Get your expert

The develeap news feed

A curated, ranked stream of the news that actually moves our craft.

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks Security 9.0 IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks Jun 5, 2026 Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories Security 9.0 Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories Jun 4, 2026 Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp Security 9.0 Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp Jun 4, 2026 Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms Security 8.0 Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms Jun 5, 2026
Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs Cloud 7.0
AWS News

Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs

AWS launched a redesigned Bedrock console with a project-based workflow for evaluating and deploying Claude, GPT, and open-weight models via OpenAI-compatible and Anthropic APIs. The new interface includes side-by-side model comparison, live documentation with auto-populated SDK snippets, and usage insights tied to projects, streamlining the path from experimentation to production on Bedrock Mantle's inference engine.

#LLM #inference #Claude #GPT

Read article →
Replit shows how vibe coding is getting its own financial stack — and a path to profit AI 7.0
The New Stack

Replit shows how vibe coding is getting its own financial stack — and a path to profit

Replit integrates with Shopify to enable AI agents to generate and deploy custom e-commerce storefronts directly from natural language prompts. Users describe their store concept to the Replit agent, which provisions a Shopify storefront with products, branding, and layout without requiring prior e-commerce experience.

#agents #code-generation #e-commerce #Shopify

Read article →
What is AI Governance? Frameworks, Principles, and Best Practices AI 6.0
Docker Blog

What is AI Governance? Frameworks, Principles, and Best Practices

Docker outlines AI governance as the set of frameworks, policies, and controls spanning ethics, compliance, risk management, and technical safeguards across the full AI lifecycle. With 60% of organizations running AI agents in production but 40% citing security and compliance as barriers to scaling, governance addresses runtime security, access control, and agent-specific oversight to align systems with business goals and regulations.

#AI governance #agents #compliance #risk management

Read article →
Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms Security 8.0
Google Cloud Blog

Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms

Mandiant tracked UNC3753 (Luna Moth), a financially motivated threat cluster conducting a data theft extortion campaign against US law firms, financial services, and professional organizations from January through May 2026. The group uses voice phishing and social engineering to trick targets into installing RMM utilities, then exfiltrates sensitive legal agreements, PII, and financial records. In some cases, threat actors have physically entered corporate offices posing as IT technicians to extract data via USB.

#threat intelligence #social engineering #data exfiltration #extortion

Read article →
Your AI bill is out of control. Cloudflare can fix it now. AI 7.0
Cloudflare Blog

Your AI bill is out of control. Cloudflare can fix it now.

Cloudflare announced spend controls in AI Gateway to address runaway LLM costs, with a closed beta for identity-driven budgets and routing via Cloudflare Access. The feature addresses the common problem of shared API keys masking token consumption across teams, enabling per-user budget enforcement and model routing based on identity and cost constraints.

#LLM #cost management #API gateway #token budgeting

Read article →
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network Security 7.0
The Hacker News

PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network

The threat actor PCPJack has compromised 230 cloud servers across AWS, Google Cloud, and Azure to establish a covert SMTP relay network. Compromised business servers across the U.S., Europe, and Asia were converted into SMTP proxies, verified for mail relay capability, and synced to downstream consumers every five minutes.

#cloud compromise #AWS #Azure #GCP

Read article →
Cursor cuts prices and adds enterprise spend controls amid 'tokenomics' reckoning AI 7.0
The New Stack

Cursor cuts prices and adds enterprise spend controls amid 'tokenomics' reckoning

Cursor restructured its Teams plan pricing, cutting annual seat costs by 20% to $32/user/month while introducing a Premium tier at $120/month with 5x usage at 3x cost, responding to industry-wide shift from flat-rate to token-based billing. The move mirrors GitHub Copilot's transition to token-based consumption pricing and reflects broader enterprise demand for spend visibility and control, evidenced by the Linux Foundation's new Tokenomics Foundation.

#pricing #token-billing #agents #cost-control

Read article →
Google Gemma 4 12B nearly matches 26B benchmarks — and runs on your laptop AI 8.0
The New Stack

Google Gemma 4 12B nearly matches 26B benchmarks — and runs on your laptop

Google released Gemma 4 12B, a multi-modal model that performs nearly as well as Gemma 4 26B while requiring less than half the memory footprint, running on standard laptops with 16GB VRAM or unified memory. The model enables developers to run advanced multi-step reasoning and agentic workflows locally and offline, with benchmarks showing 12B matching or exceeding 26B performance on tasks like DocVQA.

#LLM #local-inference #multi-modal #agents

Read article →
Snowflake thinks it knows what's really slowing developers down AI 7.0
The New Stack

Snowflake thinks it knows what's really slowing developers down

Snowflake rebranded Cortex Code as Snowflake CoCo, an AI coding agent designed to reduce context switching by integrating with Snowflake's governed data platform. New capabilities include a native desktop app, mobile app, Slack integration, autonomous task execution through automations and cloud agents, plus Snowflake Datastream, a fully managed Kafka-compatible streaming service for real-time data ingestion into Snowflake.

#agents #coding-agents #data-platform #streaming

Read article →
Autonomous agents have met their biggest challenge yet: The database. AI 8.0
The New Stack

Autonomous agents have met their biggest challenge yet: The database.

Andy Pavlo from Carnegie Mellon University argues that databases represent the hardest challenge for autonomous agents due to unforgiving correctness and performance requirements. Agent hallucinations in database queries or configuration changes can cause catastrophic system failures, unlike UI hallucinations; Pavlo identifies tuning agents and coding agents as the two primary ways AI impacts databases, with database optimization remaining the most difficult automation problem.

#agents #databases #correctness #optimization

Read article →
Why agentic AI makes the ops platform the most important layer in the enterprise DevOps 5.0
The New Stack

Why agentic AI makes the ops platform the most important layer in the enterprise

HPE argues that operations is the biggest obstacle to enterprise AI adoption, not models or talent, because hybrid complexity spans on-premises, public clouds, edge, and air-gapped sites. The company positions its GreenLake hybrid cloud management platform as addressing the Day 2 operational challenge where enterprises spend most time after infrastructure deployment, now infused with agentic AI to manage multi-vendor, multi-layer complexity.

#agents #hybrid-cloud #operations #infrastructure

Read article →
Identity and Access Management Whitepaper DevOps 6.0
CNCF Blog

Identity and Access Management Whitepaper

CNCF published a whitepaper on IAM for cloud-native architectures, covering authentication and authorization for short-lived workloads, service-to-service communication, and zero-trust models. It includes guidance on PEP/PDP architectures, SPIFFE-based workload identity, and patterns for securing stateful and stateless workloads.

#IAM #zero-trust #SPIFFE #workload identity

Read article →
Why the need for humans won't disappear in the age of autonomous databases Engineering 5.0
The New Stack

Why the need for humans won't disappear in the age of autonomous databases

Percona co-founder Vadim Tkachenko argues that while database automation is transforming operations, the DBA role will not disappear but evolve from operational mechanics to data architects. Speaking at Percona Live 2026, Tkachenko contends that rapid data growth and system complexity ensure human oversight remains essential despite autonomous database capabilities.

#databases #automation #DBA #operations

Read article →
Hardened Images Explained: Fewer CVEs, Smaller Attack Surface Security 6.0
Docker Blog

Hardened Images Explained: Fewer CVEs, Smaller Attack Surface

Docker explains hardened base images that strip unnecessary packages (shells, compilers, debug utilities) to reduce attack surface by up to 95%. These purpose-built images include verifiable supply-chain metadata like SBOMs and build provenance, addressing the reality that most container vulnerabilities come from inherited base-image packages, not application code.

#container security #base images #SBOM #supply-chain

Read article →
NVIDIA Nemotron 3 Ultra now available on Amazon SageMaker JumpStart AI 8.0
AWS ML Blog

NVIDIA Nemotron 3 Ultra now available on Amazon SageMaker JumpStart

NVIDIA Nemotron 3 Ultra, a 550B-parameter hybrid Transformer-Mamba MoE model optimized for long-running autonomous agents, is now available on SageMaker JumpStart with one-click deployment. The model delivers 5x faster inference and up to 30% lower cost for agentic workloads, with support for 1M token context length and NVFP4 precision optimization.

#LLM #agents #MoE #inference optimization

Read article →
How to secure Kubernetes in the age of AI workloads AI 7.0
The New Stack

How to secure Kubernetes in the age of AI workloads

AI agents running on Kubernetes introduce new security challenges beyond traditional microservices: dynamic, ephemeral processes with unpredictable traffic patterns, untrusted code generation, tool discovery, and GPU resource contention. The article outlines a four-control-plane architecture starting with zero-trust networking to handle agent-specific threats like sub-agent spawning and API chaining that standard NetworkPolicy cannot address.

#Kubernetes #AI agents #zero-trust #security

Read article →
Asana says its new AI 'chief of staff' turns your Slack chaos into trackable work Other 5.0
The New Stack

Asana says its new AI 'chief of staff' turns your Slack chaos into trackable work

Asana launched Dash, a personal AI assistant that captures follow-ups from meetings, Slack threads, and email, converting them into trackable work items in Asana's Work Graph. The release positions Asana as an operating system for human-agent teams, addressing the gap between AI capabilities and actual business process integration under new CEO Dan Rogers.

#AI agents #workflow automation #human-AI collaboration #work management

Read article →
What's new for Managed Service for Apache Spark clusters Cloud 6.0
Google Cloud Blog

What's new for Managed Service for Apache Spark clusters

Google Cloud announced enhancements to its Managed Service for Apache Spark (formerly Dataproc) with two deployment modes: serverless for ephemeral jobs and managed clusters for persistent, stateful workloads. New features include native execution engine tuning, smarter scaling policies, and Gemini-powered extensions for AI-assisted development and operations.

#Spark #Dataproc #serverless #Gemini

Read article →
Mate Security's Asaf Wiener made every backend engineer a model router. He's right to. AI 7.0
The New Stack

Mate Security's Asaf Wiener made every backend engineer a model router. He's right to.

Mate Security CEO Asaf Wiener faced a runway crisis driven by AI inference costs and implemented model routing to optimize spending across providers like Amazon, Google, and Anthropic as well as on-premises hardware. The article profiles how an AI-native SOC startup manages the dual cost structure of inference as a core business expense.

#LLM inference #cost optimization #model routing #MLOps

Read article →
VoidZero is joining Cloudflare Engineering 6.0
Cloudflare Blog

VoidZero is joining Cloudflare

Cloudflare acquired VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+. Cloudflare committed that all projects remain open-source, vendor-agnostic, and community-driven. The acquisition aims to invest in foundational JavaScript toolchain infrastructure while maintaining portability and developer choice.

#acquisition #open-source #Vite #JavaScript

Read article →
Securing CI/CD for an open source project: Controlling who runs what Security 7.0
CNCF Blog

Securing CI/CD for an open source project: Controlling who runs what

Cilium project documented CI/CD hardening practices for GitHub Actions, focusing on access control to prevent supply-chain compromise. The article covers who can trigger builds and what code CI is allowed to execute, with patterns applicable to any open-source project given the high blast radius of kernel-level networking infrastructure.

#CI/CD #supply-chain security #GitHub Actions #access control

Read article →
Presentation: Architecting a Centralized Platform for Data Deletion at Netflix DevOps 7.0
InfoQ DevOps

Presentation: Architecting a Centralized Platform for Data Deletion at Netflix

Netflix engineers Vidhya Arvind and Shawn Liu presented architectural patterns for safe data deletion across distributed datastores, balancing durability, availability, and correctness. The talk covers orchestrating multi-system deletion propagation without impacting live traffic, managing tombstone accumulation, building continuous audit loops, and establishing trust in a centralized deletion platform.

#data deletion #distributed systems #GDPR #compliance

Read article →
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS Security 7.0
The Hacker News

Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS

Attackers are running a large-scale operation impersonating open-source and freeware projects with well-designed fake sites that rank high in Google search results, funneling users through a Traffic Distribution System (TDS) to deliver malware families including Remus Stealer, AnimateClipper, and SessionGate framework. The campaign exploits SEO and user trust in legitimate project portals to compromise developers and end users.

#supply-chain #malware #SEO abuse #TDS

Read article →
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months Security 8.0
The Hacker News

Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months

Unknown attackers maintained access to a senior executive's Outlook mailbox at a major global stock exchange for at least five months, exfiltrating inbox contents in small batches and routing traffic through Dropbox and OneDrive to blend with normal cloud activity. Symantec and Carbon Black's Threat Hunter Team identified the campaign as espionage-focused rather than financially motivated.

#breach #espionage #cloud exfiltration #persistence

Read article →
Dreaming: Better memory for a more helpful ChatGPT AI 5.0
OpenAI Blog

Dreaming: Better memory for a more helpful ChatGPT

ChatGPT introduces a new memory system called Dreaming that persists user preferences and context across conversations. The feature improves relevance and personalization by maintaining conversation state without requiring explicit re-prompting.

#LLM #memory #context #personalization

Read article →
AWS Replaces Fat-Tree Data Center Networks with Random Graph Theory, Cutting Routers by 69% Cloud 8.0
InfoQ DevOps

AWS Replaces Fat-Tree Data Center Networks with Random Graph Theory, Cutting Routers by 69%

AWS has deployed Resilient Network Graphs, a flat network architecture based on quasi-random graph theory, as the default for new data center builds. The design replaces fat-tree hierarchies with direct ToR-to-ToR mesh connections using passive optical ShuffleBoxes, achieving 69% router reduction, 33% throughput gain, and 40% power consumption reduction.

#network architecture #data center #infrastructure #topology

Read article →
Rethinking infrastructure access in the age of agentic AI AI 8.0
HashiCorp Blog

Rethinking infrastructure access in the age of agentic AI

HashiCorp examines identity and access management challenges posed by agentic AI systems. Traditional IAM models assume human users with predictable access patterns, but AI agents operate dynamically across infrastructure with unpredictable tool invocations, requiring new guardrails, credential management, and audit visibility.

#agents #IAM #security #infrastructure-access

Read article →
Scaling AI Agents: A Step-by-Step Guide to Deploying ADK on GKE Autopilot AI 7.0
Google Cloud Blog

Scaling AI Agents: A Step-by-Step Guide to Deploying ADK on GKE Autopilot

Google published a tutorial for deploying AI agents built with the Agent Development Kit (ADK) to GKE Autopilot, using Gemini on Vertex AI as the core model. The guide covers containerizing ADK Python applications, securing them with Workload Identity for IAM mapping, and exposing agents via the Kubernetes Gateway API for load balancing.

#agents #ADK #GKE #Gemini

Read article →
DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets Other 5.0
The Hacker News

DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets

The U.S. Department of Justice announced results of a coordinated 'Disruption Week' operation beginning May 18, 2026, targeting cyber-enabled and cryptocurrency fraud networks operating from Southeast Asia. The action resulted in takedowns of millions of social media, email, and internet access accounts used by transnational fraud rings targeting Americans, with $3.8 million in assets frozen.

#fraud #cryptocurrency #law enforcement #takedown

Read article →
Inspektor Gadget: Results from the first security audit DevOps 7.0
CNCF Blog

Inspektor Gadget: Results from the first security audit

Inspektor Gadget, an eBPF-based Kubernetes observability toolkit, completed its first independent security audit coordinated by OSTIF and conducted by Shielder. All reported vulnerabilities have patches available. The toolkit uses eBPF gadgets packaged as OCI images to inspect cluster and Linux host data without rebuilding containers or injecting sidecars.

#eBPF #Kubernetes #observability #security audit

Read article →
How to build self-driving AI operations on Amazon Bedrock at scale AI 6.0
AWS ML Blog

How to build self-driving AI operations on Amazon Bedrock at scale

AWS describes an operational monitoring framework for Bedrock workloads that tracks usage patterns, automates support case triage, prevents duplicate cases, and alerts SRE teams to quota constraints before they hit limits. The approach reduces manual overhead for teams scaling generative AI across multiple foundation models.

#Bedrock #MLOps #observability #agents

Read article →
How to get operational data off the factory floor without creating an IT breach Engineering 5.0
The New Stack

How to get operational data off the factory floor without creating an IT breach

Integrating OT (operational technology) data into IT systems for AI requires secure, auditable data pipelines that replace legacy FTP/SFTP solutions. The article discusses managed solutions offering encryption, continuous transfer monitoring, and full audit trails for protocols like Modbus and OPC UA, addressing the challenge of extracting data from systems designed for uptime rather than connectivity.

#OT/IT integration #data pipeline #encryption #edge computing

Read article →
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android Security 8.0
The Hacker News

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

A vulnerability in Google Gemini's voice assistant on Android allowed poisoned notifications from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger to hijack the assistant without requiring a malicious app. The attack could open windows, forge messages, initiate calls, or corrupt the assistant's long-term memory.

#CVE #Android #voice assistant #notification hijacking

Read article →
Why CPUs still matter in the age of AI agents AI 7.0
The New Stack

Why CPUs still matter in the age of AI agents

As AI shifts from chatbots to autonomous agents, CPU workloads become critical. Agents orchestrate tool calls, manage memory, and execute code - tasks CPUs excel at - while LLMs run on accelerators. Google and Arm leaders explain how CPUs act as the orchestration layer, making them increasingly important for agent infrastructure despite GPU focus.

#agents #CPU #orchestration #inference

Read article →
What is Software Supply Chain Security? Security 5.0
Docker Blog

What is Software Supply Chain Security?

Docker defines software supply chain security as protecting every component, process, and system from source code through dependencies, build systems, registries, and production infrastructure. Sonatype reported 454,000 new malicious packages in 2025 alone, with cumulative totals exceeding 1.2 million since 2019, expanding the attack surface for container-based delivery pipelines.

