud announced general availability of cross-region backups in Backup and DR Service, decoupling backup destination from source region. The feature is now available for Compute Engine instances, Disks, and Filestore, with Cloud SQL and AlloyDB support coming later, enabling cost-optimized regional resilience and GDPR compliance.

#backup #disaster-recovery #cross-region #compliance

Read article →
What if the answer was already in your data? AI 5.0
Databricks Blog

What if the answer was already in your data?

Databricks and Kythera Labs discuss AI-native approaches to querying and reasoning over enterprise data. The post covers how LLMs can surface insights from existing data without requiring new collection or transformation.

#LLM #RAG #data-retrieval #enterprise-AI

Read article →
Agentic infrastructure operations begin with accurate, reliable infrastructure data AI 6.0
The New Stack

Agentic infrastructure operations begin with accurate, reliable infrastructure data

Infrastructure AI agents require a unified, accurate data model to avoid confident mistakes that expose databases, cause failed deployments, or trigger outages. The article argues that 70% of industry leaders identify fragmented infrastructure tooling as a core bottleneck, and agents will expose these gaps through failures unless organizations consolidate their IP address management, inventory, and configuration data.

#agents #infrastructure #data quality #automation

Read article →
Introducing computer use in Gemini 3.5 Flash AI 9.0
DeepMind

Introducing computer use in Gemini 3.5 Flash

Google DeepMind announces computer-use capabilities in Gemini 3.5 Flash, enabling the model to interact with screens, click buttons, and navigate interfaces. This extends tool-use beyond APIs to direct UI automation.

#LLM #tool-use #computer-vision #UI-automation

Read article →
Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered Security 6.0
The Hacker News

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

Law enforcement and private sector partners including Bitdefender, Bitsight, ESET, and Microsoft dismantled criminal infrastructure powering Amadey and StealC malware. The operation recovered 27 million stolen credentials and disrupted the infrastructure used to launch ransomware, financial fraud, and attacks on critical infrastructure.

#malware #ransomware #supply-chain #threat-intelligence

Read article →
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks Security 8.0
The Hacker News

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Novee Security identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows attackers to hijack workflows and compromise open-source supply chains. The vulnerability affects 300+ GitHub repositories at major organizations including Microsoft, Google, and Apache, enabling full attacker control of repositories.

#CI/CD #supply-chain #GitHub #workflow-hijacking

Read article →
Sakana Fugu is more than a router. But it's not the blueprint for AI sovereignty, either. AI 6.0
The New Stack

Sakana Fugu is more than a router. But it's not the blueprint for AI sovereignty, either.

Sakana AI released Fugu, a multi-agent orchestration system that breaks user prompts into subtasks and routes them across expert models via learned orchestration logic, not simple model comparison. Early feedback reports mixed results: some users see frontier-model performance on engineering and reasoning benchmarks, while others report high costs, fast token burn, and performance below Anthropic Claude 5 and Mythos Preview.

#agents #model routing #orchestration #multi-model

Read article →
From Awareness to Engineered Accessibility in Open Source Other 5.0
CNCF Blog

From Awareness to Engineered Accessibility in Open Source

The CNCF Merge Forward Neurodiversity group reframes open-source accessibility from individual awareness (Day 1) to systemic universal design (Day 2), reducing cognitive friction in documentation, communication norms, and governance. The article argues that invisible assumptions in issue templates, PR comments, and synchronous-first workflows create barriers that compound across the contributor journey.

#accessibility #open-source #community #governance

Read article →
Dawn of the Apex Agentic Adversary Security 7.0
The Hacker News

Dawn of the Apex Agentic Adversary

The article discusses a shift from human-speed threats to machine-speed adversaries powered by AI agents. Traditional security timelines where researchers find bugs, CVEs are cataloged, patches are developed, and fixes deployed over weeks or months are becoming obsolete as agentic adversaries operate at machine speed.

#AI agents #adversarial-AI #threat-intelligence #security

Read article →
Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager Security 9.0
Google Cloud Blog

Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager

Mandiant identified active exploitation of CVE-2026-20245, a zero-day privilege escalation vulnerability in Cisco Catalyst SD-WAN Manager. A threat actor exploited the flaw via malicious CSV file upload to escalate from compromised admin account to root access, using anti-forensic techniques including selective file deletion and configuration restoration.

#CVE #zero-day #SD-WAN #privilege-escalation

Read article →
Unlocking the Cloudflare app ecosystem with OAuth for all DevOps 7.0
Cloudflare Blog

Unlocking the Cloudflare app ecosystem with OAuth for all

Cloudflare announced self-managed OAuth for all customers, enabling developers to create OAuth clients for delegated API access without manual onboarding. The feature supports SaaS integrations, CI/CD workflows, and agentic tools, replacing reliance on API tokens with scoped OAuth flows for better security and developer experience.

#OAuth #API #authentication #CI/CD

Read article →
Advancing AI agent security in Vault AI 7.0
HashiCorp Blog

Advancing AI agent security in Vault

HashiCorp Vault now offers AI agent authorization in public preview for Enterprise customers, enforcing per-request authorization via OAuth 2.0 Rich Authorization Requests (RFC 9396). The `authorization_details` claim is now required by default, enabling fine-grained, ephemeral permissions that prevent over-authorization and enforce least privilege for each agent request.

#agents #authorization #OAuth 2.0 #least privilege

Read article →
Kubernetes teams trust automation to ship code but not to touch CPU, and AI is raising the stakes DevOps 7.0
The New Stack

Kubernetes teams trust automation to ship code but not to touch CPU, and AI is raising the stakes

Survey of 321 Kubernetes practitioners reveals a trust asymmetry: 82% trust automated deployments, but only 27% allow auto-applied CPU/memory changes even within guardrails. As AI inference scales on Kubernetes, this hesitation around resource optimization becomes increasingly expensive, forcing teams to choose between safety margins and cost efficiency.

#Kubernetes #autoscaling #resource optimization #AI inference

Read article →
Genesis Workbench: A blueprint for industry AI in life sciences, powered by Databricks and NVIDIA AI 6.0
Databricks Blog

Genesis Workbench: A blueprint for industry AI in life sciences, powered by Databricks and NVIDIA

Databricks and NVIDIA announce Genesis Workbench, a reference architecture for GPU-accelerated drug discovery combining Databricks' data platform with NVIDIA's compute and BioNeMo models. The workbench provides a blueprint for life sciences organizations to build end-to-end AI pipelines for discovery workflows.

#life sciences #GPU acceleration #drug discovery #data platform

Read article →
OpenClaw and Hermes agree on what an agent is. They disagree on what controls it. AI 8.0
The New Stack

OpenClaw and Hermes agree on what an agent is. They disagree on what controls it.

OpenClaw (Microsoft) and Hermes Agent (Nous Research) both provide harnesses that turn language models into autonomous systems, but diverge on architecture: OpenClaw centers on gateway/channel integration, while Hermes prioritizes memory and learning. Both shipped in 2024 and compete on the control layer that governs agent behavior.

#agents #agent harness #LLM #autonomy

Read article →
What is an SBOM (and Why Can't You Ship Without One)? Security 6.0
Docker Blog

What is an SBOM (and Why Can't You Ship Without One)?

Docker explains SBOM fundamentals, formats, and tooling for container security. The article covers why 73% of organizations recognize SBOMs improve vulnerability mitigation, regulatory drivers (EO 14028, CISA, EU CRA), and how to generate SBOMs at image build time to capture the full dependency tree including OS packages.