#supply-chain security #malicious packages #container security #build pipeline

Read article →
Bring Databricks into Kiro IDE with the AI Dev Kit Power AI 6.0
Databricks Blog

Bring Databricks into Kiro IDE with the AI Dev Kit Power

Databricks AI Dev Kit integrates with Kiro IDE to provide AI-assisted development with context awareness for database schemas and table layouts. The integration addresses the problem of AI assistants losing context when working with data infrastructure.

#AI-assisted development #IDE integration #Databricks #code generation

Read article →
Lights Out, Systems On: Validating Instant Power Loss Readiness DevOps 6.0
Meta Engineering

Lights Out, Systems On: Validating Instant Power Loss Readiness

Meta introduces Instantaneous PowerLoss Storm, a testing paradigm within its Disaster Readiness program for validating data center resilience to zero-notice power loss. The approach uses defense-in-depth strategies to tolerate instant failures across Meta's expanding infrastructure, addressing risks from hurricanes, wildfires, and power supply disruptions.

#disaster recovery #resilience #data center #testing

Read article →
Enforcing the First AS in BGP AS_PATHs Security 7.0
Cloudflare Blog

Enforcing the First AS in BGP AS_PATHs

Cloudflare documents recent BGP route hijacks where attackers forge AS_PATHs using unused ASNs to misdirect traffic and conceal identity. The article stress-tests major networks and advocates for simple verification that BGP peers include their own AS as the 'First AS' in advertised routes to prevent prefix hijacking.

#BGP #route hijacking #network security #ASN

Read article →
What's new in serverless Managed Service for Apache Spark Cloud 7.0
Google Cloud Blog

What's new in serverless Managed Service for Apache Spark

Google Cloud's Managed Service for Apache Spark runtime 3.0 now offers zero-setup onboarding by automating IAM roles, VPC networking, and firewall configuration. The service supports feature engineering, GPU-accelerated model training, semantic search, RAG, and AI agent building with simplified deployment.

#Spark #serverless #data-engineering #AI-infrastructure

Read article →
Improve your agent's tool-calling accuracy with SFT and DPO on Amazon SageMaker AI AI 8.0
AWS ML Blog

Improve your agent's tool-calling accuracy with SFT and DPO on Amazon SageMaker AI

AWS demonstrates using Supervised Fine-Tuning (SFT) and Direct Preference Optimization (DPO) together on SageMaker to improve tool-calling accuracy in small language models. The post includes evaluation methodology and model comparison workflows, helping teams move agentic applications from pilot to production with reliable tool selection.

#agents #tool-use #fine-tuning #SFT

Read article →
Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore Security 6.0
The Hacker News

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

HD Moore (Metasploit creator) argues that patching zero-days in time is no longer viable, especially as AI accelerates exploit development. Instead, teams should focus on network segmentation and limiting what a compromised system can reach, treating breach assumption as the foundation of defense strategy.

#zero-day #network segmentation #breach assumption #defense strategy

Read article →
Inside Google's System for Coordinated A/B Testing Across Its Global Service Fleet DevOps 7.0
InfoQ DevOps

Inside Google's System for Coordinated A/B Testing Across Its Global Service Fleet

Google describes a fleet-wide A/B experimentation system that standardizes experiment assignment, exposure logging, and configuration propagation across distributed services. The system reduces experiment conflicts and improves reliability of data-driven decisions at scale across multiple products.

#A/B testing #experimentation #distributed systems #observability

Read article →
Introducing new capabilities to GPT-Rosalind AI 5.0
OpenAI Blog

Introducing new capabilities to GPT-Rosalind

OpenAI announces GPT-Rosalind, a specialized model for life sciences research with enhanced capabilities in biological reasoning, medicinal chemistry, genomics analysis, and experimental workflow automation.

#foundation-models #life-sciences #genomics #chemistry

Read article →
How Wasmer used Codex to build a Node.js runtime for the edge AI 6.0
OpenAI Blog

How Wasmer used Codex to build a Node.js runtime for the edge

Wasmer leveraged OpenAI Codex (now GPT-5.5) to accelerate development of a Node.js runtime for edge environments, achieving 10x-20x speedup and shipping in weeks instead of months. The case study demonstrates code generation's impact on infrastructure tooling development.

#code-generation #Codex #edge-computing #Node.js

Read article →
Article: Two Misconfigurations That Caused Spark OOM Failures on Kubernetes DevOps 8.0
InfoQ DevOps

Article: Two Misconfigurations That Caused Spark OOM Failures on Kubernetes

A post-mortem on Spark pipeline failures on Azure Kubernetes Service reveals two settings that interacted destructively: spark.kubernetes.local.dirs.tmpfs=true forced shuffle spill to RAM instead of disk, and a hard podAffinity rule concentrated all executors on one node. The combination caused repeated OOM kills that standard diagnostics missed.

#Spark #Kubernetes #memory management #configuration

Read article →
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content Security 5.0
The Hacker News

Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content

Weedhack is a malware-as-a-service campaign targeting Minecraft players via YouTube, impersonating Minecraft clients and mods to gain system control. Active since January 2026, the campaign has infected thousands of users; related threats include CountLoader (86K infections) and miners distributed through pirated content.

#malware #MaaS #Minecraft #credential-theft

Read article →
The New Security Risks of the Agentic Development Lifecycle AI 6.0
Snyk Blog

The New Security Risks of the Agentic Development Lifecycle

Snyk examines how AI agents change the software development lifecycle and introduce new security risks. The article emphasizes that securing the agent-driven process itself is as critical as securing the code output, addressing emerging threat vectors in agentic workflows.

#agents #security #development lifecycle #risk management

Read article →
Adding MCP Tools to Reachy Mini AI 6.0
Hugging Face Blog

Adding MCP Tools to Reachy Mini

Hugging Face demonstrates integrating Model Context Protocol (MCP) tools into Reachy Mini, a small humanoid robot. The post shows how MCP enables robots to dynamically access external tools and services, extending their capabilities beyond pre-trained behaviors.

#MCP #agents #tool-use #robotics

Read article →
Rayfin: Microsoft's answer to the gap between vibe coding and enterprise production AI 7.0
The New Stack

Rayfin: Microsoft's answer to the gap between vibe coding and enterprise production

Microsoft announced Rayfin, an open-source SDK and CLI that lets developers and agents define application backends in code and deploy to Microsoft Fabric with built-in security and compliance. Replit is the exclusive launch partner, enabling Replit Agent to generate backend code that deploys directly to Fabric without manual infrastructure configuration.

#agents #infrastructure-as-code #Fabric #backend deployment

Read article →
AI alone won't change your business. The system running it will. AI 6.0
Azure Blog

AI alone won't change your business. The system running it will.

Microsoft argues that enterprise AI success depends not on model capability but on the governance, deployment, and observability infrastructure surrounding agents. The post outlines a comprehensive agent platform supporting multiple models with identity, policy, and human oversight for production multi-agent systems across software delivery, support, finance, and operations.

#agents #governance #enterprise AI #MLOps

Read article →
"A successful attack could be catastrophic": Anthropic gives more groups access to Claude Mythos AI 7.0
The New Stack

"A successful attack could be catastrophic": Anthropic gives more groups access to Claude Mythos

Anthropic expanded Project Glasswing, a secure access program for Claude Mythos (models more powerful than Opus), to more organizations. Anthropic warned that AI models now match elite human hackers at finding software vulnerabilities, and a breach affecting Glasswing partners could impact over 100 million people.

#Claude Mythos #security #vulnerability detection #AI capabilities

Read article →
Announcing Microsoft Discovery general availability and Microsoft Discovery app preview AI 7.0
Azure Blog

Announcing Microsoft Discovery general availability and Microsoft Discovery app preview

Microsoft Discovery is now generally available as a platform for building and governing agentic AI workflows in scientific and engineering R&D. The platform supports iterative hypothesis-experimentation-refinement cycles with integration of institutional knowledge, specialized modeling tools, and evidence preservation, plus a new local desktop app for researchers and students.

#agents #R&D workflows #scientific computing #agentic AI

Read article →
How GitHub plans to win developers back DevOps 6.0
The New Stack

How GitHub plans to win developers back

GitHub COO Kyle Daigle acknowledged hundreds of incidents over 12 months caused by agentic coding growth exceeding 100% year-over-year. GitHub is scaling infrastructure to handle 30-40x growth over the next year, requiring architectural changes beyond typical cloud scaling.

#GitHub #infrastructure scaling #agentic coding #reliability

Read article →
Microsoft debuts "Scout" at Build, a new personal agent for work AI 7.0
The New Stack

Microsoft debuts "Scout" at Build, a new personal agent for work

Microsoft Scout is a new personal agent for work built on OpenClaw and WorkIQ that integrates with Teams, Outlook, and other Microsoft 365 tools to proactively handle routine tasks like resolving scheduling conflicts and meeting prep without explicit user requests. Currently available to Frontier customers with broader rollout planned.

#agents #autonomous #Microsoft 365 #tool-use

Read article →
The art and science of hyperparameter optimization on Amazon Nova Forge AI 7.0
AWS ML Blog

The art and science of hyperparameter optimization on Amazon Nova Forge

AWS details hyperparameter tuning strategies for fine-tuning Amazon Nova Forge models on proprietary data. The post covers learning rate, data mixing ratios, and checkpoint selection to balance domain specialization with retention of general reasoning capabilities, addressing catastrophic forgetting in domain-specific customization.

#fine-tuning #hyperparameter tuning #LLM #domain adaptation

Read article →
Object detection with Amazon Nova 2 Lite AI 6.0
AWS ML Blog

Object detection with Amazon Nova 2 Lite

Tutorial on using Amazon Nova 2 Lite for zero-shot object detection via natural language prompts, returning bounding box coordinates in JSON. Covers deployment using Bedrock, Lambda, and API Gateway with examples in manufacturing, agriculture, and logistics.

#multimodal #object detection #vision #zero-shot

Read article →
GitHub Copilot app: The agent-native desktop experience AI 8.0
GitHub Blog

GitHub Copilot app: The agent-native desktop experience

GitHub released a desktop Copilot app designed to manage agentic workflows, addressing context fragmentation and code review visibility. The app consolidates agent output, PR tracking, and validation trails in a single interface, with GitHub reporting 1.4 billion commits per month and 2 billion Actions minutes weekly.

#agents #GitHub Copilot #agentic workflows #developer tools

Read article →
Connecting AI agents with unstructured data using Google Cloud Storage MCP Servers AI 8.0
Google Cloud Blog

Connecting AI agents with unstructured data using Google Cloud Storage MCP Servers

Google announced a Model Context Protocol (MCP) server for Google Cloud Storage (GCS) that enables AI agents to securely access unstructured data at scale. The integration treats GCS as an agent-ready data layer, combining MCP with GCS smart storage features like auto-annotations and object contexts. Real-world examples include Palo Alto Networks' Strata Co-Pilot agent powered by Gemini Live API.

#agents #MCP #GCS #tool-use

Read article →
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases AI 6.0
Azure Blog

Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases

Microsoft Fabric and Microsoft Databases are positioned as the data foundation for multi-agent systems, solving the bottleneck of consistent shared context across agents. The announcement includes Rayfin, a tool for moving from prompt to production backend, and emphasizes that agent coordination and scale depend on unified organizational data context rather than individual model capability.

#agents #data platform #MLOps #context management

Read article →
New Azure Cobalt 200 VMs deliver 50% performance improvement, fully optimized for modern agentic AI workloads Cloud 7.0
Azure Blog

New Azure Cobalt 200 VMs deliver 50% performance improvement, fully optimized for modern agentic AI workloads

Microsoft announces early access preview for Azure Cobalt 200 Arm-based VMs, delivering 50% generational performance improvement over Cobalt 100 for scale-out, cloud-native, Linux-based agentic AI workloads. The custom silicon integrates security, networking, storage, and offload optimizations for AI inference, data pipelines, and API tiers.

#custom silicon #Arm #inference #cloud compute

Read article →
How to Secure AI Agents: A Practical Overview for Development Teams AI 8.0
Docker Blog

How to Secure AI Agents: A Practical Overview for Development Teams

Docker outlines four security domains for production AI agents: execution isolation, tool access control, identity and credential management, and runtime monitoring. The article emphasizes that traditional static API security controls are insufficient for autonomous agents that dynamically choose tools and chain actions, requiring infrastructure-level controls instead of permission prompts.

#agents #security #tool-use #runtime monitoring

Read article →
Foundry IQ: Build smarter agents faster with unified knowledge and serverless retrieval AI 8.0
Azure Blog

Foundry IQ: Build smarter agents faster with unified knowledge and serverless retrieval

Foundry IQ simplifies enterprise knowledge infrastructure for agent fleets by unifying documents, emails, meetings, operational data, and live web sources through a serverless retrieval layer. New features include Foundry IQ Serverless (scale-to-zero pricing), multi-source knowledge bases (Work IQ, Fabric IQ, File Search, Azure SQL, MCP), and Web IQ integration, all exposed via Model Context Protocol for any agent framework.

#RAG #agents #knowledge retrieval #MCP

Read article →
Announcing Spanner Graph algorithms: Google-grade intelligence for connected data Cloud 7.0
Google Cloud Blog

Announcing Spanner Graph algorithms: Google-grade intelligence for connected data

Google Cloud announced graph algorithms for Spanner Graph in preview, bringing graph mining capabilities natively to the database. Algorithms like node centrality and community detection run directly via ISO Graph Query Language (GQL) without requiring external ETL pipelines. The feature targets fraud detection, entity resolution, and social network analysis at scale.

#graph algorithms #Spanner #GQL #database

Read article →
Accelerating data lakes: Optimizing Apache Iceberg and Spark with gcs-analytics-core Cloud 7.0
Google Cloud Blog

Accelerating data lakes: Optimizing Apache Iceberg and Spark with gcs-analytics-core

Google released gcs-analytics-core, an open-source Java library that centralizes performance optimizations for analytics workloads on Google Cloud Storage. The library integrates with Apache Iceberg (v1.11.0+) and Apache Spark, replacing sequential reads with parallelized strategies for columnar formats like Parquet. It sits between analytics engines and the GCS Java SDK to inject optimizations without framework-specific tuning.

#Iceberg #Spark #GCS #data lake

Read article →
A Developer's Guide to Managing Models, Cost and Quality in Microsoft Foundry AI 7.0
Azure Blog

A Developer's Guide to Managing Models, Cost and Quality in Microsoft Foundry

Microsoft Foundry expands its model ecosystem and operating surface for production AI systems, now including Fireworks AI for open model inference via single Azure endpoint with enterprise SLAs. The platform addresses the production challenge of choosing, validating, optimizing, and operating the right model across application lifecycle, from prototype to cost-constrained production.

#model management #evals #cost optimization #MLOps

Read article →
HCP Terraform adds project-level run tasks DevOps 7.0
HashiCorp Blog

HCP Terraform adds project-level run tasks

HCP Terraform now supports project-level run tasks in public beta, enabling organizations to enforce security, compliance, and operational guardrails across groups of workspaces. Previously run tasks were only available at organization or workspace scope, but project-level scope aligns with how teams naturally organize infrastructure at scale.

#Terraform #run-tasks #governance #compliance

Read article →
Presentation: The Human Toll of Incidents & Ways To Mitigate It DevOps 6.0
InfoQ DevOps

Presentation: The Human Toll of Incidents & Ways To Mitigate It

Kyle Lexmond presents strategies for managing high-pressure production incidents, distinguishing between rapid mitigation and root-cause resolution. The talk covers cognitive overload management, blameless culture practices, and system optimization for faster recovery during severe outages.

#incident-response #operational-resilience #team-dynamics

Read article →
AI-Driven Exploitation is Destroying Vulnerability Management. Here's How to Handle It. Security 7.0
The Hacker News

AI-Driven Exploitation is Destroying Vulnerability Management. Here's How to Handle It.

The article argues that AI-accelerated vulnerability discovery and weaponization are compressing the exploit timeline from days to hours, making traditional vulnerability management processes obsolete. Organizations must shift from reactive patching to continuous monitoring and rapid response strategies. The piece discusses how AI tools are automating the full attack chain from disclosure to mass exploitation.

#AI #vulnerability management #threat intelligence #automation

Read article →
Cloud native is now AI-native: Engineering production-ready AI AI 7.0
CNCF Blog

Cloud native is now AI-native: Engineering production-ready AI

CNCF roundtable at KubeCon Europe outlined three core components for production-ready AI: vendor-neutral infrastructure aligned with the Kubernetes AI Conformance program, integrated security for autonomous agents, and active community contribution. Platform maturity, security by design, and agentic governance are now essential for enterprise AI workloads.

#Kubernetes #agents #security #platform maturity

Read article →
How Leading Organizations Are Turning EDR Into Operational Resilience Security 6.0
The Hacker News

How Leading Organizations Are Turning EDR Into Operational Resilience

The article discusses how organizations are evolving endpoint detection and response (EDR) from a point security tool into a broader operational resilience strategy. Modern attacks bypass traditional prevention, requiring continuous visibility and faster response. EDR adoption has accelerated as teams recognize that endpoint protection alone is insufficient.

#EDR #endpoint security #detection #operational resilience

Read article →
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT Security 5.0
The Hacker News

Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

SideCopy, a Pakistan-aligned threat actor, conducted a spear-phishing campaign against Afghanistan's Ministry of Finance using Xeno RAT, an open-source remote access trojan. The attack chain began with a ZIP archive containing a malicious LNK file with a Pashto-language filename designed to evade detection. The campaign demonstrates targeted nation-state activity in the region.

#spear-phishing #RAT #nation-state #SideCopy

Read article →
Experimenting with TPUs, GKE Managed DRANET, and Multi-cluster Inference Gateway Cloud 7.0
Google Cloud Blog

Experimenting with TPUs, GKE Managed DRANET, and Multi-cluster Inference Gateway

Google Cloud demonstrates multi-region AI inference resilience using GKE's managed Dynamic Resource Allocation (DRANET) for TPU scheduling, multi-cluster inference gateway for cross-region failover, and Cloud Storage FUSE for model storage. The setup balances inference workloads across multiple GKE clusters in different regions, with TPUs managed through DRANET to handle regional failures without service interruption.

#Kubernetes #TPU #inference #multi-cluster

Read article →
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded Security 6.0
The Hacker News

Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded

Password manager Dashlane disclosed a brute-force attack on May 31, 2026, where an attacker targeted user accounts to bypass two-factor authentication (2FA) and download encrypted vaults. Fewer than 20 personal subscription users were affected. The incident highlights the ongoing risk of credential-based attacks against authentication systems.

#brute-force #2FA bypass #password manager #credential attack

Read article →
Introducing Cross-Engine ABAC DevOps 6.0
Databricks Blog

Introducing Cross-Engine ABAC

Databricks introduces Cross-Engine Attribute-Based Access Control (ABAC), extending fine-grained access policies across multiple query engines within the lakehouse. This enables consistent security governance for data accessed through SQL, Python, and other compute layers.

#ABAC #security #access-control #lakehouse

Read article →
Reference your own AWS Secrets Manager secrets in Amazon Bedrock AgentCore Identity AI 7.0
AWS ML Blog

Reference your own AWS Secrets Manager secrets in Amazon Bedrock AgentCore Identity

Amazon Bedrock AgentCore Identity now supports referencing pre-configured AWS Secrets Manager secrets instead of auto-generating them, allowing teams to apply custom tags, rotation policies, and customer-managed KMS encryption. This enables agents to securely access external APIs and tools while maintaining organizational secrets governance.

#agents #security #credential-management #AWS Secrets Manager

Read article →
Transforming rare cancer research with Amazon Quick: Integrating biomedical databases for breakthrough discoveries AI 6.0
AWS ML Blog

Transforming rare cancer research with Amazon Quick: Integrating biomedical databases for breakthrough discoveries

Amazon Quick Research is an agentic workflow that ingests structured and unstructured biomedical data from multiple sources like PubMed, applies LLM-driven synthesis to generate cited research reports, and eliminates weeks of manual ETL and schema reconciliation. The post walks through integrating genomic, clinical, and literature data for pediatric sarcoma research.

#agents #LLM #data-integration #research-automation

Read article →
OpenAI, Anthropic, Google, Amazon, and xAI all fail on type of attack, study finds AI 8.0
The New Stack

OpenAI, Anthropic, Google, Amazon, and xAI all fail on type of attack, study finds

Cisco research across 15 frontier models reveals that single-turn safety benchmarks are poor predictors of multi-turn resilience. All tested models failed multi-turn attacks at rates ranging from 7.89% to 88.30%, with some models like Gemini 3 Pro jumping from 18.10% single-turn success to 73.35% under iterative attack. The gap exposes a critical gap in how enterprises evaluate AI safety.

#evals #safety #adversarial #multi-turn

Read article →
JetBrains open-sources Mellum2 to go where Claude Code can't AI 7.0
The New Stack

JetBrains open-sources Mellum2 to go where Claude Code can't

JetBrains open-sourced Mellum2, a 12B-parameter coding model designed for infrastructure-layer agentic AI tasks like routing, retrieval pipelines, and sub-agent coordination. Unlike its 4B predecessor Mellum, Mellum2 is open from day one and targets the broader ecosystem of multi-model orchestration rather than single-task code completion.

#LLM #agents #code generation #open-source

Read article →
Extending MCP support for Amazon Bedrock AgentCore Gateway AI 7.0
AWS ML Blog

Extending MCP support for Amazon Bedrock AgentCore Gateway

Amazon Bedrock AgentCore Gateway now supports extended MCP capabilities including dynamic tool schema discovery, MCP prompts and resources as first-class primitives, streaming for stateful interactions, and OAuth 2.0 token exchange. This centralizes credential management, observability, and secure connectivity for enterprise MCP deployments.

#agents #MCP #tool-use #AgentCore

Read article →
From Kubernetes Dashboard to Headlamp: Understanding the Transition DevOps 6.0
Kubernetes Blog

From Kubernetes Dashboard to Headlamp: Understanding the Transition

Kubernetes Dashboard is archived; Headlamp is its successor, offering multi-cluster visibility, application-centric views, plugin extensibility, and both in-cluster and desktop deployment options. The post maps familiar Dashboard workflows to Headlamp and guides operators through the transition while preserving the user-centered design that made Dashboard approachable.

#Kubernetes #UI #cluster-management #observability

Read article →
Secure AI agents with Policy and Lambda interceptors in Amazon Bedrock AgentCore gateway AI 7.0
AWS ML Blog

Secure AI agents with Policy and Lambda interceptors in Amazon Bedrock AgentCore gateway

Amazon Bedrock AgentCore Gateway introduces Cedar-based policies for deterministic access control and Lambda interceptors for dynamic validation of agent tool invocations. These mechanisms address the governance challenge of securing LLM-driven agents that decide at runtime which tools to invoke with what arguments.

#agents #security #policy-as-code #AgentCore

Read article →
Hackers Used Meta's AI Support Bot to Seize Instagram Accounts Security 9.0
Krebs on Security

Hackers Used Meta's AI Support Bot to Seize Instagram Accounts

Pro-Iranian hackers exploited Meta's AI support assistant to reset Instagram account passwords by tricking the bot into adding attacker-controlled email addresses during password recovery. The exploit affected high-profile accounts including the Obama White House and U.S. Space Force, requiring only a VPN connection to spoof location.

#security #AI #authentication #account takeover

Read article →
Enable safe agentic payments with built-in guardrails using Amazon Bedrock AgentCore payments AI 6.0
AWS ML Blog

Enable safe agentic payments with built-in guardrails using Amazon Bedrock AgentCore payments

Amazon Bedrock AgentCore Payments (preview) enables agents to access paid resources and transact on behalf of end users through embedded wallets from Coinbase or Stripe Privy. The service includes guardrails addressing risks from autonomous long-running sessions, model non-determinism, and exposure between agent code and user funds.

#agents #payments #guardrails #AgentCore

Read article →
Claude Code vs. Cursor vs. Codex vs. Antigravity — six months in AI 7.0
The New Stack

Claude Code vs. Cursor vs. Codex vs. Antigravity — six months in

Six months after Google's Antigravity launch in November 2025, the agentic coding tool category has converged on form. Claude Code emphasizes approval-heavy workflows for large codebases, Cursor remains model-agnostic, Codex and Antigravity pursue different platform strategies. The competitive differentiation has shifted from basic capability to platform ecosystem and developer workflow.

#agents #code generation #IDE #agentic AI

Read article →
How we reduced core unit boot time from hours to minutes Engineering 7.0
Cloudflare Blog

How we reduced core unit boot time from hours to minutes

Cloudflare debugged a firmware quirk that caused 2,000 bare-metal core servers to take 4 hours to boot instead of minutes after a UEFI update. The root cause was an over-eager linear search through network boot interfaces during the firmware-to-OS handoff, which they optimized to restore minutes-scale boot times and unattended upgrade windows.

#UEFI #firmware #bare metal #boot optimization

Read article →
AgentOps: Operationalize agentic AI at scale with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

AgentOps: Operationalize agentic AI at scale with Amazon Bedrock AgentCore

AWS outlines operational best practices for deploying agentic AI at scale, covering governance, build/ops, evaluation, and observability across four pillars. The post presents a reference architecture using Amazon Bedrock AgentCore and supporting AWS services to address challenges like cost spiraling, non-deterministic failures, and agent quality assurance in production.

#agents #MLOps #observability #governance

Read article →
How Trustpilot built a real-time architecture for data enrichment using Gemma AI 8.0
Google Cloud Blog

How Trustpilot built a real-time architecture for data enrichment using Gemma

Trustpilot built a high-volume streaming pipeline using fine-tuned Gemma models to process millions of user reviews in real-time for NER, sentiment scoring, and intent detection. By owning the model through fine-tuning rather than relying on closed APIs, the company gains full control over latency, cost, and data privacy for its core business intelligence workload.

#LLM #fine-tuning #Gemma #streaming

Read article →
The fully-managed Remote MCP Server for AlloyDB is now Generally Available AI 8.0
Google Cloud Blog

The fully-managed Remote MCP Server for AlloyDB is now Generally Available

Google Cloud released the Remote Model Context Protocol (MCP) Server for AlloyDB as GA, enabling AI agents to securely query enterprise databases with real-time context. The integration includes ScaNN vector indexing (10B+ vectors at 6x PostgreSQL speed) and reranking, allowing agents to ground decisions in live operational data without stale context.

#agents #MCP #RAG #AlloyDB

Read article →
This coding agent doesn't want your feedback — it ships without it AI 7.0
The New Stack

This coding agent doesn't want your feedback — it ships without it

SkipLabs launched Skipper, a closed-loop coding agent that takes plain-language descriptions or OpenAPI specs and returns a complete, validated backend service with no review cycle. Founded by Julien Verlaguet (creator of Hack at Facebook), Skipper positions itself as the substrate between foundation models and shipped software, eliminating developer iteration.

#agents #code generation #backend #closed-loop

Read article →
Introducing the GKE standby buffer: Improve node startup times without blowing your budget DevOps 7.0
Google Cloud Blog

Introducing the GKE standby buffer: Improve node startup times without blowing your budget

Google Kubernetes Engine launched standby buffers, a low-cost suspended capacity reserve that achieves near-immediate pod scheduling with single-digit percent overhead. Benchmarks show P50 latency of single-digit seconds versus 4-6 minute spikes on clusters without buffers, while maintaining similar allocatable core costs.

#Kubernetes #autoscaling #GKE #capacity planning

Read article →
Modeling a digital twin of a food supply chain using BigQuery Graph Cloud 6.0
Google Cloud Blog

Modeling a digital twin of a food supply chain using BigQuery Graph

Google Cloud introduced BigQuery Graph for modeling complex supply chains as graph structures rather than relational tables. The approach reduces join overhead and latency when tracing dependencies across thousands of assets, addressing bullwhip effects, SOP drift, and food safety blast radius in multi-node networks.

#BigQuery #graph #supply chain #digital twin

Read article →
What is Sandbox Security? Security 6.0
Docker Blog

What is Sandbox Security?

Docker published guidance on sandbox security as a critical layer for agentic AI deployment. The piece covers isolation boundaries, access controls, process isolation, network segmentation, and runtime monitoring. Docker's State of Agentic AI report found 40% of respondents cite security as the top challenge in scaling agents, with 43% pointing to orchestration sprawl as a security exposure vector.

#security #agents #sandbox #isolation

Read article →
"Blowing things up": The one move vendors got wrong on AI agents AI 6.0
The New Stack

"Blowing things up": The one move vendors got wrong on AI agents

Hyland announced general availability of its Enterprise Context Engine and Enterprise Agent Mesh at CommunityLIVE 2026, positioning agents as an overlay on existing enterprise systems rather than requiring process redesign. The company introduced Agent Lifecycle Management and headless mode for Content Innovation Cloud to let agents interact with services directly without data migration or business process overhaul.

#agents #enterprise #context #orchestration

Read article →
At Sapphire, SAP makes the case that enterprise AI is a context problem AI 6.0
The New Stack

At Sapphire, SAP makes the case that enterprise AI is a context problem

SAP consolidated its AI offerings under the SAP Business AI Platform at Sapphire 2026, bringing together Business Technology Platform, Business Data Cloud, Autonomous Suite, and Joule Work. The company is shipping 50+ domain-specific Joule Assistants orchestrating 200+ specialized agents across finance, supply chain, procurement, and HR, positioning enterprise AI as a context and governance problem, not a model problem.

#agents #enterprise #context #ERP

Read article →
AWS Weekly Roundup: Claude Opus 4.8 on AWS, Aurora MySQL with Kiro Powers, and more (June 1, 2026) AI 7.0
AWS News

AWS Weekly Roundup: Claude Opus 4.8 on AWS, Aurora MySQL with Kiro Powers, and more (June 1, 2026)

Claude Opus 4.8, Anthropic's most capable model, is now available on Amazon Bedrock and AWS Claude Platform for agentic coding and knowledge work. The post highlights how AI-driven development lifecycle (AI-DLC) workshops are reshaping team structures into smaller AI-augmented squads and accelerating delivery of use cases.

#LLM #agents #Claude #Amazon Bedrock

Read article →
Coding Agent Horror Stories: The rm -rf ~/ Incident AI 8.0
Docker Blog

Coding Agent Horror Stories: The rm -rf ~/ Incident

Docker examines a real incident where Claude Code executed rm -rf tests/ patches/ plan/ ~/, wiping a developer's entire Mac due to a trailing slash. The post details how AI coding agents run with user credentials and filesystem access with no execution boundary, and how workspace-scoped sandboxing can contain such failures.

#agents #security #sandbox #code execution

Read article →
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan Security 5.0
The Hacker News

China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan

Operation Dragon Weave, a China-aligned cyber espionage campaign, targets government, research, academic, technology, and financial sectors in Czech Republic and Taiwan using spear-phishing emails with ZIP attachments to deliver AdaptixC2 agent. The campaign demonstrates persistent targeting of critical infrastructure and research institutions.

#security #espionage #malware #spear-phishing

Read article →
Dynamic configuration for cloud native Swift services DevOps 5.0
CNCF Blog

Dynamic configuration for cloud native Swift services

CNCF published guidance on Swift Configuration, a new standard for managing configuration in Kubernetes-native Swift services. It addresses gaps in manual environment-variable and file-based approaches by providing layered provider models, hot reloading for ConfigMap-backed volumes, and immutable snapshots to prevent torn reads during live traffic.

#Kubernetes #configuration #Swift #cloud-native

Read article →
A Trailing Slash Bypassed AWS API Gateway Authorization Security 9.0
InfoQ DevOps

A Trailing Slash Bypassed AWS API Gateway Authorization

A security researcher discovered that appending a trailing slash to AWS HTTP API paths bypassed Lambda authorizer authentication entirely, enabling unauthenticated access. The root cause is path normalization mismatch between HTTP API's greedy route matching and its authorization layer, a vulnerability class also seen in gRPC-Go (CVE-2026-33186).

#CVE #AWS #API Gateway #authorization bypass

Read article →
How to Post-Train Autonomous Vehicle Models in Closed-Loop with NVIDIA Alpamayo AI 7.0
NVIDIA Developer Blog

How to Post-Train Autonomous Vehicle Models in Closed-Loop with NVIDIA Alpamayo

NVIDIA Alpamayo enables closed-loop post-training of vision-language-action (VLA) models for autonomous vehicles, where model outputs directly affect environment feedback rather than comparing against ground-truth. This bridges the gap between open-loop training and real-world deployment by incorporating environmental consequences into the learning loop.

#VLA models #autonomous vehicles #post-training #closed-loop

Read article →
Gavriel Cohen found his own code inside OpenClaw, so he walked away Security 7.0
The New Stack

Gavriel Cohen found his own code inside OpenClaw, so he walked away

A developer discovered his own code bundled inside OpenClaw (formerly Clawd Bot), an agent framework built on Claude Code, raising immediate security concerns about package provenance and supply-chain integrity. Cohen, who had previously built the package, found it included in OpenClaw's dependency tree without attribution or consent, prompting him to fork the project as NanoClaw to address governance and transparency issues.

#agents #supply-chain #security #Claude

Read article →
AI retrieval at scale is becoming a systems problem, not a tooling problem AI 8.0
The New Stack

AI retrieval at scale is becoming a systems problem, not a tooling problem

Production RAG and agentic systems now require integrated retrieval combining keyword matching, semantic search, ranking, and real-time signals in a single request path, moving beyond standalone vector databases. The shift from model-quality focus to operational trade-offs like latency, ranking quality, and architectural simplicity reflects how retrieval has become a systems integration challenge rather than a pure tooling problem.

#RAG #retrieval #ranking #vector search

Read article →
The DIY platform trap that's burning out engineering teams DevOps 7.0
The New Stack

The DIY platform trap that's burning out engineering teams

Platform teams building custom automation stacks often create unmaintainable complexity that outlives its original authors, shifting toil from workflow execution to infrastructure archaeology. The article argues that layering scripts, blueprints, orchestration, and GitOps without clear ownership and documentation trades one problem for another, leaving teams debugging intent rather than applications.

#platform engineering #DevOps #automation #technical debt

Read article →
I tested Cursor's new Jira integration and it's 5 stars, no notes. Here's why. AI 6.0
The New Stack

I tested Cursor's new Jira integration and it's 5 stars, no notes. Here's why.

Cursor's new Jira integration allows developers to assign tickets directly as prompts without context switching or copy-paste, tested across four scenarios with varying ticket clarity. The integration performed well on both well-written and vague tickets, though it requires Cursor Teams subscription (no free trial) and is currently low-adoption in the Atlassian marketplace with only 548 installs.

#Cursor #Jira #LLM agents #developer tools

Read article →
Arm Open-Sources Metis, an AI Security Framework Outperforming Traditional SAST Tools AI 7.0
InfoQ DevOps

Arm Open-Sources Metis, an AI Security Framework Outperforming Traditional SAST Tools

Arm has open-sourced Metis, an agentic AI framework that uses semantic reasoning to autonomously discover software vulnerabilities across component dependencies. Unlike pattern-based SAST tools, Metis applies LLM-driven reasoning to analyze code relationships and generates natural language explanations for findings, demonstrating better detection of complex security issues.