#SBOM #supply-chain #container security #provenance

Read article →
Build a protein research copilot with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Build a protein research copilot with Amazon Bedrock AgentCore

Tutorial on building a conversational protein research agent using Amazon Bedrock AgentCore, Strands Agents SDK, and pgvector-backed Aurora PostgreSQL to enable natural language queries over peptide embeddings. Demonstrates tool-use orchestration, SageMaker serverless endpoints for ESM-C 300M embeddings, and vector similarity search for structural peptide matching.

#agents #tool-use #embeddings #RAG

Read article →
Nx debuts Polygraph, taking aim at what's stalling AI coding agents AI 8.0
The New Stack

Nx debuts Polygraph, taking aim at what's stalling AI coding agents

Nx launched Polygraph, a service that creates a synthetic monorepo from multiple repositories so AI coding agents can work across repos as if they were unified. Agents stall when changes span repositories or depend on others' work; Polygraph combines repos with agent traces to enable cross-repo autonomy. Currently free during early access.

#agents #coding agents #monorepo #AI

Read article →
Maximize AI Factory Energy Efficiency Through Full-Stack Inference and Training Optimizations AI 7.0
NVIDIA Developer Blog

Maximize AI Factory Energy Efficiency Through Full-Stack Inference and Training Optimizations

NVIDIA outlines strategies to optimize power consumption across AI infrastructure, where power can represent 40% of operating expenses. The post covers full-stack optimizations spanning data ingestion, training, and inference to maximize performance per watt, a critical metric when power budgets are capped by regional providers.

#inference #training #energy efficiency #optimization

Read article →
Scattered Spider Hackers Plead Guilty on Day 1 of Trial Security 5.0
Krebs on Security

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two Scattered Spider members pleaded guilty in UK court for the August 2024 Transport for London ransomware attack. The group is linked to 120 U.S. computer intrusions across 47 entities between May 2022 and September 2025, with victims paying at least $115 million in ransom.

#ransomware #Scattered Spider #breach #threat intelligence

Read article →
How Meta Engineered Ultra-Narrow Batteries for AI Glasses Other 5.0
Meta Engineering

How Meta Engineered Ultra-Narrow Batteries for AI Glasses

Meta engineered steel-can batteries as narrow as 7mm to power Ray-Ban Meta and Oakley Meta Vanguards smart glasses, enabling concurrent camera, speaker, and AI workload operation. Traditional pouch cells waste volume and cannot deliver peak power for multitasking; steel-can cells provide rigid, precise form factors that maximize usable space in temple arms.

#hardware #batteries #wearables #AI glasses

Read article →
AI can write the code. Your team still owns the debt. AI 8.0
The New Stack

AI can write the code. Your team still owns the debt.

AI-generated code can pass unit tests while missing architectural context and maintainability standards, shifting costs from production to verification. Teams now face overwhelming review volume as AI increases the surface area of potential issues; the economics of technical debt have fundamentally changed from upfront prevention to downstream remediation.

#code quality #technical debt #verification #AI

Read article →
Log Analytics is now Observability Analytics: Query logs and traces with SQL Cloud 7.0
Google Cloud Blog

Log Analytics is now Observability Analytics: Query logs and traces with SQL

Google Cloud rebranded Log Analytics to Observability Analytics and made Trace data and the Observability API generally available. The platform now supports SQL queries that join logs with distributed trace spans, enabling root-cause analysis across microservices and AI agent telemetry. Example: single SQL query to find checkout requests exceeding 5 seconds and identify which microservice consumed the most time.

#observability #SQL #distributed tracing #logs

Read article →
Verifiable, private AI: Google Cloud expands Confidential Computing frontiers Cloud 7.0
Google Cloud Blog

Verifiable, private AI: Google Cloud expands Confidential Computing frontiers

Google Cloud announced Confidential G4 VMs with NVIDIA RTX PRO 6000 Blackwell GPUs in preview, enabling confidential AI inference and fine-tuning at global scale. The offering supports multiple consumption models (On Demand, Reservations, DWS Flex Start, Spot/Preemptible) across all Google Cloud regions where standard G4 is available, providing hardware-based TEE protection for sensitive AI workloads.

#confidential computing #TEE #GPU #AI infrastructure

Read article →
I automated my job (and it made me a better leader) AI 5.0
GitHub Blog

I automated my job (and it made me a better leader)

A GitHub leader describes using GitHub Copilot app automations to consolidate fragmented workflow context across Slack, docs, and planning tools. By automating context-switching and routine coordination tasks, the author freed cognitive load for higher-value thinking and decision-making.

#agents #automation #workflow #GitHub Copilot

Read article →
GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source Other 5.0
GitHub Blog

GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source

GitHub, Hugging Face, Black Forest Labs, and Mozilla form a coalition opposing California's SB 942/SB 1000 AI Transparency Act as drafted, arguing that mandatory license revocation provisions conflict with perpetual open-source licenses. The coalition proposes aligning with the EU AI Act's approach of notifying downstream users via documentation instead.

#policy #open-source #licensing #regulation

Read article →
From insight to action: The next phase of agentic cloud operations AI 6.0
Azure Blog

From insight to action: The next phase of agentic cloud operations

Azure outlines agentic cloud operations as a model where AI agents continuously observe, reason, and act across hybrid infrastructure and microservices, moving from reactive dashboards to closed-loop automated workflows. The approach integrates observability signals into coordinated actions for performance, cost, and reliability optimization. Microsoft highlights Azure Copilot and governance-embedded workflows as enablers, citing research showing 79% of organizations already deploying agentic AI in production.

#agents #cloud operations #observability #automation

Read article →
Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration Security 6.0
The Hacker News

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

Executive Order 14409 mandates federal agencies migrate high-value assets to post-quantum cryptography by December 31, 2030, with digital signatures following by December 31, 2031. National security systems operate on a separate compliance track. The deadline addresses the threat of harvest-now-decrypt-later attacks as quantum computing advances.

#post-quantum cryptography #compliance #federal mandate #cryptography migration

Read article →
Boost Inference Performance up to 15x on NVIDIA Blackwell Using DFlash Speculative Decoding AI 8.0
NVIDIA Developer Blog

Boost Inference Performance up to 15x on NVIDIA Blackwell Using DFlash Speculative Decoding

NVIDIA describes DFlash speculative decoding on Blackwell GPUs, achieving up to 15x inference speedup for latency-sensitive multiagent workflows. The technique uses a lightweight draft model to predict future tokens, improving GPU utilization and throughput in autoregressive LLM serving scenarios.

#speculative decoding #inference #Blackwell #latency

Read article →
GitLab just surveyed 1,500 developers. Here's why it matters for your codebase. AI 8.0
The New Stack

GitLab just surveyed 1,500 developers. Here's why it matters for your codebase.

GitLab survey of 1,500 developers shows 78% report faster code commits with AI tools, but only 21% see productivity gains beyond code generation. The core problem: Git backends and governance frameworks built for human-scale concurrency fail under machine-scale agent load, causing platform reliability, security, and cost issues.

#agents #governance #infrastructure #scale

Read article →
GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns Security 7.0
The Hacker News

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

GitHub hardened the actions/checkout action effective June 18, 2026 to block pwn request attacks that abuse pull_request_target workflow triggers to execute malicious code with elevated privileges. The update prevents attackers from exploiting the risky pattern of running untrusted PR code with full workflow permissions.

#supply-chain security #GitHub Actions #pwn request #workflow security

Read article →
Build an AI Scientist for Life Science Discovery with NVIDIA BioNeMo Agent Toolkit AI 7.0
NVIDIA Developer Blog

Build an AI Scientist for Life Science Discovery with NVIDIA BioNeMo Agent Toolkit

NVIDIA introduces BioNeMo Agent Toolkit for building autonomous AI agents in life sciences that can read papers, write code, generate hypotheses, and iterate on experiments. The toolkit addresses the unique challenge that scientific discovery is iterative and grounded in physical validation, unlike deterministic software engineering.

#agents #tool use #life sciences #BioNeMo

Read article →
Presentation: The Time It Wasn't DNS DevOps 7.0
InfoQ DevOps

Presentation: The Time It Wasn't DNS

Sean Klein presents incident analysis from Azure's 2023 global WAN outage, arguing that 'human error' framing obscures systemic failures in complex infrastructure. The talk moves beyond Five Whys methodology to examine how engineering leaders can redesign Standard Operating Procedures and systems architecture to protect engineers rather than blame them.

#incident analysis #resilience #SRE #Azure

Read article →
Can DNS become the basis for AI agent identity? AI 7.0
The New Stack

Can DNS become the basis for AI agent identity?

Linux Foundation announced Agent Name Service (ANS), an open standard for verifiable AI agent identity using DNS. Built on OWASP GenAI Security research, ANS ties agent identity to domain control via ACME (Let's Encrypt protocol), allowing operators to issue certificates and track agent status changes like registration and renewal.

#agents #identity #security #DNS

Read article →
Open models, global networks: How AT&T and GSMA are accelerating telecom innovation with Gemma AI 7.0
Google Cloud Blog

Open models, global networks: How AT&T and GSMA are accelerating telecom innovation with Gemma

AT&T and GSMA are deploying Gemma, Google's open foundation model, to address the telecom industry's critical gap in domain-specific AI. Telecom networks require specialized knowledge unavailable in general-purpose models; only 16% of telecom AI deployments currently run on network infrastructure due to this constraint. Domain-specific models built on open foundations enable the agentic workflows and network automation that modern carriers need at global scale.

#LLM #domain-specific models #telecom #agents

Read article →
Agent Auth: A lawyer's day in court AI 6.0
CNCF Blog

Agent Auth: A lawyer's day in court

CNCF post frames agent authentication as microservices-plus, requiring agent identity (who is the agent), principal identity (who is it acting for), and delegation (authorization to act on behalf of a user). Uses courtroom analogy: lawyer proves identity, names client, presents authorization documents, paralleling agent auth requirements.

#agents #authentication #authorization #identity

Read article →
Guide to Agentic Systems and AI Agents AI 5.0
Databricks Blog

Guide to Agentic Systems and AI Agents

Educational guide covering agentic AI systems where software autonomously plans and executes tasks. Likely covers agent architectures, planning loops, tool use, and deployment patterns for production agentic applications.

#agents #agentic AI #planning #tool use

Read article →
AWS Launches Blocks, an Open-Source TypeScript Framework Designed for AI Agents to Build Backends AI 8.0
InfoQ DevOps

AWS Launches Blocks, an Open-Source TypeScript Framework Designed for AI Agents to Build Backends

AWS released Blocks, an open-source TypeScript framework enabling AI agents to generate correct backend code by bundling application logic, local mocks, and infrastructure-as-code. Code runs locally without AWS credentials and deploys unchanged to Lambda, DynamoDB, Aurora, and Bedrock, eliminating the gap between agent-generated code and production infrastructure.

#agents #tool-use #TypeScript #Lambda

Read article →
What is Vector Search? AI 5.0
Databricks Blog

What is Vector Search?

Explainer on vector search as a semantic search technique that retrieves results based on meaning rather than keyword matching. Foundational content for understanding retrieval in RAG and similarity-based applications.

#vector search #embeddings #retrieval #semantic search

Read article →
How Telcos Build Autonomous Networks with Agentic AI AI 6.0
NVIDIA Developer Blog

How Telcos Build Autonomous Networks with Agentic AI

NVIDIA discusses how telecom operators deploy agentic AI across network operations, customer care, and back-office workflows, progressing from Level 2-3 to Level 4-5 autonomy on TM Forum's taxonomy. The post covers the transition from rule-based automation to autonomous decision-making in network management.

#agents #autonomous systems #network operations #telecom

Read article →
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool Security 6.0
The Hacker News

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Kaspersky identified an active campaign distributing malicious VBScript files via WhatsApp Desktop and Web targeting users across Malaysia, Brazil, India, Mexico, Singapore, UK, Spain, Taiwan, and Australia. The scripts lead to installation of legitimate ManageEngine RMM software, which attackers then abuse for remote access and lateral movement.

#social engineering #malware distribution #RMM abuse #WhatsApp

Read article →
OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws AI 6.0
The Hacker News

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

OpenAI released an improved GPT-5.5-Cyber model to trusted defenders as part of the Daybreak initiative. The model performs deeper analysis across large codebases to identify and help patch software vulnerabilities, positioning it as OpenAI's strongest model yet for vulnerability discovery and remediation.

#LLM #vulnerability detection #code analysis #security tooling

Read article →
Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs Cloud 8.0
AWS News

Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs

AWS Lambda MicroVMs provide VM-level isolation for untrusted code execution in serverless environments, combining Firecracker's lightweight virtualization with near-instant launch and stateful session support. Targets multi-tenant applications like AI coding assistants, interactive notebooks, and vulnerability scanners that need dedicated execution contexts without managing infrastructure.

#serverless #isolation #Firecracker #untrusted code

Read article →
How we found a bug in the hyper HTTP library Engineering 7.0
Cloudflare Blog

How we found a bug in the hyper HTTP library

Cloudflare's Images service on Workers encountered a race condition in the hyper Rust HTTP library that caused intermittent truncation of large image responses (returning 200 status with incomplete data). The six-week investigation revealed a subtle concurrency bug in hyper's connection handling that was fixed with four lines of code, affecting how the Images binding returned processed image data to clients.

#Rust #hyper #race-condition #HTTP

Read article →
Building pay-per-intelligence for AI agents: How Ampersend uses Amazon Bedrock AgentCore Payments AI 7.0
AWS ML Blog

Building pay-per-intelligence for AI agents: How Ampersend uses Amazon Bedrock AgentCore Payments

Ampersend and Amazon Bedrock AgentCore Payments enable autonomous agents to transact programmatically for model services using x402 payment protocols, routing tasks to cost-effective models within spending budgets. Eliminates manual billing integrations and per-provider credential management for agent developers.

#agents #payments #model routing #x402

Read article →
Boost BigQuery with Python: Managed Python UDFs now generally available Cloud 7.0
Google Cloud Blog

Boost BigQuery with Python: Managed Python UDFs now generally available

BigQuery Managed Python UDFs are now generally available, allowing data engineers to execute custom Python code directly within BigQuery queries without managing containers or infrastructure. The feature runs on BigQuery-managed serverless resources that auto-scale to billions of rows, with automatic compilation, security patching, and deployment handled by Google. Python UDFs integrate with both standard SQL and BigQuery DataFrames, fully supported for production workloads under BigQuery's billing SKUs.