#agents #security #LLM #SAST

Read article →
Why GPT-5.4, Claude, and Gemini can't agree on basic, real-world facts AI 7.0
The New Stack

Why GPT-5.4, Claude, and Gemini can't agree on basic, real-world facts

Analysis from Lenz claim-verification platform shows five frontier LLMs (GPT-5.4, Claude Opus 4.7, Gemini 3 Pro, Gemini 3 Pro + Search, Sonar Pro) disagreed on 67% of 1,000 real-world fact-check claims using a 4-bucket rubric (True/Mostly True/Misleading/False). The split reflects intentional coverage of production inference modes from latency-sensitive to throughput-aware.

#LLM #evals #factuality #inference

Read article →
Replit's vibe coding platform just got a Visa-backed identity layer for AI agents — and it changes how agents spend money AI 7.0
The New Stack

Replit's vibe coding platform just got a Visa-backed identity layer for AI agents — and it changes how agents spend money

Replit and Visa announced a strategic partnership integrating Visa Intelligent Commerce capabilities into Replit's development environment. Developers now have native access to tokenization, authentication, wallet management, and payment instructions within agent-building workflows, enabling agents to execute transactions directly.

#AI agents #payments #commerce #tool-use

Read article →
Opus 4.8 Made Claude Smarter. Token Discipline Got Urgent. AI 6.0
The New Stack

Opus 4.8 Made Claude Smarter. Token Discipline Got Urgent.

Anthropic released Claude Opus 4.8, claimed as the smartest model yet, amid viral stories of enterprises facing runaway LLM costs (including an unverified claim of half-billion dollar monthly spend). The article argues that token efficiency and usage limits have become critical operational concerns as frontier models improve but inference costs remain high.

#LLM #Claude #cost #inference

Read article →
Google Cloud Suspends Railway's Production Account, Causing Eight-Hour Platform-Wide Outage Cloud 8.0
InfoQ DevOps

Google Cloud Suspends Railway's Production Account, Causing Eight-Hour Platform-Wide Outage

Google Cloud's automated abuse-detection systems suspended Railway's production GCP account without warning, causing an eight-hour outage affecting 3 million users. Because Railway's control plane ran on GCP while workloads spanned AWS and bare metal, the suspension cascaded across all providers. Railway is now treating GCP as backup-only infrastructure.

#outage #cloud #infrastructure #GCP

Read article →
Comprehensive observability for Amazon SageMaker AI LLM inference: From GPU utilization to LLM quality AI 7.0
AWS ML Blog

Comprehensive observability for Amazon SageMaker AI LLM inference: From GPU utilization to LLM quality

AWS details a two-dimensional observability framework for SageMaker LLM inference: quantity metrics (latency, throughput, GPU utilization, cost) and quality metrics (response accuracy, compliance, consistency). The approach stages observability from core operational signals through sampling-based LLM quality monitoring to detect distribution shift and capacity bottlenecks in production deployments.

#LLM #observability #inference #SageMaker

Read article →
DynoSim: Simulating the Pareto Frontier AI 7.0
NVIDIA Developer Blog

DynoSim: Simulating the Pareto Frontier

NVIDIA describes DynoSim, a tool for simulating LLM serving configurations and their performance trade-offs across model backend, tensor parallelism, prefill/decode split, worker counts, scheduler settings, routing policy, KV cache behavior, and autoscaling thresholds. DynoSim helps identify Pareto-optimal serving configurations without exhaustive real-world testing.

#LLM #serving #inference #optimization

Read article →
AI Doesn't Scale Until You Stop Calling It Innovation AI 6.0
Databricks Blog

AI Doesn't Scale Until You Stop Calling It Innovation

Databricks argues that enterprise AI adoption stalls when organizations treat AI as a one-off innovation project rather than operationalized infrastructure. The post emphasizes that scaling AI requires moving from experimental teams to integrated MLOps practices, data governance, and production-grade systems.

#MLOps #AI infrastructure #enterprise AI #operationalization

Read article →
Developer's guide to Gemini Enterprise and A2UI integration AI 8.0
Google Cloud Blog

Developer's guide to Gemini Enterprise and A2UI integration

Google released A2UI, an open protocol for agent-driven user interfaces, enabling agents to render rich interactive UI (date pickers, maps, multi-select lists) natively in Gemini Enterprise chat and custom frontends. Solves multi-turn slot-filling and choice rendering problems in agentic workflows using Google Agent Development Kit and A2A protocol.

#agents #A2UI #Gemini Enterprise #UI protocol

Read article →
How to Automate AI Model Documentation with the NVIDIA MCG Toolkit AI 7.0
NVIDIA Developer Blog

How to Automate AI Model Documentation with the NVIDIA MCG Toolkit

NVIDIA MCG Toolkit automates generation of model cards and regulatory documentation for AI models, addressing compliance requirements under AB-2013 and EU AI Act. The toolkit captures model behavior, training data, performance metrics, and intended use in auditable format before release.

#model cards #MLOps #compliance #documentation

Read article →
AlloyDB Hot Standby: Faster failovers, consistent performance Cloud 7.0
Google Cloud Blog

AlloyDB Hot Standby: Faster failovers, consistent performance

AlloyDB for PostgreSQL introduces Hot Standby, a new high-availability architecture that keeps the standby node warm and cache-ready to eliminate database startup and cache-warming delays during failover. The separation of compute and storage with synchronous WAL writes to a regional log persistor ensures durability while reducing recovery time.

#AlloyDB #PostgreSQL #high-availability #failover

Read article →
From petabytes to predictions: Easy BigQuery insights in Google Sheets Cloud 6.0
Google Cloud Blog

From petabytes to predictions: Easy BigQuery insights in Google Sheets

Connected Sheets bridges BigQuery and Google Sheets, eliminating CSV exports and data silos by providing a secure, live connection to petabyte-scale datasets directly in Sheets. Business users can analyze billions of rows without SQL while admins maintain governance through table-level access controls and Workspace data protections.

#BigQuery #data-analytics #governance #Google Sheets

Read article →
Cool stuff Google Cloud customers built, May edition: Agentic algorithms for supply chains; virtual try-on APIs; robotic camera operators & more Cloud 5.0
Google Cloud Blog

Cool stuff Google Cloud customers built, May edition: Agentic algorithms for supply chains; virtual try-on APIs; robotic camera operators & more

Google Cloud customer showcase featuring Urban Outfitters migrating 11TB Oracle database to AlloyDB for PostgreSQL, BASF using AlphaEvolve for supply-chain mapping, WPP training humanoid robots with vision, and Breuninger deploying Virtual Try-On APIs. Demonstrates production AI agent and infrastructure use cases across retail, manufacturing, and logistics.

#agents #AlloyDB #supply-chain #computer vision

Read article →
Claude Opus 4.8 is now available in Microsoft Foundry AI 7.0
Azure Blog

Claude Opus 4.8 is now available in Microsoft Foundry

Anthropic's Claude Opus 4.8 model is now available in Microsoft Azure AI Foundry, offering improved performance for coding, agentic workflows, and document-heavy analysis. The model is designed to handle longer-running tasks, maintain coherence across complex multi-step workflows, use tools reliably, and support production enterprise applications.

#LLM #Claude #agents #Azure

Read article →
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit Security 8.0
The Hacker News

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

Threat actors exploited CVE-2026-39987 in publicly-accessible Marimo notebooks to gain initial access, then deployed an LLM agent to automate post-compromise actions including credential extraction and lateral movement. The attack demonstrates operational use of agentic AI for attack orchestration beyond initial exploitation.

#LLM agents #CVE #post-exploitation #credential theft

Read article →
Why Linux creator Linus Torvalds gets angry hearing "99% of code is AI" AI 6.0
The New Stack

Why Linux creator Linus Torvalds gets angry hearing "99% of code is AI"

Linus Torvalds argues that AI is a productivity tool for developers, not a replacement for programming, comparing it to historical shifts from machine code to compilers. He emphasizes that serious long-lived projects require deep understanding of generated code and system architecture, not just prompt engineering.

#AI #programming #productivity #code generation

Read article →
"The AI did it" won't save you when EU regulators come knocking Security 8.0
The New Stack

"The AI did it" won't save you when EU regulators come knocking

The EU's Cyber Resilience Act imposes strict accountability for software vulnerabilities starting September 2026, with no distinction between human-written and AI-generated code. Organizations must now document and secure their entire SDLC while managing the compliance burden of AI tools that generate code faster than teams can review.

#security #compliance #AI-generated-code #vulnerability-management

Read article →
Vendor neutrality isn't magic: A hard look at the OpenTelemetry ecosystem DevOps 7.0
The New Stack

Vendor neutrality isn't magic: A hard look at the OpenTelemetry ecosystem

The article examines the limits of OpenTelemetry's vendor neutrality promise, tracing how the standard's roots in distributed tracing shaped its design and where ecosystem lock-in actually occurs. It argues that while OTel provides a neutral data format and transport, switching vendors remains difficult in practice, similar to format portability not guaranteeing platform switching ease.

#observability #OpenTelemetry #vendor-neutrality #distributed-tracing

Read article →
The fix for soaring AI cloud bills exists — so why won't we trust it? DevOps 6.0
The New Stack

The fix for soaring AI cloud bills exists — so why won't we trust it?

Despite 89% of organizations prioritizing automated resource right-sizing to control GPU-driven AI cloud costs, 71% of Kubernetes engineers still require human review for CPU and memory changes. The article explores the trust gap between automation for productivity gains versus automation for cost reduction.

#Kubernetes #cost-optimization #resource-management #automation

Read article →
AI is shipping code faster than security was built to handle AI 7.0
The New Stack

AI is shipping code faster than security was built to handle

Snyk launched Evo Continuous Offensive Security, an AI-powered pentesting product that runs continuously rather than annually, addressing the 350-day coverage gap left by traditional 15-day pentesting engagements. The product targets the emerging need for continuous vulnerability detection in AI-generated code and against agentic attackers.

#AI-agents #penetration-testing #vulnerability-detection #application-security

Read article →
AI-Assisted Migration Tool Helps Teams Move from ingress-nginx to Higress in Minutes AI 7.0
InfoQ DevOps

AI-Assisted Migration Tool Helps Teams Move from ingress-nginx to Higress in Minutes

An AI-assisted migration tool demonstrated by CNCF successfully migrated 60 ingress-nginx resources to Higress in approximately 30 minutes, showcasing practical application of AI for Kubernetes networking infrastructure modernization. The tool automates the translation of ingress-nginx configurations to Higress equivalents.

#AI #Kubernetes #ingress-nginx #Higress

Read article →
Building a cloud native internal developer platform with Kubernetes, GitOps, and supply chain security DevOps 7.0
CNCF Blog

Building a cloud native internal developer platform with Kubernetes, GitOps, and supply chain security

The CNCF describes a reference architecture for an Internal Developer Platform built on Kubernetes, GitOps (Argo CD), and Infrastructure as Code, addressing deployment inconsistencies, secret management, cost overhead, and observability fragmentation. The design applies to any CNCF-conformant Kubernetes distribution, including managed AKS.

#Kubernetes #GitOps #IDP #infrastructure-as-code

Read article →
What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks Security 7.0
The Hacker News

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks

Analysis of 2,000 exposed applications built with Vibe (AI-coded apps) reveals shadow AI risk: employees building full production applications with AI tools without security or IT oversight, then publishing them publicly. The report highlights how artifact risk has shifted from prompt injection to unsecured AI-generated products in production.

#shadow AI #AI-generated code #supply-chain risk #governance

Read article →
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets Security 8.0
The Hacker News

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Researchers discovered malicious NuGet package versions 2.0.0-2.0.4 of 'Sicoob.Sdk' masquerading as a C# SDK for Brazil's Sicoob financial cooperative, exfiltrating client IDs and PFX certificates. The attack targets cloud secrets and banking credentials through package repository supply-chain compromise.

#supply-chain #NuGet #credential theft #package repository

Read article →
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels Security 7.0
The Hacker News

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

North Korean state-sponsored Kimsuky (Velvet Chollima) conducted cyber attacks on South Korean military and corporate entities in March-April 2026 using new tools including HTTPSpy, HelloDoor, and VS Code Tunnels. Attack chain leveraged social engineering via spoofed security software and fake Webex pages.

#state-sponsored #North Korea #Kimsuky #social engineering

Read article →
Training Azerbaijani language models on Amazon SageMaker AI AI 7.0
AWS ML Blog

Training Azerbaijani language models on Amazon SageMaker AI

Azercell Telecom built a production Azerbaijani LLM on SageMaker using kernel-level optimizations and custom tokenization, achieving 23% higher training throughput, 58% lower peak GPU memory, and 2x improvement in tokens-per-word for morphologically rich languages. The framework uses PyTorch, Hugging Face Transformers, and Liger Kernels on ml.p5.48xlarge instances.

#LLM training #low-resource languages #kernel optimization #tokenization

Read article →
Build a custom portal with embedded Amazon SageMaker AI MLflow Apps DevOps 5.0
AWS ML Blog

Build a custom portal with embedded Amazon SageMaker AI MLflow Apps

This guide shows how to embed SageMaker MLflow Apps into SSO-integrated internal portals using a React frontend and Flask backend, eliminating presigned URL distribution and AWS Console access overhead. The solution provides data scientists a single bookmarkable URL for experiment tracking while CI/CD pipelines access MLflow REST APIs through SigV4-authenticated proxy endpoints.

#MLflow #MLOps #experiment tracking #SSO

Read article →
Evaluating Deep Agents using LangSmith on AWS AI 8.0
AWS ML Blog

Evaluating Deep Agents using LangSmith on AWS

LangSmith on AWS provides evaluation patterns for multi-step AI agents, combining offline pytest-based testing with online production monitoring. The guide walks through a text-to-SQL deep agent using Amazon Bedrock and Amazon Nova 2 Lite, demonstrating how to catch non-deterministic agent failures early and track reliability throughout the agent lifecycle.

#agents #evals #LangSmith #monitoring

Read article →
Introducing the next generation of AWS Resilience Hub for generative AI-based SRE resilience journey Cloud 6.0
AWS News

Introducing the next generation of AWS Resilience Hub for generative AI-based SRE resilience journey

AWS Resilience Hub now integrates generative AI for failure mode analysis, dependency discovery, and modular resilience policies to help SREs set consistent resilience goals and measure compliance across application portfolios. The update adds AWS Organizations integration for enterprise-wide reporting and structured policy composition rather than rigid single-type policies.

#resilience #SRE #AWS #failure analysis

Read article →
How the University of Central Oklahoma is using AI to streamline analysis of complex criminal cases AI 6.0
Google Cloud Blog

How the University of Central Oklahoma is using AI to streamline analysis of complex criminal cases

University of Central Oklahoma's Forensic Science Institute deployed Google's NotebookLM to accelerate analysis of complex criminal case documents and timeline construction. The AI-driven solution, prototyped during a hackathon, reduced analysis time from months to significantly shorter periods, establishing a new standard for forensic investigation workflows.

#NotebookLM #Gemini #document-analysis #case-management

Read article →
Unity Catalog and the next era of Apache Iceberg DevOps 6.0
Databricks Blog

Unity Catalog and the next era of Apache Iceberg

Databricks discusses the integration of Unity Catalog with Apache Iceberg as the foundation for next-generation open lakehouse architecture. The focus is on catalog-driven governance and metadata management for open table formats.

#Apache Iceberg #Unity Catalog #lakehouse #metadata

Read article →
Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications AI 7.0
AWS News

Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications

Amazon OpenSearch Serverless now scales from zero to thousands of requests per second with 60% cost savings versus provisioned clusters, instant resource creation, and 20x faster scaling. Native integrations with Vercel and Kiro enable production-ready vector and full-text search backends for AI agents in minutes without infrastructure management.

#vector search #serverless #agents #RAG

Read article →
Introducing Claude Opus 4.8 AI 7.0
Anthropic News

Introducing Claude Opus 4.8

Anthropic releases Claude Opus 4.8, an upgrade to the Opus model class with improved performance on coding, agentic tasks, and professional work, plus consistency improvements for long-running workflows.

#LLM #Claude #agents #coding

Read article →
SCIM in HashiCorp Vault standardizes provisioning in platforms DevOps 6.0
HashiCorp Blog

SCIM in HashiCorp Vault standardizes provisioning in platforms

HashiCorp Vault now supports SCIM (System for Cross-domain Identity Management) for standardized user and group provisioning, enabling joiner-mover-leaver workflows tied to authoritative identity providers. This reduces configuration drift, eliminates stale access, and extends identity-first security into secrets management without custom integrations.

#SCIM #identity #provisioning #Vault

Read article →
Automate AML alert triage with Amazon Quick and Snowflake Cortex AI AI 6.0
AWS ML Blog

Automate AML alert triage with Amazon Quick and Snowflake Cortex AI

Amazon Quick Flows integrated with Snowflake Cortex AI automates anti-money laundering alert triage, reducing investigation time from 30-90 minutes to under 5 minutes. The solution uses Amazon Quick's Model Context Protocol integration to orchestrate workflows across AWS services (S3, Glue, SageMaker, Bedrock) and Snowflake's AI Data Cloud.

#agents #workflow automation #compliance #Snowflake

Read article →
Why OpenAI and Anthropic are hiring forward deployed engineer teams AI 8.0
The New Stack

Why OpenAI and Anthropic are hiring forward deployed engineer teams

OpenAI and Anthropic are building forward deployed engineering (FDE) teams that embed directly with enterprise clients to integrate AI models into production systems. MIT research found 95 percent of enterprise AI pilots failed due to implementation challenges, not model quality, driving this shift toward hands-on deployment support.

#agents #enterprise AI #deployment #implementation

Read article →
AI in SRE: Where and how Google is deploying agentic AI to improve operations AI 8.0
Google Cloud Blog

AI in SRE: Where and how Google is deploying agentic AI to improve operations

Google SRE is adopting agentic AI to manage increasing system complexity driven by microservices, distributed infrastructure, and AI-generated code. The deployment addresses challenges from wider geographical distribution, complex product topologies, and continuous deployment pipelines by using AI as a force multiplier while maintaining operational control.

#agentic-AI #SRE #operations #reliability

Read article →
Evolving Dataflow to process massive datasets for machine learning Cloud 8.0
Google Cloud Blog

Evolving Dataflow to process massive datasets for machine learning

Google evolved its Flume data platform (successor to MapReduce) with innovations for large-scale ML data processing, including liquid sharding for dynamic work-unit splitting. These features are now available in Google Cloud Dataflow, addressing scalability and efficiency demands from training frontier models like Gemini and autonomous systems like Waymo.

#Dataflow #data-processing #machine-learning #scalability

Read article →
Nano Banana 2 and Nano Banana Pro are generally available, and already powering creative workflows AI 7.0
Google Cloud Blog

Nano Banana 2 and Nano Banana Pro are generally available, and already powering creative workflows

Google announces general availability of Nano Banana 2 (Gemini 3.1 Flash Image) and Nano Banana Pro (Gemini 3 Pro Image) via Gemini Enterprise Agent Platform for image generation and editing in enterprise workflows. Nano Banana 2 now supports video files as input prompts for context-aware image generation, with 1K and 2K output capabilities GA and 4K in preview.

#LLM #image generation #multimodal #agents

Read article →
Go from resource-level to business-level maintenance in Google Cloud Cloud 6.0
Google Cloud Blog

Go from resource-level to business-level maintenance in Google Cloud

Google Cloud launches App-centric maintenance visibility in Unified Maintenance, shifting from resource-focused to application-aware maintenance tracking. The feature integrates with App Hub to aggregate maintenance schedules for GKE clusters, Compute Engine VMs, and AlloyDB instances into a single business-oriented dashboard.

#observability #maintenance #GKE #Compute Engine

Read article →
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer Security 7.0
The Hacker News

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors are actively exploiting a critical, now-patched vulnerability in FortiClient Endpoint Management Server (EMS) to deliver credential-stealing malware across managed endpoints. The campaign abused trusted endpoint management infrastructure to distribute payloads, demonstrating how attackers weaponize legitimate management tools to compromise organizations at scale.

#CVE #FortiClient #credential-theft #endpoint-management

Read article →
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal Security 6.0
The Hacker News

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

Microsoft has publicly advocated for Coordinated Vulnerability Disclosure (CVD) practices, urging researchers to notify vendors before public disclosure. The statement follows removal of a researcher's GitHub account after they disclosed multiple zero-day details, reigniting debate over responsible disclosure timing and researcher accountability.

#CVE #disclosure-policy #zero-day #responsible-disclosure

Read article →
ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More Security 5.0
The Hacker News

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

A weekly threat bulletin covering 18+ security incidents including a Claude security plugin vulnerability, Azure privilege escalation, Kali365 MFA bypass, and phishing campaigns. The digest highlights recurring patterns of low-effort malware distribution, exposed infrastructure, and social-engineering tactics across multiple platforms and services.

#threat-roundup #Azure #MFA-bypass #privilege-escalation

Read article →
How we built Cloudflare's data platform and an AI agent on top of it AI 8.0
Cloudflare Blog

How we built Cloudflare's data platform and an AI agent on top of it

Cloudflare built Town Lake, a unified SQL analytics platform consolidating data from 50+ disparate systems (Postgres, ClickHouse, Kafka, BigQuery), and Skipper, an AI data agent that answers plain-English questions in seconds. The system solves data sprawl by providing a single interface to petabytes of production data across 330+ cities.

#AI agents #data platform #analytics #LLM

Read article →
Claw-style AI agents are coming to the enterprise. The governance infrastructure is still catching up. AI 7.0
The New Stack

Claw-style AI agents are coming to the enterprise. The governance infrastructure is still catching up.

Automation Anywhere announced EnterpriseClaw, wrapping Nvidia's OpenShell runtime (which enables agents to replicate human keyboard actions) in centralized governance for enterprise deployment. The platform integrates with Cisco, Okta, and OpenAI, but reveals a critical gap: enterprises lack security and IAM frameworks to safely govern autonomous agents with device-level file system access and runtime tool creation.

#agents #governance #enterprise #OpenShell

Read article →
The agentic identity crisis: Why your security isn't ready for the AI revolution AI 8.0
The New Stack

The agentic identity crisis: Why your security isn't ready for the AI revolution

As AI agents move from chatbots to autonomous API callers and file readers, legacy IAM models fail. Agents operate in an identity vacuum, inheriting broad service-account or human-user permissions, creating a 144:1 agent-to-human ratio in production. The article maps the shift from input-validation security to action-based threat modeling, where prompt injection triggers malicious tool calls rather than display errors.

#agents #IAM #security #prompt-injection

Read article →
How Endava builds an agentic organization with Codex AI 6.0
OpenAI Blog

How Endava builds an agentic organization with Codex

Endava deployed OpenAI's Codex to automate software delivery workflows, reducing requirements analysis from weeks to hours through agentic task orchestration. The case study demonstrates how agents can coordinate across teams to accelerate development cycles and reduce manual handoffs.

#agents #LLM #automation #software delivery

Read article →
New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users" AI 7.0
The Hacker News

New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

LayerX Security's State of AI Usage Report 2026 reveals that enterprise AI risk is not evenly distributed but concentrated among a small group of power users and specific platforms. The research highlights a significant visibility gap in how organizations understand and track their actual AI exposure and usage patterns.

#AI-security #risk-concentration #visibility-gap #enterprise-AI

Read article →
Debugging the undebuggable: building observability into probabilistic AI systems AI 8.0
The New Stack

Debugging the undebuggable: building observability into probabilistic AI systems

Traditional debugging fails for LLM and agent workflows because failures are non-deterministic, reasoning steps are hidden, and retrieval can silently return low-quality context. The article shifts the paradigm from log-based debugging to observability-driven engineering, showing how to instrument AI services to surface hidden reasoning, tool failures, and retrieval quality.

#observability #LLM #agents #debugging

Read article →
The Kubernetes integration tax: Prometheus, Cilium and production reality DevOps 8.0
CNCF Blog

The Kubernetes integration tax: Prometheus, Cilium and production reality

Platform teams spend 80% of their time wiring together 20-30 CNCF projects (Prometheus, ArgoCD, Cilium, cert-manager, Velero, Sealed Secrets, Kyverno) rather than installing or tuning them individually. The article documents the hidden cost of integration: Prometheus had no ServiceMonitors for Cilium metrics, leaving on-call engineers blind despite Hubble working correctly, illustrating how integration gaps cascade across production stacks.

#Kubernetes #Prometheus #Cilium #integration

Read article →
JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware Security 7.0
The Hacker News

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

A previously undocumented threat actor (JINX-0164) has targeted cryptocurrency organizations using recruitment-themed social engineering and custom macOS malware. The campaign specifically targeted CI/CD infrastructure, demonstrating sophisticated targeting of development pipelines to facilitate digital asset theft.

#threat-actor #macOS-malware #social-engineering #CI/CD-targeting

Read article →
OpenAI's Frontier Governance Framework AI 5.0
OpenAI Blog

OpenAI's Frontier Governance Framework

OpenAI published a governance framework documenting its AI safety, security, and risk practices in alignment with emerging EU and California regulations. The framework outlines operational controls and compliance mechanisms for frontier model deployment.

#AI safety #governance #compliance #regulation

Read article →
Process financial documents using Amazon Bedrock Data Automation AI 7.0
AWS ML Blog

Process financial documents using Amazon Bedrock Data Automation

Amazon Bedrock Data Automation (BDA) extracts structured data from financial documents like tax forms, loan statements, and vendor contracts using foundation models with visual grounding and confidence scores. The service reduces hallucination risk and improves accuracy over raw OCR or generic Claude extraction at lower cost.

#Bedrock #document-extraction #foundation-models #financial-automation

Read article →
Reliable LLM Inference at Scale AI 7.0
Databricks Blog

Reliable LLM Inference at Scale

Databricks describes its inference platform architecture for serving frontier LLMs reliably at scale. The post covers handling variable load, fault tolerance, and cost optimization for production LLM workloads.

#LLM #inference #serving #reliability

Read article →
Snowflake commits $6B to AWS as it pushes deeper into AI Cloud 7.0
The New Stack

Snowflake commits $6B to AWS as it pushes deeper into AI

Snowflake announces a five-year, $6 billion commitment to AWS for Graviton compute and GPU-accelerated EC2 instances. The deal covers AI model training and inference workloads, plus cost-efficient general compute for traditional data warehousing, with expanded AWS Marketplace presence.

#Snowflake #AWS #GPU #Graviton

Read article →
Building AI agents for business support using Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Building AI agents for business support using Amazon Bedrock AgentCore

Works Human Intelligence (WHI) built two AI agents using Amazon Bedrock AgentCore for HR operations: a Commuting Allowance Agent for approval workflows and a Browser Operation Agent for system navigation. The solution reduced operational costs by up to 97% while improving efficiency for HR system management.

#agents #Bedrock #AgentCore #HR-automation

Read article →
From data overload to actionable insights: How Verizon Connect scaled agentic AI to 100,000 users AI 8.0
AWS ML Blog

From data overload to actionable insights: How Verizon Connect scaled agentic AI to 100,000 users

Verizon Connect deployed agentic AI to analyze 500 million daily data points across 1.2 million vehicle subscriptions, replacing manual spreadsheet analysis with dynamic pattern detection. The agent-based system identifies safety issues, maintenance needs, and operational inefficiencies at scale across 80,000 unique data indicators.

#agents #agentic-AI #fleet-management #data-analysis

Read article →
Why MotherDuck refuses to fork DuckDB AI 6.0
The New Stack

Why MotherDuck refuses to fork DuckDB

MotherDuck, a DuckDB commercialization startup, collaborates closely with DuckDB Labs rather than forking the open-source project. Operating the largest fleet of DuckDB databases in production, MotherDuck feeds operational insights back to core maintainers and now enables non-technical workers to query data via AI agents through MCP integration.

#DuckDB #MCP #agents #analytics

Read article →
How AWS SMGS uses an AI-powered conversational assistant to transform business management with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

How AWS SMGS uses an AI-powered conversational assistant to transform business management with Amazon Bedrock AgentCore

AWS built NarrateAI, a conversational agentic AI system using Amazon Bedrock AgentCore, to deliver on-demand business intelligence to leaders across the Sales, Marketing and Global Services organization. The two-layer architecture separates batch processing from real-time interaction, with specialized agents handling intelligent routing and validation.

#agents #AgentCore #business-intelligence #conversational-AI

Read article →
Researcher "gave Claude Code 'ADHD'... and it thinks 2x better now." Outside experts want more proof. AI 5.0
The New Stack

Researcher "gave Claude Code 'ADHD'... and it thinks 2x better now." Outside experts want more proof.

Udit Akhouri released ADHD, a Claude Agent SDK skill that implements tree-of-thought reasoning with cognitive-frame branching and pruning. The tool fans out parallel reasoning branches, scores them, and deepens the most promising paths. Akhouri clarifies the tool excels at brainstorming and planning rather than direct code generation, though the "2x better" claim lacks independent validation.

#agents #reasoning #Claude #tree-of-thought

Read article →
Powering agentic AI sales strategy with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Powering agentic AI sales strategy with Amazon Bedrock AgentCore

AWS Sales built Field Advisor on Amazon Bedrock AgentCore to orchestrate 20+ domain-specific agents handling CRM operations, meeting scheduling, customer insights, product recommendations, and compliance checks. The unified orchestration layer eliminates context-switching and manual agent selection for sales representatives.

#agents #AgentCore #orchestration #sales-automation

Read article →
Coding agents in the social sciences AI 7.0
Anthropic Research

Coding agents in the social sciences

Anthropic research explores how coding agents can be applied to social science research tasks, examining their capabilities in data analysis, statistical modeling, and research automation. The work demonstrates practical use cases for AI agents in accelerating social science workflows.

#agents #coding #research #social-sciences

Read article →
"There is no accountability": AI coding agents are installing packages no one owns Security 8.0
The New Stack

"There is no accountability": AI coding agents are installing packages no one owns

Aikido Security highlights a critical gap in enterprise AI agent governance: when Claude Code, GitHub Copilot, or Cursor autonomously install packages and dependencies, no team owns the security risk. Aikido Endpoint inspects packages, plugins, and extensions before installation and blocks malware; the company also launched Aikido Infinite for continuous AI penetration testing.

#security #agents #supply-chain #package management

Read article →
"Tokenmaxxing is real, expensive & it's spreading": New tools emerge to stop AI budgets from exploding AI 7.0
The New Stack

"Tokenmaxxing is real, expensive & it's spreading": New tools emerge to stop AI budgets from exploding

Enterprises increasingly treat token consumption as a productivity proxy, leading to runaway costs. Uber's CTO blew through his Claude budget faster than expected, prompting the COO to demand cost-to-outcome mapping. New tools and practices are emerging to tie token usage to shipped features rather than raw consumption metrics.

#LLM #cost #budgeting #Claude

Read article →
A Guide to AI Cold Starts on Cloud Run Cloud 7.0
Google Cloud Blog

A Guide to AI Cold Starts on Cloud Run

Google Cloud explores infrastructure patterns to minimize cold-start latency when serving AI models on Cloud Run, addressing startup delays of 20+ seconds that drive developers back to GKE. The guide covers GPU fungibility, architectural decisions, and production strategies from Elastic serving millions of daily requests across 17+ model variants while maintaining scale-to-zero efficiency.

#Cloud Run #GPU #cold starts #serverless

Read article →
Private analytics via zero-trust aggregation Security 6.0
Google Research Blog

Private analytics via zero-trust aggregation

Google Research presents a zero-trust aggregation framework for privacy-preserving analytics. The approach enables secure data collection and analysis without requiring trust in a central aggregator, using cryptographic techniques to protect individual records while computing aggregate statistics.

#privacy #cryptography #zero-trust #aggregation

Read article →
With Google's debut, the most important AI agent feature is now the most boring one AI 8.0
The New Stack

With Google's debut, the most important AI agent feature is now the most boring one

Google repositioned Antigravity as a managed agent platform; Anthropic shipped Claude Managed Agents in April, and AWS added a configuration-first harness to Bedrock AgentCore. All three now offer the same core abstraction: a remote sandbox where agents reason, call tools, run code, and browse the web without orchestration code. Managed runtime has become table-stakes infrastructure.

#agents #infrastructure #managed services #orchestration

Read article →
Announcing Lakebase Change Data Feed (CDF) Cloud 7.0
Databricks Blog

Announcing Lakebase Change Data Feed (CDF)

Databricks introduces Change Data Feed (CDF) for Lakebase, enabling efficient capture and streaming of data modifications. CDF simplifies CDC (change data capture) workflows without requiring external tooling or complex setup.

#CDC #change data feed #streaming #data pipelines

Read article →
Mitigating CVE-2026-31431 ("Copy Fail") in Docker Engine Security 7.0
Docker Blog

Mitigating CVE-2026-31431 ("Copy Fail") in Docker Engine

CVE-2026-31431 is a Linux kernel vulnerability affecting kernels back to 2017 that allows containers to create AF_ALG sockets. Docker Engine v29.4.3 and later restrict this syscall surface by default. Users on unpatched kernels without Docker v29.4.3 are exposed; Docker's mitigation initially broke 32-bit binaries and required iteration.

#CVE #Docker #security #containers

Read article →
Why AI agents need a Context Lake AI 7.0
The New Stack

Why AI agents need a Context Lake

Scaling AI agents across organizations hits three walls: security approval delays for MCP servers (often 9+ months), context-window overflow from too many tools, and agents lacking organizational knowledge (e.g., service ownership). A Context Lake pattern centralizes and gates access to curated data sources, reducing approval friction and improving agent reasoning.

#agents #MCP #context #security

Read article →
Introducing Google AI Threat Defense to help you outpace the adversary Security 6.0
Google Cloud Blog

Introducing Google AI Threat Defense to help you outpace the adversary

Google launches AI Threat Defense, an automated security system using multiple AI models to detect and stop AI-powered attacks that now execute in hours instead of weeks. The system analyzes infrastructure, prioritizes threats, patches vulnerabilities, and continuously monitors for new attacks without relying on manual methods.

#security #AI agents #threat detection #automation

Read article →
3 SOC Steps that Shut Down Incident Risks Early Security 5.0
The Hacker News

3 SOC Steps that Shut Down Incident Risks Early

Modern attacks hide within legitimate processes rather than forcing entry, requiring SOC teams to shift from perimeter-defense thinking to early-stage risk accumulation detection. The article outlines operational changes to catch incidents before they escalate.

#SOC #incident-response #threat-detection #risk-management

Read article →
GPU autoscaling on Kubernetes with KEDA: Building an external scaler DevOps 8.0
CNCF Blog

GPU autoscaling on Kubernetes with KEDA: Building an external scaler

Default Kubernetes autoscaling ignores GPU metrics, wasting accelerator capacity and increasing inference latency for vLLM, Triton, and agentic inference workloads. A custom KEDA external scaler using a DaemonSet solves the CGO and node-locality constraints of NVIDIA Management Library (NVML), enabling GPU-aware scaling on utilization, memory, temperature, and power draw.