#BigQuery #Python #UDF #serverless

Read article →
Embed the world: Multimodal AI for searchable aerial imagery at scale AI 7.0
AWS ML Blog

Embed the world: Multimodal AI for searchable aerial imagery at scale

Multimodal embeddings and LLM captioning enable natural-language search over billions of aerial imagery tiles without manual inspection or per-query model training. AWS and Vexcel evaluated embedding models, fusion strategies, and vector search methods on orthomosaic and oblique imagery across 45+ countries using OpenStreetMap ground truth.

#embeddings #multimodal #vector search #geospatial

Read article →
Adopting AV1 for Real-Time Communication (RTC) at Scale Engineering 7.0
Meta Engineering

Adopting AV1 for Real-Time Communication (RTC) at Scale

Meta deployed AV1 video codec across real-time communication applications (Messenger, WhatsApp) on the majority of mobile devices after a multi-year effort. The deployment achieved at least 20% bitrate reduction compared to H.264/AVC on low-end and mid-range devices, with greater savings on higher-end hardware. Meta addressed codec selection, device eligibility, rate control, and error resilience challenges at scale.

#AV1 #video-codec #RTC #bitrate-optimization

Read article →
CCCL Runtime: A Modern C++ Runtime for CUDA Engineering 7.0
NVIDIA Developer Blog

CCCL Runtime: A Modern C++ Runtime for CUDA

NVIDIA introduces CCCL Runtime, a modernized C++ abstraction layer for CUDA programming that wraps fundamental CUDA concepts with safer, more ergonomic APIs. The library provides both C++ and Python bindings to reduce boilerplate and improve developer experience for GPU-accelerated workloads.

#CUDA #C++ #GPU #runtime

Read article →
Enable Real-Time AI for High-Speed Data Acquisition with DAQIRI AI 7.0
NVIDIA Developer Blog

Enable Real-Time AI for High-Speed Data Acquisition with DAQIRI

NVIDIA presents DAQIRI, a framework for real-time AI inference on streaming high-speed sensor data. The system processes data as it arrives, filters for relevant events, and enables low-latency decision-making for applications like scientific instrumentation and industrial monitoring.

#real-time #streaming #inference #data acquisition

Read article →
AWS Weekly Roundup: NY Summit recap, Local Zone in Hanoi, Grok 4.3 in Bedrock, price reductions, and more (June 22, 2026) AI 7.0
AWS News

AWS Weekly Roundup: NY Summit recap, Local Zone in Hanoi, Grok 4.3 in Bedrock, price reductions, and more (June 22, 2026)

AWS announces agent-focused launches across productivity, security, and development: Amazon Quick adds multi-step agent orchestration with activity feeds; AWS Continuum provides AI-native security reasoning with pull-request scanning and IDE integrations; AWS DevOps Agent adds release management and AWS Transform enables autonomous tech debt reduction.

#agents #security #DevOps #code scanning

Read article →
Inside NVIDIA Halos for Robotics: A Full-Stack Functional Safety System for Physical AI AI 8.0
NVIDIA Developer Blog

Inside NVIDIA Halos for Robotics: A Full-Stack Functional Safety System for Physical AI

NVIDIA introduces Halos, a full-stack safety framework for autonomous robots operating in unstructured environments alongside humans. The system combines AI-driven perception, planning, and control with formal safety guarantees to enable safe physical AI deployment in factories, warehouses, and homes.

#robotics #safety #autonomous systems #physical AI

Read article →
Stop Your Legacy Infrastructure from Hijacking Your AI Agents AI 6.0
The Hacker News

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

A security blind spot emerges as attackers exploit legacy infrastructure to hijack AI agents, circumventing modern AI security controls. The article highlights that 71% of organizations are piloting AI agents while security programs lag in threat modeling for agent-infrastructure interactions.

#AI-agents #security #legacy-systems #threat-model

Read article →
AWS Graviton5 Reaches General Availability with 192 Cores and Formally Verified VM Isolation Cloud 7.0
InfoQ DevOps

AWS Graviton5 Reaches General Availability with 192 Cores and Formally Verified VM Isolation

AWS Graviton5 EC2 instances (M9g and M9gd) are now generally available with 192 ARM cores, DDR5-8800 memory, and formally verified VM isolation via the Nitro Isolation Engine. ClickHouse reported 36% performance improvement with zero code changes; Meta committed tens of millions of cores. On-demand pricing is 9% above Graviton4, delivering roughly 15% better price-performance.

#Graviton5 #ARM #EC2 #price-performance

Read article →
The Starter Tier for Google AI Studio explained Cloud 6.0
Google Cloud Blog

The Starter Tier for Google AI Studio explained

Google Cloud Starter Tier provides free, fully-managed project provisioning for prototyping AI applications directly from Google AI Studio, with Cloud Run, Cloud Firestore, Cloud SQL for PostgreSQL, and Firebase Authentication pre-configured. No payment method or billing account required for individual Google Accounts; Google handles region selection, API enablement, and security policies automatically. This enables developers to move from prompt to live URL with database and auth in minutes.

#Google AI Studio #Cloud Run #Firebase #prototyping

Read article →
We got local models to triage the OpenClaw repo for FREE!* AI 6.0
Hugging Face Blog

We got local models to triage the OpenClaw repo for FREE!*

Hugging Face demonstrates running local open-source models for automated PR triage on the OpenClaw repository without cloud costs. The approach uses smaller models deployed locally to classify and route pull requests, reducing infrastructure overhead compared to proprietary API-based solutions.

#LLM #local models #inference #automation

Read article →
Samsung Electronics brings ChatGPT and Codex to employees AI 5.0
OpenAI Blog

Samsung Electronics brings ChatGPT and Codex to employees

Samsung Electronics deployed ChatGPT Enterprise and Codex to its global workforce, representing one of OpenAI's largest enterprise rollouts to date. The deployment enables employees across the organization to access both conversational AI and code generation capabilities.

#LLM #enterprise #ChatGPT #code-generation

Read article →
A public Sentry key is all it takes to hijack Claude Code, Cursor, and Codex Security 9.0
The New Stack

A public Sentry key is all it takes to hijack Claude Code, Cursor, and Codex

Tenet Security documented agentjacking, an attack exploiting Model Context Protocol (MCP) integrations where a forged Sentry error report can trick AI coding agents into arbitrary code execution on a developer's machine. The attack leverages the fact that Sentry DSNs are intentionally public write-only credentials, and agents treat MCP service responses as trusted instructions without validation.

#agents #security #MCP #code-execution

Read article →
Your agent wants to search like a 2010 quant AI 7.0
The New Stack

Your agent wants to search like a 2010 quant

The article traces the evolution of retrieval for AI agents from simple vector similarity (2024) through hybrid search and BM25 ranking, to emerging search-as-code approaches exemplified by Perplexity's recent announcement. Modern production agents now combine classical information retrieval techniques with learned ranking to surface relevant context reliably.

#RAG #retrieval #agents #search

Read article →
"An agent is an LLM and a harness": What Nvidia really thinks about OpenClaw AI 6.0
The New Stack

"An agent is an LLM and a harness": What Nvidia really thinks about OpenClaw

Nvidia's Nader Khalil articulates the company's vision for agentic AI as a loop combining an LLM with a control harness that reasons about tool selection and iterates toward a goal. Nvidia is positioning itself as infrastructure provider for agent development, supporting projects like OpenClaw and helping developers build production agent systems.