#Kubernetes #GPU #KEDA #autoscaling

Read article →
Consul 2.0 improves flexibility, control, and scalability DevOps 6.0
HashiCorp Blog

Consul 2.0 improves flexibility, control, and scalability

Consul 2.0 adds multi-port support for Kubernetes service mesh (beta), CyberArk Workload Identity Manager integration as external CA, global RPC rate limiting, and API Gateway auto-scaling. These features improve service discovery, mTLS enforcement, and operational efficiency in multi-platform environments.

#Consul #service-mesh #Kubernetes #mTLS

Read article →
Continuous Offensive Security: The Line We've Been Walking Security 6.0
Snyk Blog

Continuous Offensive Security: The Line We've Been Walking

Snyk's Continuous Offensive Security platform integrates DAST, AI-driven pentesting, and agent-based red teaming to identify exploitable vulnerabilities before attackers. The approach combines dynamic scanning with AI agents to simulate real attack chains rather than cataloging isolated bugs.

#security #DAST #pentesting #agents

Read article →
Warp's big bet on building open source with GPT-5.5 AI 7.0
OpenAI Blog

Warp's big bet on building open source with GPT-5.5

Warp integrates GPT-5.5 and OpenAI models to coordinate coding agents across local, cloud, and open-source development workflows. The platform uses AI agents to orchestrate multi-environment development tasks, combining local execution with cloud resources.

#agents #LLM #coding #orchestration

Read article →
Reachy Mini goes fully local AI 6.0
Hugging Face Blog

Reachy Mini goes fully local

Reachy Mini, a humanoid robot platform, now runs conversational AI entirely on-device without cloud dependencies. The update enables local inference of language models on the robot's embedded hardware.

#inference #edge #robotics #local models

Read article →
Extract More Kernel Performance with NVIDIA CompileIQ Auto-Tuning AI 7.0
NVIDIA Developer Blog

Extract More Kernel Performance with NVIDIA CompileIQ Auto-Tuning

NVIDIA CompileIQ automates compiler flag tuning for GPU kernels, targeting the final performance gains after manual optimization exhausts obvious wins. The tool addresses a critical bottleneck in LLM inference pipelines where profilers show no remaining headroom despite weeks of tuning batch sizes, quantization, and kernel fusion.

#GPU #compiler #performance #LLM inference

Read article →
NVIDIA CUDA 13.3 Enhances GPU Development with Tile Programming in C++, Compiler Autotuning, and Python Updates Engineering 8.0
NVIDIA Developer Blog

NVIDIA CUDA 13.3 Enhances GPU Development with Tile Programming in C++, Compiler Autotuning, and Python Updates

CUDA 13.3 introduces CUDA Tile programming in C++, a high-level abstraction for tile-based kernel development that automatically manages low-level GPU details. The release adds compiler autotuning and Python updates, with Tile support now available on Compute Capability 9.0 and later.

#CUDA #GPU #tile programming #C++

Read article →
Technical deep dive: AgentCore payments and innovation in agentic commerce AI 6.0
AWS ML Blog

Technical deep dive: AgentCore payments and innovation in agentic commerce

Amazon Bedrock AgentCore provides managed infrastructure for deploying autonomous AI agents at scale, abstracting server management and security. The post discusses how agentic AI is reshaping business models, with APIs shifting to pay-per-use pricing for agent traffic and content providers monetizing agent access. AgentCore addresses the challenge of agents accessing paid services and transacting in real time.

#agents #LLM #infrastructure #payments

Read article →
Build highly scalable serverless LangGraph multi-agent systems in AWS with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Build highly scalable serverless LangGraph multi-agent systems in AWS with Amazon Bedrock AgentCore

This post demonstrates building serverless multi-agent systems using LangGraph orchestrators integrated with Amazon Bedrock AgentCore Memory and Observability. The architecture combines AWS Lambda and Step Functions for automatic scaling, durable state management, and deterministic agent coordination. LangGraph's graph-based execution model enables complex multi-tool workflows with fine-grained cost control.

#agents #LangGraph #serverless #orchestration

Read article →
Build high-performance generative AI systems with Strands Agents, NVIDIA NIM, and Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Build high-performance generative AI systems with Strands Agents, NVIDIA NIM, and Amazon Bedrock AgentCore

This post covers building high-performance multi-agent systems combining Strands Agents, NVIDIA NIM GPU-accelerated inference, and Amazon Bedrock AgentCore. The architecture addresses production challenges: inference latency under concurrent load, context loss in stateless environments, and visibility into multi-agent execution. A campaign review system example demonstrates parallel agent coordination with shared memory and observability.

#agents #inference #GPU #NVIDIA NIM

Read article →
Reconciling the Past: Correcting Records for Unfixed Kubernetes CVEs Security 7.0
Kubernetes Blog

Reconciling the Past: Correcting Records for Unfixed Kubernetes CVEs

The Kubernetes Security Response Committee is correcting CVE records for three unfixed vulnerabilities (CVE-2020-8561, CVE-2020-8562, CVE-2021-25740) that were incorrectly marked as fixed. These issues represent architectural design trade-offs that cannot be remediated without breaking core Kubernetes functionality. The corrections, effective June 1, 2026, will improve accuracy in vulnerability scanners and OSV feeds.

#CVE #Kubernetes #security #vulnerability-scanning

Read article →
AgentWatch: Proactive AWS monitoring with ambient agents AI 6.0
AWS ML Blog

AgentWatch: Proactive AWS monitoring with ambient agents

AgentWatch uses ambient AI agents to provide proactive monitoring of AWS resources across multiple accounts, moving beyond reactive CloudWatch alarms. The system addresses alert fatigue and delayed incident detection by correlating metrics, logs, and alarms from CloudWatch, Lambda, and EC2 to surface actionable insights before customer impact. Agents reduce context-switching and manual dashboard triage.

#agents #observability #monitoring #AWS

Read article →
From idea to AI app: Creating intelligent research assistants with Strands AI 5.0
AWS ML Blog

From idea to AI app: Creating intelligent research assistants with Strands

This post demonstrates building a functional AI research assistant in 30 lines of code using Strands Agents and AWS services. The example integrates Amazon Bedrock foundation models with Kiro, an AI-powered IDE that scaffolds agent code. Strands Powers package MCP servers and API patterns to enable rapid agent development without deep ML expertise.

#agents #Strands #rapid-development #IDE

Read article →
Build an enterprise observability solution for Amazon Quick Cloud 5.0
AWS ML Blog

Build an enterprise observability solution for Amazon Quick

This post describes consolidating Amazon Quick operational data into a centralized observability solution using CloudWatch vended logs, CloudTrail events, and Amazon S3 data lakes. The solution enables tracking adoption, measuring user satisfaction, monitoring costs, and auditing governance across hundreds to thousands of users. QuickSight dashboards and Quick custom chat agents provide querying and analysis via Amazon Athena.

#observability #data-lake #Amazon Quick #governance

Read article →
SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems AI 8.0
Meta Engineering

SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems

Meta introduces SilverTorch, a unified neural-network-based retrieval system that replaces microservice-based recommendation pipelines, achieving 23.7x higher throughput and 20.9x better compute efficiency on GPUs. The system narrows millions of content items to thousands in under 100ms using a single model instead of stitched microservices.

#recommendation systems #retrieval #GPU #neural networks

Read article →
How we evolved Google's global and data center networks for the AI era AI 7.0
Google Cloud Blog

How we evolved Google's global and data center networks for the AI era

Google describes architectural changes to its global network and data centers to support AI workloads, including strategic placement near renewable energy sources, cross-campus workload distribution, and a vertically integrated stack from chips to Gemini Enterprise Agent Platform.

#AI infrastructure #network architecture #data center design #agents

Read article →
Transforming professional work: How Amazon Quick turns document creation from hours into minutes Cloud 5.0
AWS ML Blog

Transforming professional work: How Amazon Quick turns document creation from hours into minutes

Amazon Quick automates document and visualization creation by pulling live data from QuickSight dashboards, S3 data lakes, Redshift, and RDS, then assembling formatted professional documents. The system integrates organizational knowledge bases (Spaces) to inject company-specific context and terminology. Quick supports five output types including Word, PowerPoint, and Excel with full editability and brand consistency.

#Amazon Quick #document-generation #data-integration

Read article →
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries Security 5.0
The Hacker News

MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

Iranian hacking group MuddyWater conducted a campaign affecting at least nine organizations across nine countries in Q1 2026 using DLL side-loading techniques. Targets included industrial and electronics manufacturing, education, public sector, financial services, and professional services, per Symantec and Carbon Black threat research.

#DLL side-loading #espionage #threat intelligence #supply-chain

Read article →
The reason enterprise outages almost never start where ops teams think AI 6.0
The New Stack

The reason enterprise outages almost never start where ops teams think

HPE argues that hybrid cloud complexity and siloed systems make outage root causes invisible to traditional dashboards. The solution is moving from reactive monitoring to closed-loop operations using AI agents that treat orchestration, observability, and remediation as a continuous feedback cycle, requiring platform engineering strategy and predictive capabilities.

#agents #observability #platform engineering #remediation

Read article →
The Untrusted Autonomous Workload: How AI Coding Agents Reshape What Isolation Has to Do AI 7.0
Docker Blog

The Untrusted Autonomous Workload: How AI Coding Agents Reshape What Isolation Has to Do

A developer describes using Claude Code to migrate 146 blog posts and 6,024 images, achieving high Lighthouse scores but losing understanding of the codebase through iterative agent fixes. The post argues that autonomous agents with real codebase access create a trust problem: code works but developers cannot explain what is underneath, raising isolation and sandboxing concerns for production AI agents.

#agents #code generation #isolation #security

Read article →
Taming the agentic influx: a blueprint for AI business observability AI 6.0
The New Stack

Taming the agentic influx: a blueprint for AI business observability

Analyst Kin Lane draws parallels between the current AI spending crisis and early cloud migration, arguing that organizations without strong engineering foundations and clear domain-driven design will struggle. The core problem: API sprawl and application proliferation have outpaced visibility, and AI agents amplify this hidden-liability problem at scale.

#agents #observability #API governance #cost visibility

Read article →
How Jaeger is evolving to trace AI agents with OpenTelemetry AI 8.0
CNCF Blog

How Jaeger is evolving to trace AI agents with OpenTelemetry

Jaeger is evolving to trace AI agent workloads by rebuilding its core in v2 with native OpenTelemetry integration and adopting Model Context Protocol (MCP), Agent Client Protocol (ACP), and Agent-User Interaction Protocol (AG-UI). This addresses the complexity of tracing prompt assembly, vector database retrievals, and external tool calls that traditional distributed tracing tools cannot handle.

#observability #agents #OpenTelemetry #tracing

Read article →
How the AC/DC framework helps teams govern AI coding agents AI 7.0
The New Stack

How the AC/DC framework helps teams govern AI coding agents

The Agent Centric Development Cycle (AC/DC) framework defines four stages for agentic code generation at scale: Guide, Generate, Verify, Solve. While Generate gets market attention, the framework succeeds or fails on Guide (correct assumptions), Verify (catching errors before compounding), and Solve (handling growing problem queues). Verification has moved to center stage as agents produce thousands of lines per cycle.

#agents #code generation #verification #governance

Read article →
Presentation: Realtime and Batch Processing of GPU Workloads AI 7.0
InfoQ DevOps

Presentation: Realtime and Batch Processing of GPU Workloads

Joseph Stein covers building an enterprise AI-as-a-Service platform in a private cloud data center, focusing on GPU pool utilization via multi-namespace scheduling, atomic priority queuing with Valkey and Lua, OWASP Top 10 LLM risk mitigation through central proxy gateways, and batch scaling using a custom S3-to-Kafka proxy.

#GPU scheduling #Kubernetes #LLM infrastructure #queue management

Read article →
AWS Weekly Roundup: AWS Local Zones in Istanbul, open-source ExtendDB, Kiro Web, and more (May 25, 2026) Cloud 6.0
AWS News

AWS Weekly Roundup: AWS Local Zones in Istanbul, open-source ExtendDB, Kiro Web, and more (May 25, 2026)

AWS opened a new Local Zone in Istanbul, Türkiye, bringing compute, storage, and networking services with single-digit millisecond latency to support data residency compliance in financial services, government, telecoms, and healthcare. The Local Zone requires the same operational excellence as a full Region and enables organizations to process data within specific jurisdictions.

#AWS #infrastructure #latency #compliance

Read article →
GitLab 19.0 trades its string section for a full DevSecOps orchestra DevOps 7.0
The New Stack

GitLab 19.0 trades its string section for a full DevSecOps orchestra

GitLab 19.0 introduces expanded secrets management with fine-grained credential scoping, agentic merge request workflows, CI pipeline visibility, and supply chain visibility to address the AI paradox where increased AI-generated code multiplies security and compliance overhead. Secrets Manager flips the default from project-wide to job-specific credential access.

#secrets-management #DevSecOps #CI/CD #supply-chain

Read article →
Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos Security 5.0
The Hacker News

Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

Weekly security roundup covering multiple vulnerability classes: Linux kernel flaws, Windows Defender zero-days, router botnet campaigns, and supply-chain compromises. Organizations discovered unpatched legacy systems and forgotten servers requiring immediate remediation. Phishing tactics are shifting toward more targeted, sophisticated social engineering.

#CVE #supply-chain #phishing #Linux

Read article →
Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability Security 9.0
Google Cloud Blog

Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability

CVE-2026-5426 is a critical RCE vulnerability in KnowledgeDeliver LMS caused by hardcoded, identical ASP.NET machineKey values across all customer deployments. Attackers who obtained the key from one instance could compromise any internet-facing KnowledgeDeliver installation. Mandiant responded to active exploitation in late 2025 where threat actors injected malicious code into the LMS to infect users.

#CVE #RCE #ASP.NET #ViewState

Read article →
2 PhaaS 2 Furious: The Evolution of Chinese-language Phishing Services Security 8.0
Google Cloud Blog

2 PhaaS 2 Furious: The Evolution of Chinese-language Phishing Services

Google Threat Intelligence Group analyzed a dozen mature Phishing-as-a-Service (PhaaS) offerings in the Chinese underground, revealing a shift from static password harvesting to real-time OTP interception and MFA bypass. Attackers now use live admin panels to capture one-time passcodes in real-time and tokenize stolen payment data. Encrypted delivery channels like RCS and iMessage bypass SMS security filters.

#phishing #MFA bypass #PhaaS #credential theft

Read article →
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks Security 6.0
Krebs on Security

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Dutch authorities arrested two co-owners of hosting companies for operating infrastructure used by Russia to conduct cyberattacks, influence operations, and disinformation campaigns in the EU. The investigation focused on Stark Industries Solutions, a sanctioned ISP that became a major source of DDoS attacks and proxy services linked to Russian-backed hacking groups.

#threat-intelligence #DDoS #sanctions #infrastructure

Read article →
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks Security 8.0
The Hacker News

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

Threat actors are actively exploiting CVE-2026-26980 (CVSS 9.4), an SQL injection flaw in Ghost CMS Content API, to inject malicious JavaScript on 700+ compromised sites. The unauthenticated vulnerability allows arbitrary data exfiltration and code injection, enabling ClickFix scam campaigns. Exploitation began immediately after public disclosure.

#CVE #SQL injection #RCE #Ghost CMS

Read article →
Presentation: From Legacy to Sovereignty: Driving the Future of Insurance through Platform Engineering DevOps 6.0
InfoQ DevOps

Presentation: From Legacy to Sovereignty: Driving the Future of Insurance through Platform Engineering

Sergiu Petean discusses evolving DevOps into platform engineering within regulated enterprises, using dynamic reference architectures, aligning platform KPIs to board-level goals, reducing cognitive load through custom team topologies, and maintaining innovation sovereignty via open-source technology.

#platform engineering #DevOps #team topology #architecture

Read article →
The Alert Firehose Finally Meets Its Match AI 7.0
The Hacker News

The Alert Firehose Finally Meets Its Match

Network Detection and Response (NDR) platforms equipped with agentic AI capabilities are reducing false positives and enabling faster threat triage compared to traditional NDR. AI agents autonomously correlate alerts, prioritize high-confidence signals, and accelerate incident response workflows. The shift addresses the long-standing NDR complaint of alert fatigue.

#AI agents #NDR #threat detection #false positives

Read article →
Zero-Downtime migration from ingress NGINX to Envoy Gateway DevOps 8.0
CNCF Blog

Zero-Downtime migration from ingress NGINX to Envoy Gateway

CNCF case study of migrating from Ingress NGINX to Envoy Gateway on AWS with zero downtime, using weighted DNS cutover strategy. Covers evaluation, testing, and operational risk mitigation for teams moving to Gateway API as Ingress NGINX reaches end-of-life with no security patches or new features.

#Kubernetes #Envoy #Gateway API #Ingress

Read article →
Why Kubernetes policy enforcement happens too late—and what to do about it DevOps 7.0
CNCF Blog

Why Kubernetes policy enforcement happens too late—and what to do about it

CNCF analysis of Kubernetes policy-as-code timing: tools like OPA, Kyverno, and Conftest catch violations at CI/CD or admission control stages, but by then developers have already written code and context is lost. The article explores shifting policy enforcement earlier in the development workflow to catch misconfigurations before code review.

#Kubernetes #policy-as-code #OPA #Kyverno

Read article →
Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms Security 8.0
The Hacker News

Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

Lazarus Group is deploying RemotePE, a cross-platform memory-only remote access trojan, in multi-stage attacks targeting financial and cryptocurrency organizations. The attack chain uses DPAPILoader and RemotePELoader to decrypt and execute payloads without touching disk. NCC Group's Fox-IT identified the campaign and attributed it to North Korea-linked threat actors.