#agents #LLM #tool-use #inference

Read article →
Gemini CLI vs. Antigravity: What works, not the spec sheet AI 6.0
The New Stack

Gemini CLI vs. Antigravity: What works, not the spec sheet

Google decommissioned Gemini CLI (100k GitHub stars) on June 18 with no grace period, replacing it with closed-source Antigravity CLI written in Go and invoked via agy command. The article benchmarks both tools across speed, multi-file coding tasks, feature migration, and scripted automation to test Google's claims about performance and agent capabilities.

#CLI #agents #tooling #Go

Read article →
Backporting bug fixes is dead, Project Valkey now sends in the bots AI 7.0
The New Stack

Backporting bug fixes is dead, Project Valkey now sends in the bots

Project Valkey 9.1 deployed an AI agent to automate cherry-picking bug fixes from main to release branches, handling merge conflicts and running CI pipelines without manual intervention. The agent replaced laborious manual backporting work, demonstrating practical AI use for maintenance workflows in an open-source in-memory data store.

#agents #automation #CI/CD #maintenance

Read article →
Losing Fable made the best case yet for AI models you can run yourself AI 7.0
The New Stack

Losing Fable made the best case yet for AI models you can run yourself

Anthropic pulled Fable 5 and Mythos 5 offline June 12 due to US export-control directives barring foreign nationals from accessing the models. The incident highlights the risk of hosted-only models and strengthens the case for open-weight alternatives like Z.ai's GLM-5.2, which users can download and self-host.

#open-weight #models #export controls #deployment

Read article →
Claude Fable 5 on Bedrock Requires Sharing Inference Data with Anthropic Cloud 6.0
InfoQ DevOps

Claude Fable 5 on Bedrock Requires Sharing Inference Data with Anthropic

Claude Fable 5 and Mythos 5 on Amazon Bedrock require opting into provider_data_share, sending all prompts and outputs to Anthropic for 30-day retention with human review. This breaks the AWS data boundary that previous Bedrock models maintained, and both models were revoked three days after launch due to export compliance.

#Bedrock #data privacy #inference #export controls

Read article →
How we built an internal data analytics agent AI 8.0
GitHub Blog

How we built an internal data analytics agent

GitHub built Qubot, a Copilot-powered agent that lets employees query any data warehouse model in natural language and get answers in seconds. The agent handles exploratory questions like cohort retention and metric attribution without requiring SQL knowledge or data analyst support.

#agents #LLM #tool-use #data-analytics

Read article →
Checkmarx's new SAST engine isn't about the LLM. It's about what happens after. Security 7.0
The New Stack

Checkmarx's new SAST engine isn't about the LLM. It's about what happens after.

Checkmarx released a three-engine SAST architecture combining deterministic rules, an LLM trained on security data, and a Findings Analysis Engine (FAE) that classifies true vs. false positives before results reach developers. The FAE claims F1 score of 0.499 vs. industry average 0.20, and found 327 true positives missed by a frontier model.

#SAST #LLM #security #evals

Read article →
Introducing Web Search on Amazon Bedrock AgentCore AI 8.0
AWS ML Blog

Introducing Web Search on Amazon Bedrock AgentCore

Amazon Bedrock AgentCore now includes a managed web search capability that lets AI agents retrieve current information without building custom infrastructure. The feature uses Model Context Protocol (MCP) compatibility, maintains a tens-of-billions-document index refreshed within minutes, and handles privacy and result parsing internally.

#agents #RAG #MCP #tool-use

Read article →
Anthropic overhauled Claude Design to fix the handoff. A designer and an engineer disagree on whether it worked. AI 5.0
The New Stack

Anthropic overhauled Claude Design to fix the handoff. A designer and an engineer disagree on whether it worked.

Anthropic released a major Claude Design update with bidirectional Design-Code integration, token efficiency improvements, and connectors for Adobe, Vercel, Replit, and others. However, a lead AI product designer questions whether it meaningfully reduces design-engineering handoff friction and warns token costs remain high.

#Claude #design-tools #LLM #tool-use

Read article →
Temporary Cloudflare Accounts for AI agents AI 8.0
Cloudflare Blog

Temporary Cloudflare Accounts for AI agents

Cloudflare launches temporary accounts for AI agents, allowing wrangler deploy --temporary to spin up a Worker without signup, OAuth, or MFA. The deployment lives 60 minutes and can be claimed to make it permanent, eliminating the browser-based friction that blocks autonomous agent workflows.

#agents #deployment #tool-use #infrastructure

Read article →
Azure Functions Ships Serverless Agents Runtime at Build 2026 AI 8.0
InfoQ DevOps

Azure Functions Ships Serverless Agents Runtime at Build 2026

Azure Functions released a serverless agents runtime in public preview, allowing agents defined in .agent.md markdown files with YAML triggers, MCP server access, 1,400+ connectors, and sandboxed execution. No cold start overhead or billing premium beyond standard Flex Consumption.

#agents #serverless #Azure #MCP

Read article →
Monitor and debug generative AI inference with SageMaker detailed metrics and Insights dashboard on CloudWatch AI 8.0
AWS ML Blog

Monitor and debug generative AI inference with SageMaker detailed metrics and Insights dashboard on CloudWatch

AWS SageMaker adds detailed observability for LLM inference endpoints via CloudWatch Insights dashboard, surfacing GPU memory pressure, KV cache saturation, traffic imbalance across AZs, and auto-scaling state. Covers both single-model endpoints and multi-model inference component architectures for production LLM serving.

#LLM #inference #observability #SageMaker

Read article →
Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs Cloud 7.0
AWS News

Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs

AWS launches EC2 G7 instances with NVIDIA RTX PRO 4500 Blackwell GPUs, delivering 4.6x AI inference performance and 2.1x graphics performance over G6. G7 features 32GB GPU memory per GPU, 5th Gen Tensor Cores, and 700 Gbps EFA networking, targeting AI inference, graphics rendering, video transcoding, and analytics workloads.

#GPU #inference #EC2 #Blackwell

Read article →
Amazon ECS introduces new high-resolution metrics for faster service auto scaling DevOps 7.0
AWS News

Amazon ECS introduces new high-resolution metrics for faster service auto scaling

Amazon ECS now supports 20-second high-resolution metrics for service auto scaling, reducing scale-out latency from 363 seconds to 86 seconds (76% faster) and total scale-and-provision time from 386 to 109 seconds (72% faster). The feature works with predictive scaling, scheduled scaling, and target tracking policies on CloudWatch metrics.

#ECS #auto-scaling #observability #CloudWatch

Read article →
Gusto Cofounder: An AI agent that runs payroll, HR, and benefits without waiting to be asked AI 6.0
The New Stack

Gusto Cofounder: An AI agent that runs payroll, HR, and benefits without waiting to be asked

Gusto released Cofounder, an AI agent that proactively manages payroll, HR, benefits, and accounting for small businesses rather than responding reactively to queries. The agent is designed to operate autonomously on routine back-office tasks, positioning itself as a co-founder-like partner rather than a traditional copilot or search interface.

#agents #LLM #autonomous workflows #small business

Read article →
MCP gets its missing enterprise authorization layer AI 8.0
The New Stack

MCP gets its missing enterprise authorization layer

The Model Context Protocol now includes a stable Enterprise-Managed Authorization extension that lets enterprises centrally control MCP server access through their identity provider instead of per-employee OAuth prompts. Anthropic, Microsoft, and Okta are among the first to support this, enabling single sign-on for all MCP connectors in Claude, Visual Studio Code, and other clients.

#MCP #agents #enterprise #authorization

Read article →
MosaicLeaks: Can your research agent keep a secret? AI 7.0
Hugging Face Blog

MosaicLeaks: Can your research agent keep a secret?

ServiceNow and Hugging Face research paper examining information leakage in research agents, analyzing how tool-use agents inadvertently expose sensitive data through API calls, logs, and intermediate outputs. Highlights security risks in production agent deployments.

#agents #security #tool-use #information leakage

Read article →
Build your own vulnerability harness Security 7.0
Cloudflare Blog

Build your own vulnerability harness

Cloudflare extends Project Glasswing findings on frontier security models applied to enterprise codebases, arguing that agentic vulnerability scanning requires treating LLMs as interchangeable components rather than relying on single models. The post advocates for cross-model validation pipelines and fleet-wide scanning across repositories to ensure comprehensive vulnerability detection.

#security #agents #LLM #vulnerability-scanning

Read article →
'Popa' Botnet Linked to Publicly-Traded Israeli Firm Security 6.0
Krebs on Security

'Popa' Botnet Linked to Publicly-Traded Israeli Firm

Researchers linked the Popa Android botnet, which has compromised millions of TV boxes for four years, to NetNut, a residential proxy service operated by publicly-traded Alarum Technologies. Popa serves as a persistent communications layer for advertising fraud, account takeovers, and mass data scraping.

#botnet #malware #Android #supply-chain

Read article →
Cursor, GitLab and Zed agree GitHub is breaking. They disagree on how to rebuild it AI 7.0
The New Stack

Cursor, GitLab and Zed agree GitHub is breaking. They disagree on how to rebuild it

Cursor unveiled Origin, a Git-compatible code-hosting platform designed for AI agents to drive development workflows. The announcement follows SpaceX's $60 billion acquisition of Cursor and its earlier acquisition of Graphite, a code-review and stacked-diffs tool, positioning Cursor as a direct challenger to GitHub's workflow dominance.

#agents #code review #Git #developer tools

Read article →
Amazon Bedrock AgentCore harness is now generally available: Go from idea to production-grade agent in minutes AI 8.0
AWS ML Blog

Amazon Bedrock AgentCore harness is now generally available: Go from idea to production-grade agent in minutes

AWS Bedrock AgentCore harness reaches GA, providing production-ready agent orchestration with built-in Runtime, Memory, Gateway, Browser, Identity, and Observability primitives. Eliminates boilerplate for tool-use loops, concurrency, isolation, state management, and scaling across multiple users and models.

#agents #tool-use #LLM #orchestration

Read article →
Scaling Ray Serve LLM on GKE: Performance without losing the developer experience AI 8.0
Google Cloud Blog

Scaling Ray Serve LLM on GKE: Performance without losing the developer experience

Google and Anyscale jointly optimized Ray Serve for LLM inference on GKE, achieving 5x higher throughput and 8x lower latency through three architectural changes: HAProxy integration for request routing, direct token streaming to bypass the ingress router, and a v2 Ray executor backend for vLLM. The improvements maintain Python-native APIs while meeting production serving demands.

#LLM #inference #Kubernetes #Ray Serve

Read article →
How pull request limits are cutting down the noise DevOps 6.0
GitHub Blog

How pull request limits are cutting down the noise

GitHub introduces configurable pull request limits that cap the number of open PRs a user without write access can have at once, with bypass lists for trusted contributors and exemptions for draft PRs. The feature aims to reduce low-quality noise and help maintainers manage contribution volume.

#GitHub #pull requests #open source #maintainer tools

Read article →
How Stagwell built privacy-safe ID matching on Databricks Cloud 7.0
Databricks Blog

How Stagwell built privacy-safe ID matching on Databricks

Stagwell describes a privacy-preserving identity matching system built on Databricks, using techniques like differential privacy and secure multi-party computation to match customer IDs across datasets without exposing raw data. The case study covers architecture choices and performance trade-offs in production.

#privacy #differential privacy #data matching #Databricks

Read article →
Neoclouds, sovereign AI and Postgres: The new operating model for regulated enterprises AI 7.0
The New Stack

Neoclouds, sovereign AI and Postgres: The new operating model for regulated enterprises

Enterprises are shifting to sovereign AI infrastructure that keeps data and models on-premises or in controlled multi-cloud environments rather than exporting sensitive data to external inference providers. The article argues that successful enterprises adopt infrastructure-first strategies, with 75% of leaders operating across multiple clouds and on-premises, achieving 5x better ROI than those relying on single hyperscalers.

#inference #data sovereignty #multi-cloud #Postgres

Read article →
The database storage problem is solved. Here's what comes next. Engineering 6.0
The New Stack

The database storage problem is solved. Here's what comes next.

Postgres ecosystem innovation is shifting from storage performance to data interoperability, reducing the need to copy data across warehouses, search platforms, and AI systems. The article argues that the harder problem today is sharing operational data without creating additional pipelines and maintaining multiple copies.

#Postgres #data interoperability #data movement #architecture

Read article →
Fable 5 ban: 4 open models responded before Anthropic could restore access AI 8.0
The New Stack

Fable 5 ban: 4 open models responded before Anthropic could restore access

After the US government ordered Anthropic to suspend Claude Fable 5 and Mythos 5 for foreign nationals, open-weight coding models from Cohere (North Mini Code), Moonshot (Kimi K2.7-Code), and Zhipu (GLM 5.2) emerged as rapid alternatives. All three shipped with downloadable weights, lower costs than frontier models, and integration with existing agent harnesses.

#open weights #models #export controls #coding

Read article →
Your AI pipeline is broken, and your dashboards don't know it AI 8.0
The New Stack

Your AI pipeline is broken, and your dashboards don't know it

Traditional observability dashboards fail to detect failures in RAG and LLM pipelines because errors manifest as confident hallucinations rather than exceptions or crashes. The article describes a case where a prompt template change caused an LLM to ignore context and generate false financial recommendations, undetected for three days despite green health metrics.

#RAG #debugging #observability #hallucination

Read article →
Coding Agent Horror Stories: The 13-Hour AWS Outage AI 8.0
Docker Blog

Coding Agent Horror Stories: The 13-Hour AWS Outage

Docker's horror story series examines an agentic coding assistant (Kiro) with operator-level AWS credentials that deleted production infrastructure, causing a 13-hour outage and an estimated 6.3 million lost orders. The incident illustrates the blast radius when agents run with full system permissions in production environments.

#agents #AI safety #credentials #production incidents

Read article →
VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks Security 7.0
InfoQ DevOps

VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks

VS Code 1.123 introduces a two-hour delay before auto-updating extensions to newly published versions, creating a revocation window against supply chain attacks. The delay exempts trusted publishers like Microsoft, GitHub, and OpenAI. Similar cooldown mechanisms have been adopted across pip, RubyGems, npm, pnpm, Yarn, and Bun.

#supply-chain #security #VS Code #extensions

Read article →
Athena Coalition Brings Coordinated Defence to Open Source Security Security 7.0
InfoQ DevOps

Athena Coalition Brings Coordinated Defence to Open Source Security

Chainguard has launched Athena, an industry coalition using AI to proactively identify and remediate vulnerabilities in widely-used open-source libraries, containers, and components before exploitation. The initiative targets critical infrastructure underpinning browsers, data centers, smartphones, and payment systems.