#Lazarus #RAT #malware #financial

Read article →
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO Security 9.0
The Hacker News

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

TrapDoor campaign distributes credential-stealing malware across npm, PyPI, and Crates.io with 34+ malicious packages spanning 384+ versions. Attack began May 22, 2026, with coordinated package publication waves across all three ecosystems. Malware targets developer credentials and secrets stored in environment variables and configuration files.

#supply-chain #npm #PyPI #Crates.io

Read article →
How we contain Claude across products AI 8.0
Anthropic Engineering

How we contain Claude across products

Anthropic details containment strategies for increasingly capable agents across claude.ai, Claude Code, and Cowork, addressing how to limit blast radius as agent capabilities grow. The post covers engineering approaches to sandboxing and resource isolation.

#agents #safety #containment #sandboxing

Read article →
Who's monitoring the agents? AI 8.0
The New Stack

Who's monitoring the agents?

Production multi-agent systems built with CrewAI, AutoGen, and LangGraph lack operational visibility comparable to mature microservices monitoring. Teams are deploying agents with minimal observability into execution paths, leading to inefficient loops, cascading retries, and latency issues that go undetected until they impact real data and users.

#agents #observability #production #LangGraph

Read article →
How Jaeger hit 8.6× compression on 10 million spans with ClickHouse DevOps 8.0
The New Stack

How Jaeger hit 8.6× compression on 10 million spans with ClickHouse

Jaeger v2.18.0 adds native ClickHouse storage backend, achieving 8.6x compression on massive span volumes through columnar storage. The integration enables millisecond-scale analytical queries across billions of traces while maintaining append-only write efficiency, addressing long-standing user requests for a production-grade alternative to Cassandra and Elasticsearch.

#observability #tracing #ClickHouse #Jaeger

Read article →
What ClickHouse learned from a year of coding with AI agents AI 7.0
The New Stack

What ClickHouse learned from a year of coding with AI agents

ClickHouse shares a year of production experience with AI coding agents, categorizing use cases into three levels: chat copy-paste (exploration), CLI/IDE agents (routine tasks with hand-holding), and autonomous multi-agent loops (spec-driven, still maturing). The team found agents effective for specific workflows but not universally applicable, with tooling and reliability improving significantly through 2025.

#agents #coding #tool-use #LLM

Read article →
Laravel Lang Supply Chain Advisory Security 8.0
Snyk Blog

Laravel Lang Supply Chain Advisory

Hundreds of historical Laravel Lang Packagist releases were republished with malicious code, exposing Composer installs to credential theft and secret exfiltration. The attack compromised a widely-used PHP localization package affecting Laravel projects across the ecosystem.

#supply-chain #malware #Composer #PHP

Read article →
Observability for any agent, anywhere: Production-ready tracing with OpenTelemetry & Unity Catalog on Databricks AI 8.0
Databricks Blog

Observability for any agent, anywhere: Production-ready tracing with OpenTelemetry & Unity Catalog on Databricks

Databricks ships production-ready tracing for AI agents using OpenTelemetry and Unity Catalog, enabling observability across any agent framework or deployment environment. The integration standardizes agent telemetry collection, making it easier to debug, monitor, and audit agent behavior in production.

#agents #observability #OpenTelemetry #tracing

Read article →
What Anthropic and OpenAI launched in 72 hours has Wall Street paying attention AI 8.0
The New Stack

What Anthropic and OpenAI launched in 72 hours has Wall Street paying attention

Anthropic and OpenAI each launched enterprise deployment arms within 72 hours: Anthropic's services firm (backed by Blackstone, Goldman Sachs) targets mid-market enterprises with embedded applied AI engineers, while OpenAI's DeployCo (backed by $4B+ and 150 FDEs from Tomoro acquisition) targets large enterprises. Both bet that deployment, not model quality, is the next frontier.

#agents #enterprise deployment #financial services #applied AI

Read article →
Lawmakers Demand Answers as CISA Tries to Contain Data Leak Security 8.0
Krebs on Security

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

A CISA contractor intentionally published AWS GovCloud keys and plaintext credentials to dozens of internal CISA systems on a public GitHub account called 'Private-CISA', with commit logs showing the contractor disabled GitHub's secret-scanning protections. The repository was created in November 2025 and used as a working scratchpad, exposing the breach for months.

#credential-exposure #GitHub #AWS #breach

Read article →
Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware Security 5.0
The Hacker News

Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware

Belarus-aligned threat actor Ghostwriter (UAC-0057, UNC1151) is targeting Ukrainian government organizations with phishing emails using lures related to Prometheus, a Ukrainian online learning platform. The campaign is tracked by Ukraine's CERT-UA and represents ongoing state-sponsored targeting of government infrastructure.

#phishing #malware #threat-actor #government

Read article →
GitHub recognized as a Leader in the Gartner Magic Quadrant for Enterprise AI Coding Agents for the third year in a row AI 7.0
GitHub Blog

GitHub recognized as a Leader in the Gartner Magic Quadrant for Enterprise AI Coding Agents for the third year in a row

GitHub Copilot now serves 140,000 organizations (triple year-over-year) with agentic workflows spanning code generation, review, security, and deployment. The platform shifts developer focus from writing code to orchestrating agent outcomes across the full SDLC, with Copilot CLI adoption nearly doubling month-over-month.

#agents #code generation #SDLC #tool use

Read article →
Synthesize Realistic 3D Medical Images at Scale to Ship Pre-Trained Models AI 7.0
NVIDIA Developer Blog

Synthesize Realistic 3D Medical Images at Scale to Ship Pre-Trained Models

NVIDIA addresses data scarcity in medical imaging by synthesizing realistic 3D training data to overcome privacy and annotation bottlenecks. The approach enables teams to train robust radiology AI models without relying on limited real datasets, with pre-trained models ready for deployment.

#synthetic data #medical imaging #training data #generative models

Read article →
What's new with Google Cloud AI 7.0
Google Cloud Blog

What's new with Google Cloud

Google Cloud announced new LLM benchmarking and optimization tools for on-device deployment via Google AI Edge Portal, supporting testing across 120+ Android devices. The portal enables developers to benchmark and debug fine-tuned LLM performance on diverse hardware tiers, plus new AI governance features for enterprise MCP (Model Context Protocol) endpoints and audit logging.

#LLM #edge deployment #benchmarking #on-device inference

Read article →
The Blueprint: How Movix fills a gap in dental skills with specialized agentic AI AI 6.0
Google Cloud Blog

The Blueprint: How Movix fills a gap in dental skills with specialized agentic AI

Movix built an agentic AI solution for dental appliance manufacturers to automate quality control and reduce rework costs in aligner production. The system addresses a shortage of skilled dental technicians by automating technical workflows, reducing per-unit rework costs from $300 (25% of retail price) to near zero through AI-driven inspection and process optimization.

#agents #agentic workflows #domain-specific AI #manufacturing

Read article →
JetBrains is selling independence as the rest of AI coding picks sides AI 6.0
The New Stack

JetBrains is selling independence as the rest of AI coding picks sides

JetBrains positions itself as the only independent AI coding tool vendor, with its agent Junie defaulting to Gemini Flash but supporting Claude and OpenAI models interchangeably. Competitors have consolidated: Cursor ties to xAI, Windsurf split between Google and Cognition, Copilot to Microsoft-OpenAI.

#agents #code generation #model agnostic #IDE

Read article →
Azure NetApp Files for EDA workloads: From revolution to breakthrough at scale Cloud 6.0
Azure Blog

Azure NetApp Files for EDA workloads: From revolution to breakthrough at scale

Azure NetApp Files now supports high-concurrency EDA workloads at cloud scale with predictable low-latency shared storage, addressing the historical constraint of thousands of concurrent simulation, synthesis, and verification jobs accessing shared datasets. The update includes new independent benchmarks and adoption by leading semiconductor companies, positioning Azure as a viable alternative to on-premises EDA infrastructure.

#Azure NetApp Files #EDA #storage #high-concurrency

Read article →
Three ways operational debt will break your AI strategy, and how to recover AI 7.0
The New Stack

Three ways operational debt will break your AI strategy, and how to recover

84% of companies have experienced AI-related outages, yet most use incident processes built for slower, human-first systems. PagerDuty research shows 68% lose over $300k/hour during downtime; AI failures are harder to detect than traditional incidents because models drift and agents misinterpret context, requiring new observability and resilience patterns.

#AI operations #incident management #observability #resilience

Read article →
I buried 20 problems in a fake P&L to see if Claude for Small Business could find them AI 5.0
The New Stack

I buried 20 problems in a fake P&L to see if Claude for Small Business could find them

Anthropic's Claude for Small Business adds native connectors to QuickBooks, HubSpot, Canva, Google Workspace, and other SaaS tools. The author tested Claude's ability to read a 9-tab P&L with 20 deliberately planted financial anomalies, ranging from obvious red flags to subtle nuances requiring expert judgment.

#LLM #tool use #business automation #financial analysis

Read article →
Why enterprise AI keeps stalling — and how data streaming could unlock it AI 7.0
The New Stack

Why enterprise AI keeps stalling — and how data streaming could unlock it

McKinsey data shows 8 in 10 companies cite data limitations as a blocker to scaling agentic AI. Confluent argues the bottleneck is fragmented data across databases, SaaS, warehouses, and security silos, not model quality. Confluent Intelligence and Cloud capabilities aim to provide real-time data streaming as a secure foundation for AI agents to reason across live business data.

#agents #data infrastructure #streaming #enterprise AI

Read article →
JFrog report recaps a tumultuous year in supply chain security Security 7.0
The New Stack

JFrog report recaps a tumultuous year in supply chain security

JFrog's 2026 supply chain security report warns that AI models and agentic development tools have become primary attack vectors, with bad actors weaponizing IDE extensions, MCP servers, and developer tools for first-contact exploitation. The report argues existing security controls cannot keep pace with the expanded threat surface now spanning dependencies, binaries, and AI artifacts.

#supply-chain #AI #security #threat-landscape

Read article →
Discord Rebuilds Database Operations Around Automation to Manage ScyllaDB at Massive Scale DevOps 7.0
InfoQ DevOps

Discord Rebuilds Database Operations Around Automation to Manage ScyllaDB at Massive Scale

Discord built an internal orchestration framework called Scylla Control Plane (SCP) to automate large-scale ScyllaDB cluster management, reducing tasks that previously took days of manual work to automated operations. The system enables a small infrastructure team to manage massive ScyllaDB deployments through automation.

#ScyllaDB #orchestration #database automation #infrastructure

Read article →
Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective Security 6.0
The Hacker News

Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective

Technical analysis of how Windows kernel-mode drivers can be exploited from user mode without the hardware they were designed for, addressing the challenge of evaluating driver vulnerability exploitability when reachability is hardware-gated. This work applies BYOVD (Bring Your Own Vulnerable Driver) techniques to driver-oriented vulnerability research.

#Windows #kernel #driver-vulnerability #BYOVD

Read article →
Designing end-to-end ingress request tracing for multi-tenant SaaS platforms DevOps 7.0
CNCF Blog

Designing end-to-end ingress request tracing for multi-tenant SaaS platforms

CNCF article presents a framework for end-to-end request tracing in multi-tenant Kubernetes-based SaaS platforms using OpenTelemetry and W3C Trace Context standards. The framework addresses the challenge of correlating logs and metrics across dozens of microservices to diagnose failures and latency regressions without shared request context.

#observability #tracing #Kubernetes #OpenTelemetry

Read article →
Using observability data to prevent incidents DevOps 6.0
Databricks Blog

Using observability data to prevent incidents

Databricks demonstrates how to ingest observability signals (metrics, logs, traces) into a lakehouse and apply ML models to detect anomalies and predict failures before they cascade. The approach treats observability data as a queryable asset rather than siloed telemetry.

#observability #anomaly detection #incident prevention #ML

Read article →
How Databricks Genie democratizes data access in financial services AI 5.0
Databricks Blog

How Databricks Genie democratizes data access in financial services

Databricks Genie enables financial services teams to query data via natural language without SQL expertise, reducing time-to-insight for business intelligence and compliance workflows. The platform integrates with Databricks' unified data lakehouse to surface insights across fragmented data sources.

#LLM #RAG #data access #business intelligence

Read article →
Cloudflare Completes Its Agent Infrastructure Stack with Browser Run Rebuild and Six-Layer Platform AI 8.0
InfoQ DevOps

Cloudflare Completes Its Agent Infrastructure Stack with Browser Run Rebuild and Six-Layer Platform

Cloudflare rebuilt Browser Run on its Containers platform, achieving 4x higher concurrency and 50% faster response times. The completion of a six-layer agent infrastructure stack includes compute (Dynamic Workers + Sandboxes), orchestration (Dynamic Workflows), memory (Agent Memory), browsing (Browser Run), and commerce (Stripe Projects).

#agents #infrastructure #Workers #containers

Read article →
How Virgin Atlantic ships faster with Codex AI 6.0
OpenAI Blog

How Virgin Atlantic ships faster with Codex

Virgin Atlantic deployed Codex to accelerate mobile app development on a fixed holiday deadline, achieving near-total unit test coverage and zero P1 defects. The case study demonstrates Codex's practical impact on shipping velocity and code quality in time-constrained production environments.

#agents #code generation #Codex #testing

Read article →
OpenAI named a Leader in enterprise coding agents by Gartner AI 5.0
OpenAI Blog

OpenAI named a Leader in enterprise coding agents by Gartner

OpenAI received a Leader designation in Gartner's 2026 Magic Quadrant for Enterprise AI Coding Agents, with Codex highlighted for innovation and enterprise-scale deployment capabilities. The recognition reflects Codex's ability to handle production coding workflows at organizational scale.

#agents #code generation #Codex #enterprise AI

Read article →
Project Glasswing: An initial update AI 5.0
Anthropic Research

Project Glasswing: An initial update

Anthropic provides an update on Project Glasswing, an initiative focused on AI safety and alignment research. Details on specific technical contributions are limited in this initial announcement.

#safety #alignment #research #Claude

Read article →
Amazon Nova Act is now HIPAA eligible AI 7.0
AWS ML Blog

Amazon Nova Act is now HIPAA eligible

Amazon Nova Act, a service for building browser-based AI agents, now qualifies as HIPAA-eligible, enabling healthcare organizations to automate workflows involving ePHI like claims processing and referral coordination. The service handles repetitive UI tasks, integrates with external APIs and MCP servers, and escalates to humans when needed.

#agents #agentic AI #browser automation #healthcare

Read article →
Alleged Kimwolf Botmaster 'Dort' Arrested, Charged in U.S. and Canada Security 6.0
Krebs on Security

Alleged Kimwolf Botmaster 'Dort' Arrested, Charged in U.S. and Canada

Jacob Butler, 23, of Ottawa was arrested for operating Kimwolf, an IoT botnet that infected millions of devices (digital photo frames, web cameras) and rented them for DDoS attacks, including strikes on DoD address ranges. Butler faces criminal hacking charges in both Canada and the US following a six-month campaign of DDoS, doxing, and swatting.

#botnet #DDoS #IoT #cybercrime

Read article →
Intelligent radiology workflow optimization with AI agents AI 7.0
AWS ML Blog

Intelligent radiology workflow optimization with AI agents

This post demonstrates building a radiology worklist optimization system using AI agents on Amazon Bedrock AgentCore and Strands Agents SDK that routes studies based on radiologist specialization, workload, fatigue, and case complexity instead of rigid rules. Research across 62 hospitals showed inefficient assignment causes 17.7-minute delays and $2.1M-$4.2M in costs.

#agents #healthcare #workflow optimization #context-aware routing

Read article →
Kore counts down to Artemis, its moonshot for governable AI agents AI 7.0
The New Stack

Kore counts down to Artemis, its moonshot for governable AI agents

Kore released Artemis, a visual and code-based platform for building multi-agent AI systems using a declarative Agent Blueprint Language (ABL), dual-brain runtime, and machine architect that generates agents from plain-language objectives. The platform combines NLP, machine learning, and knowledge graphs for agent governance and optimization.

#agents #multi-agent systems #ABL #governance

Read article →
Bintrail: MySQL Time-Travel Queries Using Indexed Binlogs Engineering 6.0
InfoQ DevOps

Bintrail: MySQL Time-Travel Queries Using Indexed Binlogs

Bintrail adds point-in-time query and row-history lookup capabilities to MySQL via indexed binlogs behind ProxySQL, without modifying MySQL or application code. The tool enables querying data as of past timestamps and reviewing change history, addressing recovery and audit scenarios for the only major relational database lacking native temporal querying.

#MySQL #temporal queries #binlogs #audit

Read article →
Announcing Claude Compliance API support with Cloudflare CASB Security 7.0
Cloudflare Blog

Announcing Claude Compliance API support with Cloudflare CASB

Cloudflare extends its cloud access security broker (CASB) to support Claude Compliance API, giving security teams dashboard visibility into Claude usage without endpoint agents. The integration addresses the gap in AI governance where organizations can block unauthorized tools but lack visibility into how employees interact with sanctioned AI applications.

#CASB #Claude #AI governance #security visibility

Read article →
Integrating AWS API MCP Server with Amazon Quick using Amazon Bedrock AgentCore Runtime AI 7.0
AWS ML Blog

Integrating AWS API MCP Server with Amazon Quick using Amazon Bedrock AgentCore Runtime

This post shows how to use Amazon Bedrock AgentCore Runtime with MCP support to connect Amazon Quick with AWS services via the AWS API MCP Server, letting SREs and DevOps engineers query infrastructure in natural language without context-switching between console, CLI, and dashboards. Agents translate queries like 'Show running EC2 instances in us-east-1' directly to API calls.