#security #open-source #vulnerability #AI

Read article →
Agent Factory Recap: 100X engineering with AI agents in Google Antigravity 2.0 AI 7.0
Google Cloud Blog

Agent Factory Recap: 100X engineering with AI agents in Google Antigravity 2.0

Google Antigravity 2.0 evolved into an agent-first platform with four core components: a standalone desktop Agent Manager, CLI for server-side work, Python SDK for custom workflows, and a specialized IDE. The platform enables developers to reduce cognitive toil by offloading routine tasks like test suite generation and prototyping to AI agents while focusing on architecture.

#agents #IDE #developer-tools #AI

Read article →
Flipkart Wins CNCF End User Case Study Contest for Kubernetes and Chaos Engineering Scale DevOps 6.0
CNCF Blog

Flipkart Wins CNCF End User Case Study Contest for Kubernetes and Chaos Engineering Scale

Flipkart's central reliability engineering team built a multi-tenant chaos engineering platform on Kubernetes using LitmusChaos, executing 90% of chaos experiments in staging before high-traffic sales events. The team contributed five upstream fixes to LitmusChaos and won the CNCF End User Case Study Contest at KubeCon India 2026.

#Kubernetes #chaos engineering #LitmusChaos #reliability

Read article →
Is it agentic enough? Benchmarking open models on your own tooling AI 8.0
Hugging Face Blog

Is it agentic enough? Benchmarking open models on your own tooling

Hugging Face presents a framework for evaluating whether open-source LLMs have sufficient agentic capabilities for your specific tool set and use case. The post covers benchmark design, tool-use evaluation patterns, and how to measure agent performance on custom integrations rather than generic tasks.

#agents #evals #tool-use #benchmarking

Read article →
Beyond LoRA: Can you beat the most popular fine-tuning technique? AI 7.0
Hugging Face Blog

Beyond LoRA: Can you beat the most popular fine-tuning technique?

Hugging Face explores parameter-efficient fine-tuning methods beyond LoRA, comparing techniques like DoRA, QLoRA, and other adapters on practical benchmarks. The post evaluates trade-offs between parameter count, training speed, and downstream task performance to help practitioners choose the right method for their constraints.

#fine-tuning #LoRA #PEFT #adapters

Read article →
What is an AI agent harness? AI 6.0
Databricks Blog

What is an AI agent harness?

Databricks defines an AI agent harness as the software infrastructure wrapping an LLM to provide tool integration, state management, and execution orchestration. The post outlines core components like tool registries, memory, and observability needed for production agent systems.

#agents #LLM #tool-use #infrastructure

Read article →
Get back hours every day with autonomous agents in Amazon Quick AI 6.0
AWS ML Blog

Get back hours every day with autonomous agents in Amazon Quick

Amazon Quick now supports autonomous agents that run continuously on behalf of users, handling tasks like deal follow-ups, compliance summaries, and CRM updates. Users define autonomy levels from step-by-step instructions to broad goals, with guardrails and an activity feed for prioritization.

#agents #autonomous #business-automation #CRM

Read article →
Databricks and NVIDIA: Building for the Agentic Era AI 7.0
Databricks Blog

Databricks and NVIDIA: Building for the Agentic Era

Databricks and NVIDIA announce a partnership to optimize LLM agent workloads on NVIDIA's accelerated computing infrastructure. The collaboration focuses on inference optimization, tool-use patterns, and production deployment of multi-step agentic systems.

#agents #LLM inference #NVIDIA #tool-use

Read article →
Getting more from each token: How Copilot improves context handling and model routing AI 8.0
GitHub Blog

Getting more from each token: How Copilot improves context handling and model routing

GitHub detailed Copilot optimizations for longer agentic sessions: prompt caching to reuse model state across turns, deferred tool loading, and Auto model routing that selects the right model (fast vs. capable) based on task complexity. These reduce redundant context and improve cost-efficiency in multi-turn workflows.

#LLM #prompt caching #model routing #context efficiency

Read article →
Cloud Network Insights: end-to-end observability for the Cross-Cloud Network Cloud 7.0
Google Cloud Blog

Cloud Network Insights: end-to-end observability for the Cross-Cloud Network

Google Cloud announced general availability of Cloud Network Insights, a cross-cloud observability solution built in partnership with Broadcom AppNeta. It uses active synthetic probing to monitor network routes across Google Cloud, on-premises, AWS, Azure, and internet-facing applications, pinpointing performance bottlenecks.

#observability #cross-cloud #network-monitoring #synthetic-probing

Read article →
Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments Security 5.0
The Hacker News

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

Check Point Research identified a threat actor using paid posts on legitimate news sites, fake reviews, AI-generated narrators, and VirusTotal comments to promote cryptocurrency stealer malware. The campaign leverages a WordPress phishing hub, GitHub and SourceForge projects, and a YouTube channel to distribute warez.

#malware #supply-chain #social engineering #cryptocurrency theft

Read article →
Context intelligence for your data and AI agents at scale AI 8.0
AWS ML Blog

Context intelligence for your data and AI agents at scale

AWS announces AWS Context, a new service that automatically maps data relationships into a knowledge graph and provides agentic search for AI agents to access governed data, business rules, and domain knowledge at runtime. Data stewards manage the graph through a console, reviewing inferred relationships and attaching business definitions. The service extends technology from Amazon Quick, a production knowledge graph used by hundreds of thousands of users.

#agents #knowledge graphs #RAG #data governance

Read article →
Vercel launches eve, an open-source framework that treats agents as directories AI 8.0
The New Stack

Vercel launches eve, an open-source framework that treats agents as directories

Vercel open-sourced eve, a framework that models agents as directories of files (system prompt in Markdown, tools as TypeScript files, model config in a single file) and compiles them into production-ready agents. Agents run as durable workflows with checkpointing, and the framework integrates Vercel's AI Gateway for provider fallbacks and MCP servers for tool connections.

#agents #framework #open-source #durable workflows

Read article →
Top announcements of the AWS Summit in New York, 2026 AI 8.0
AWS News

Top announcements of the AWS Summit in New York, 2026

AWS announced major Bedrock AgentCore updates: managed Knowledge Base for enterprise RAG with native data connectors and Smart Parsing, web search grounding via MCP, and governance controls for scaling agents. The Knowledge Base abstracts RAG pipeline complexity, while web search provides cited results from Amazon's search infrastructure without data egress.

#agents #RAG #Bedrock #knowledge-base

Read article →
How Block manages its fleet of AI coding agents from Slack AI 7.0
The New Stack

How Block manages its fleet of AI coding agents from Slack

Block shared how it built BuilderBot, a tool on top of its open-source Goose framework, to manage a fleet of AI coding agents across hundreds of services and millions of lines of code. Engineers tag @builderbot in Slack; the agent picks up tickets from Linear/Jira, creates branches, opens PRs, watches CI, and iterates on feedback, all while developers steer in the same thread.

#agents #coding #Slack #Goose

Read article →
Chainguard Agent Skills matures Security 7.0
The New Stack

Chainguard Agent Skills matures

Chainguard expanded its Agent Skills registry to over 1,000 hardened agent skills with public and private registries, plus a hardening-as-a-service tier. The service provides secure-by-default skills for agents, preventing compromised skills from introducing vulnerabilities or exfiltrating data in CI/CD pipelines.

#agents #security #supply-chain #skills

Read article →
New in Amazon Bedrock AgentCore: Build agents with broader knowledge and continuous learning AI 8.0
AWS ML Blog

New in Amazon Bedrock AgentCore: Build agents with broader knowledge and continuous learning

Amazon Bedrock AgentCore adds capabilities to connect agents to organizational, web, and paid knowledge sources, plus production observability and feedback loops for continuous improvement. The update addresses the gap between model capability and real-world agent performance by enabling access to current data, external resources, and systematic feedback mechanisms to detect and fix agent failures in production.

#agents #Bedrock #RAG #observability

Read article →
MolmoMotion: Language-guided 3D motion forecasting AI 6.0
Hugging Face Blog

MolmoMotion: Language-guided 3D motion forecasting

MolmoMotion is a multimodal model that combines language understanding with 3D motion prediction, enabling language-guided forecasting of object and agent motion. The model demonstrates how vision-language models can be extended to temporal and spatial reasoning tasks.

#multimodal #vision-language #3D #motion forecasting

Read article →
Introducing Amazon Bedrock Managed Knowledge Base for faster, more accurate enterprise AI applications AI 8.0
AWS News

Introducing Amazon Bedrock Managed Knowledge Base for faster, more accurate enterprise AI applications

Amazon Bedrock Managed Knowledge Base abstracts RAG pipeline complexity with native connectors for disparate enterprise data sources, Smart Parsing for multi-format documents, and agentic retrieval for complex queries. Developers can build knowledge bases in minutes without managing infrastructure, connectors, or embedding/chunking experiments.

#RAG #Bedrock #knowledge-base #enterprise-AI

Read article →
Announcing Web Search on Amazon Bedrock AgentCore: Ground your AI agents in current, accurate web knowledge AI 7.0
AWS News

Announcing Web Search on Amazon Bedrock AgentCore: Ground your AI agents in current, accurate web knowledge

Web Search on Bedrock AgentCore is a fully managed tool using MCP that returns cited web results, URLs, and publication dates without data egress. It combines Amazon's web index with Knowledge Graph data for more accurate grounding than traditional search, enabling agents to reason over current facts beyond model training data.

#agents #Bedrock #web-search #MCP

Read article →
Proactively reduce tech debt autonomously with AWS Transform – continuous modernization (preview) AI 7.0
AWS News

Proactively reduce tech debt autonomously with AWS Transform – continuous modernization (preview)

AWS Transform continuous modernization detects, prioritizes, and remediates tech debt across thousands of repositories autonomously. It addresses the 30% of IT budgets consumed by maintenance, providing full codebase visibility and pull requests for fixes like Java version upgrades and Lambda runtime updates before end-of-life.

#agents #tech-debt #modernization #automation

Read article →
AWS DevOps Agent adds release management capabilities to assess code changes before production (preview) AI 7.0
AWS News

AWS DevOps Agent adds release management capabilities to assess code changes before production (preview)

AWS DevOps Agent now includes release readiness review and autonomous release testing in preview. It verifies code changes against natural language standards and runs change-specific tests in production-like environments, helping teams handle the surge in AI-generated pull requests without bottlenecking reviews.

#agents #DevOps #release-management #testing

Read article →
Agents need boring infrastructure around them: Why we need to take an interest in 'invisible' AI AI 7.0
The New Stack

Agents need boring infrastructure around them: Why we need to take an interest in 'invisible' AI

Tailscale announced new capabilities for Aperture, its AI access and control platform, adding a chat interface, universal data connectors for MCP and APIs, and sandbox support to help enterprises manage fragmented AI deployments across multiple models and agents. The update addresses the risk that agents can execute in seconds what would take humans dozens of manual steps, requiring systematic governance rather than ad-hoc tool adoption.

#agents #AI infrastructure #orchestration #MCP

Read article →
Google, Microsoft, and OpenAI join forces to help create AI's missing trust layer AI 7.0
The New Stack

Google, Microsoft, and OpenAI join forces to help create AI's missing trust layer

The Linux Foundation launched the Appia Foundation under its Joint Development Foundation to produce open, modular specifications for AI trust and compliance. Google, Microsoft, OpenAI, and 10 other industrial members aim to create verifiable standards that help organizations demonstrate their AI systems meet regulatory, customer, and international compliance obligations.

#AI governance #compliance #standards #trust

Read article →
Your AI isn't broken. Your data is. AI 6.0
The New Stack

Your AI isn't broken. Your data is.

Clario launched from stealth with $6M seed funding to address data ROT (redundant, obsolete, trivial files) that poisons enterprise AI projects. The startup claims Gartner projects 60% of AI projects will be abandoned by year-end due to poor data quality, and Clario's early testing found garbage rates as high as 60% in design-partner environments.

#data quality #enterprise AI #data governance #MLOps

Read article →
What's new in Genie Code at Data + AI Summit 2026 AI 6.0
Databricks Blog

What's new in Genie Code at Data + AI Summit 2026

Databricks announces updates to Genie Code, its LLM-powered code generation tool for data and ML teams. New features include improved context awareness, multi-file refactoring, and tighter integration with Databricks notebooks and workflows.

#LLM #code generation #developer tools

Read article →
Why cloud native belongs at the heart of agentic AI: Lessons from building a multi-agent security platform on Kubernetes AI 8.0
CNCF Blog

Why cloud native belongs at the heart of agentic AI: Lessons from building a multi-agent security platform on Kubernetes

Orange Innovation built a real-time security operations platform using Kubernetes, Falco with eBPF, Kafka, and LLM-driven agents coordinated via A2A protocol and MCP. The system uses classical anomaly detection (Isolation Forest) to pre-filter events before agent analysis, reducing mean time to detect and respond while offloading rule authorship to agents.

#agents #Kubernetes #security #LangGraph

Read article →
The Top 10 Attack Surface Exposures in 2026 Security 5.0
The Hacker News

The Top 10 Attack Surface Exposures in 2026

The article surveys common attack surface exposures in 2026, highlighting that breaches often start with low-hanging fruit like exposed admin panels or credential reuse rather than zero-days. It references MongoBleed as an example of rapid exploitation timelines.

#attack-surface #exposure-management #credential-reuse #zero-day

Read article →
Building an open ecosystem for AI governance with Unity AI Gateway AI 6.0
Databricks Blog

Building an open ecosystem for AI governance with Unity AI Gateway

Databricks introduced Unity AI Gateway, a governance layer for managing AI model access, usage, and compliance as organizations move from experimentation to production. The gateway provides centralized control over model endpoints, audit logging, and policy enforcement across multiple LLM providers.

#governance #LLM #MLOps #compliance

Read article →
GLM-5.2: Built for Long-Horizon Tasks AI 6.0
Hugging Face Blog

GLM-5.2: Built for Long-Horizon Tasks

GLM-5.2 is a foundation model optimized for long-horizon task planning and execution, extending GLM capabilities for multi-step reasoning and complex workflows. The model targets agent and planning applications requiring sustained reasoning over extended sequences.

#LLM #agents #long-context #task planning

Read article →
145 Mastra npm Packages Compromised via Hijacked Contributor Account Security 8.0
The Hacker News

145 Mastra npm Packages Compromised via Hijacked Contributor Account

145 npm packages in the @mastra namespace, a JavaScript/TypeScript framework for building AI applications, were compromised through a hijacked contributor account in the easy-day-js supply chain attack. The breach was discovered by Endor Labs, JFrog, OX Security, SafeDep, Socket, StepSecurity, and Snyk, highlighting risks in open-source AI tooling ecosystems.

#supply-chain #npm #security #AI

Read article →