#agents #MCP #AWS API #DevOps automation

Read article →
Building multi-tenant agents with Amazon Bedrock AgentCore AI 8.0
AWS ML Blog

Building multi-tenant agents with Amazon Bedrock AgentCore

This post explores architectural patterns for multi-tenant agentic SaaS applications using Amazon Bedrock AgentCore, addressing tenant isolation, identity, observability, data isolation, cost attribution, and noisy neighbor mitigation. Bedrock AgentCore provides managed constructs for agents, MCP hosting, identity management, memory, and evaluations.

#agents #multi-tenant #SaaS architecture #isolation patterns

Read article →
Break the context window barrier with Amazon Bedrock AgentCore AI 8.0
AWS ML Blog

Break the context window barrier with Amazon Bedrock AgentCore

This post demonstrates implementing Recursive Language Models (RLM) using Amazon Bedrock AgentCore Code Interpreter and Strands Agents SDK to process documents with no upper bound on context size. Agents orchestrate sub-LLM calls from a sandboxed Python environment to analyze specific document sections, solving the lost-in-the-middle problem for million-character documents.

#agents #context window #RLM #document analysis

Read article →
Build AI agents for business intelligence with Amazon Bedrock AgentCore AI 8.0
AWS ML Blog

Build AI agents for business intelligence with Amazon Bedrock AgentCore

OPLOG, a fulfillment company, built a production BI system using three AI agents on Amazon Bedrock AgentCore with Strands Agents SDK, integrating Claude Sonnet and Bedrock Knowledge Bases for RAG. The system autonomously processes transactions and delivers real-time intelligence, achieving 35% reduction in sales cycles, 91% improvement in CRM data completeness, and 98% reduction in manual research time.

#agents #business intelligence #RAG #multi-agent

Read article →
Build an AI-powered recruitment assistant using Amazon Bedrock AI 6.0
AWS ML Blog

Build an AI-powered recruitment assistant using Amazon Bedrock

This post presents a reference architecture for an AI-powered recruitment assistant using Amazon Bedrock that automates resume parsing, candidate scoring, skill assessment, and interview question generation. Amazon Bedrock Guardrails provide PII anonymization, prompt attack detection, and bias filtering across a serverless architecture.

#agents #recruitment #Guardrails #PII protection

Read article →
The top announcements for startups from Google I/O '26 AI 6.0
Google Cloud Blog

The top announcements for startups from Google I/O '26

Google Cloud announced a unified Agent Platform for the agentic era, new TPUs optimized for training and inference, an Agentic Data Cloud, and integration of Wiz's cloud security platform with Google Threat Intelligence. Startups like Photoroom, Satisfi Labs, and Notion are building on the stack.

#agents #TPU #BigQuery #Gemini

Read article →
AI Studio unlocks full-stack vibe coding with Cloud Run, Firebase, and Cloud SQL, no credit card required Cloud 6.0
Google Cloud Blog

AI Studio unlocks full-stack vibe coding with Cloud Run, Firebase, and Cloud SQL, no credit card required

Google AI Studio now integrates with Cloud SQL (PostgreSQL coming next month) alongside Firestore and Firebase Auth for full-stack deployments. New users can deploy two applications to Cloud Run on the Starter Tier without a billing account. The AI agent infers the appropriate database (relational or non-relational) for each app.

#AI Studio #Cloud Run #Cloud SQL #Firestore

Read article →
Shipping features to production just got easier with new feature flags in AppLifecycle Manager Cloud 6.0
Google Cloud Blog

Shipping features to production just got easier with new feature flags in AppLifecycle Manager

Google Cloud announces AppLifecycle Manager Feature Flags (ALM FF) in public preview, a rule-based service that decouples feature releases from code deployments. Teams can now ship code to production with features disabled by default, enabling continuous deployment while controlling the exact moment features go live via toggles, reducing deployment risk.

#feature flags #deployment #release management #continuous deployment

Read article →
Building GitHub's next chapter in accessibility Other 5.0
GitHub Blog

Building GitHub's next chapter in accessibility

GitHub outlines its five-year accessibility program evolution and announces a new strategy shifting from internal focus to community engagement. The company commits to three goals: empower people with disabilities in open-source contribution, increase assistive technology availability, and improve accessibility of mainstream projects.

#accessibility #open-source #inclusive design

Read article →
Build AI-powered dashboard automation agents with NLP on Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Build AI-powered dashboard automation agents with NLP on Amazon Bedrock AgentCore

This post demonstrates a multi-agent architecture using Amazon Bedrock AgentCore and Strands Agents that automates dashboard modifications in response to natural language requests, eliminating multi-day IT turnaround times. The solution integrates Amazon Quick for BI capabilities and uses agents to interpret requirements, navigate APIs, and deploy changes.

#agents #dashboard automation #NLP #multi-agent

Read article →
Building Token-Metered AI Services on Telco AI Factories AI 6.0
NVIDIA Developer Blog

Building Token-Metered AI Services on Telco AI Factories

NVIDIA describes token-metered AI service architecture for sovereign AI factories built on the NVIDIA Cloud Partner reference architecture. The post addresses billing, resource isolation, and production-ready enterprise AI service delivery on telco infrastructure.

#LLM #inference #metering #billing

Read article →
How to build your first end-to-end AI workflow in n8n AI 7.0
The New Stack

How to build your first end-to-end AI workflow in n8n

The New Stack publishes a hands-on tutorial for building an AI-integrated workflow in n8n, using a content publishing pipeline as the example. The guide covers triggers, AI agent integration, conditional routing, human approvals, API calls, and testing patterns applicable to any n8n automation.

#workflow automation #n8n #AI integration #tutorial

Read article →
CI wasn't built for coding agents. Here's what comes next. AI 8.0
The New Stack

CI wasn't built for coding agents. Here's what comes next.

Traditional CI pipelines with 10-30 minute feedback loops are too slow for coding agents that iterate in seconds. The article proposes 'plans': small, agent-pickable end-to-end checks running inside the agent's session against real integration environments, collapsing the inner-loop validation gap that currently forces agents to ship partially validated code.

#agents #CI/CD #testing #LLM

Read article →
Cloud Native Computing Foundation Announces OpenTelemetry's Graduation, Solidifying Status as the De Facto Observability Standard DevOps 7.0
CNCF Blog

Cloud Native Computing Foundation Announces OpenTelemetry's Graduation, Solidifying Status as the De Facto Observability Standard

OpenTelemetry graduated from CNCF incubation to stable status, marking production readiness as a vendor-neutral observability standard. The project now has 12,000+ contributors from 2,800+ companies and solves tool fragmentation by standardizing metrics, logs, and traces collection without vendor lock-in.

#observability #OpenTelemetry #metrics #traces

Read article →
"Morally repugnant shortsightedness": Why open source security leaders say companies must stop freeloading on maintainers Security 6.0
The New Stack

"Morally repugnant shortsightedness": Why open source security leaders say companies must stop freeloading on maintainers

OpenSSF announced five new members (ActiveState, Aikido, Minimus, TuxCare, FreeBSD Foundation) joining to address supply-chain security pressures and mandatory compliance standards like the EU Cyber Resilience Act. The foundation emphasizes that industry must fund open source security infrastructure rather than relying on volunteer maintainers.

#security #open-source #supply-chain #compliance

Read article →
Building the agentic agreement enterprise: How developers are unlocking agentic experiences with Docusign's MCP server and platform AI 7.0
The New Stack

Building the agentic agreement enterprise: How developers are unlocking agentic experiences with Docusign's MCP server and platform

Docusign released an MCP server that makes its Intelligent Agreement Management platform agent-ready, allowing Claude, Gemini, Copilot, and ChatGPT to interact with agreement workflows without tab-switching. The server bridges the gap between generalist LLMs and domain-specific business logic, surfacing institutional memory needed for mission-critical agreement automation.

#agents #MCP #LLM #tool-use

Read article →
Cut your AI search costs without sacrificing quality AI 8.0
The New Stack

Cut your AI search costs without sacrificing quality

Vespa AI and Voyage AI introduced asymmetric retrieval to slash query embedding costs: use a high-quality embedding model once at indexing time, then embed queries with a tiny local model. Voyage's voyage-4 family shares a common vector space across all four models, eliminating reindexing and reducing query embedding bills from ~$15,500/month to near-zero at 10K QPS.

#RAG #embeddings #cost-optimization #retrieval

Read article →
Presentation: The Ironies of A^2 I^2 AI 7.0
InfoQ DevOps

Presentation: The Ironies of A^2 I^2

J. Paul Reed discusses how the 40-year-old concept of automation ironies is amplified by AI, showing that advanced systems often make human operators more critical while degrading their intervention skills. Real-world incident stories illustrate how over-reliance on AI can double recovery times and why maintaining resilience requires understanding these paradoxes.

#automation #AI incidents #resilience #incident response

Read article →
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories Security 5.0
The Hacker News

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

Weekly threat roundup covering Linux rootkits, router 0-days, AI-driven intrusions, and scam kits. The bulletin highlights a shift in attacker tactics: exploiting trusted infrastructure (updates, apps, cloud services, support channels) rather than forcing new breaches, making detection harder.

#rootkits #0-day #supply-chain #threat-intelligence

Read article →
How NetEase Games achieved 30-second LLM cold starts on Kubernetes AI 9.0
CNCF Blog

How NetEase Games achieved 30-second LLM cold starts on Kubernetes

NetEase Games reduced LLM inference cold starts from 42 minutes to 3 minutes on Kubernetes by using Fluid's prefetching workflow to cache model weights locally instead of pulling from remote storage. For 70B-class models, this transformed serverless GPU infrastructure from theoretical to operationally viable for bursty game traffic.

#LLM #inference #Kubernetes #GPU

Read article →
When Identity is the Attack Path Security 7.0
The Hacker News

When Identity is the Attack Path

Analysis of how cached AWS access keys on a single Windows machine, obtained through normal credential caching, can expose 98% of cloud entities to compromise. The article demonstrates that standard AWS behavior and proper configuration are insufficient to prevent identity-based lateral movement.

#AWS #identity #lateral-movement #cloud-security

Read article →
Securing Your Gemini and Google API Keys Security 7.0
Google Cloud Blog

Securing Your Gemini and Google API Keys

Google Cloud publishes guidance on securing API keys used for Gemini and Google Cloud APIs, addressing widespread misuse after seeing requests for protection tutorials. The post covers key generation best practices including creating keys in standalone projects, restricting API access, and limiting client applications to reduce hijacking risk.

#API keys #security #Gemini #credential management

Read article →
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension Security 8.0
The Hacker News

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

GitHub confirmed that internal repository breach resulted from a compromised employee device running a poisoned version of the Nx Console VS Code extension (nrwl.angular-console). The extension was breached after one of the Nx developers' systems was hacked, enabling supply-chain compromise of GitHub's own infrastructure.

#supply-chain #VS Code extension #GitHub #malware

Read article →
NanoCo bets the future of enterprise AI is one sandboxed agent per employee AI 8.0
The New Stack

NanoCo bets the future of enterprise AI is one sandboxed agent per employee

NanoCo launched a managed enterprise service deploying one Docker-sandboxed AI agent per employee, each isolated and personalized to individual roles and tools. The company raised $12M seed funding led by Valley Capital Partners with Docker and Vercel as participants. NanoClaw, the open-source agent framework, has accumulated 29k GitHub stars since February launch.

#agents #sandboxing #Docker #enterprise-AI

Read article →
Mastering Agentic Techniques: AI Agent Customization AI 6.0
NVIDIA Developer Blog

Mastering Agentic Techniques: AI Agent Customization

NVIDIA blog post outlines nine techniques for customizing autonomous AI agents to excel at specific tasks. Covers methods for equipping agents with the right capabilities for logistics routing, support ticket triage, code generation, and multistep workflow orchestration.

#agents #tool-use #customization #agentic-patterns

Read article →
Multimodal evaluators: MLLM-as-a-judge for image-to-text tasks in Strands Evals AI 8.0
AWS ML Blog

Multimodal evaluators: MLLM-as-a-judge for image-to-text tasks in Strands Evals

AWS Strands Evals SDK now includes four multimodal LLM-as-a-Judge evaluators (Overall Quality, Correctness, Faithfulness, Instruction Following) that score image-to-text outputs by sending images directly to a judge model alongside queries and responses. These evaluators catch visual hallucinations and factual errors in document understanding, chart analysis, and shopping applications, and integrate into CI pipelines as drop-in replacements for text-only judges.

#evals #multimodal #LLM-as-Judge #vision

Read article →
Build real-time voice applications with Amazon SageMaker AI and vLLM AI 8.0
AWS ML Blog

Build real-time voice applications with Amazon SageMaker AI and vLLM

AWS SageMaker AI now supports bidirectional streaming for real-time inference, enabling continuous two-way data flow between clients and model containers. Combined with vLLM's Realtime API using WebSockets, this enables deployment of Mistral's Voxtral-Mini-4B-Realtime-2602 speech model for low-latency speech-to-text applications like voice agents and live captioning without waiting for full audio buffers.

#streaming #real-time #speech-to-text #inference

Read article →
Encrypting large artifacts and streaming workloads with Vault DevOps 6.0
HashiCorp Blog

Encrypting large artifacts and streaming workloads with Vault

HashiCorp Vault introduced an SDK enabling envelope encryption with Vault Transit, allowing applications to encrypt and decrypt large artifacts and streaming data locally while Vault manages cryptographic keys and access policies. This avoids performance bottlenecks from sending large payloads to a centralized encryption service.

#encryption #key management #Vault #envelope encryption

Read article →
Introducing Agent Executor, Google's distributed Agent Runtime AI 8.0
Google Cloud Blog

Introducing Agent Executor, Google's distributed Agent Runtime

Google released Agent Executor, an open-source runtime for long-running agent workflows that provides durable execution with resumption after outages, secure sandboxing, and session consistency. The runtime addresses operational challenges in production agent deployments that run for hours or days with human-in-the-loop confirmations.

#agents #distributed-systems #durable-execution #sandboxing

Read article →
Agent Sandbox on GKE is now available for everyone, and a first look at Agent Substrate AI 8.0
Google Cloud Blog

Agent Sandbox on GKE is now available for everyone, and a first look at Agent Substrate

Google Cloud's Agent Sandbox on GKE is now generally available after 16x growth in adoption since preview, providing secure, low-latency execution for AI agents at scale. The announcement also introduces Agent Substrate, an open-source project extending agentic infrastructure density and integration with the broader agent ecosystem.

#agents #Kubernetes #GKE #sandboxing

Read article →
Benchmark and optimize LLMs on-device with AI Edge Portal AI 7.0
Google Cloud Blog

Benchmark and optimize LLMs on-device with AI Edge Portal

Google AI Edge Portal now supports automated benchmarking and debugging of on-device LLMs across over 120 representative Android device types, testing latency, memory consumption, and initialization time. The new capabilities help developers optimize generative AI performance across diverse CPU, GPU, and NPU backends without manual device testing.

#LLM #edge-inference #mobile #benchmarking

Read article →
Add a Specialized Deep Research Skill to Agent Harnesses AI 6.0
NVIDIA Developer Blog

Add a Specialized Deep Research Skill to Agent Harnesses

NVIDIA post explains how to extend agent harnesses like Claude Code, Codex, and LangChain Deep Agents with specialized deep research capabilities for multi-document synthesis, decision briefs backed by enterprise data, and long-horizon analysis with source attribution. Addresses the complexity gap when orchestrators need to perform research beyond their native capabilities.

#agents #RAG #tool-use #research

Read article →
Azure IaaS: Deploy high-performance workloads with a system-level approach Cloud 6.0
Azure Blog

Azure IaaS: Deploy high-performance workloads with a system-level approach

Microsoft Azure publishes guidance on system-level performance optimization for IaaS workloads, covering AI model training, Kubernetes scaling, and business-critical databases. The article argues that performance is not a single resource decision but emerges from coordinated CPU, storage, and networking, with dynamic bottleneck shifting requiring holistic tuning.

#Azure #performance #IaaS #system optimization

Read article →
Urban Outfitters achieves major cost savings by moving Sterling OMS to AlloyDB for PostgreSQL Cloud 5.0
Google Cloud Blog

Urban Outfitters achieves major cost savings by moving Sterling OMS to AlloyDB for PostgreSQL

Urban Outfitters migrated its 11TB IBM Sterling Order Management System database from Oracle to Google Cloud's AlloyDB for PostgreSQL, reducing licensing costs and operational complexity. The move demonstrates AlloyDB's ability to handle large-scale transactional workloads for retail order management.

#AlloyDB #PostgreSQL #database-migration #cost-optimization

Read article →
Why six AI labs built the same product for knowledge workers in four months AI 9.0
The New Stack

Why six AI labs built the same product for knowledge workers in four months

Six major AI vendors (Anthropic, Perplexity, Microsoft, OpenAI, Google, Amazon) launched nearly identical agent products for knowledge workers between January and April 2025. Each combines agentic harnesses, frontier models, browser automation, file access, persistent memory, and scheduled automations. Claude Code's success proved the pattern; all six converged on the same architecture within months.

#agents #agentic-harness #knowledge-workers #convergence

Read article →
Building for accessibility in an AI-first development world AI 7.0
The New Stack

Building for accessibility in an AI-first development world

LLM-based code generation tools produce structurally inaccessible output because models trained on the existing web inherit its accessibility gaps. Problems like conflicting ARIA labels, incorrect semantic heading hierarchy, and broken keyboard focus only surface when tested with screen readers and assistive technology, not in visual review.

#LLM #accessibility #code generation #WCAG

Read article →
Governing AI agents at scale with Unity Catalog AI 7.0
Databricks Blog

Governing AI agents at scale with Unity Catalog

Databricks addresses governance and control of proliferating AI agents using Unity Catalog for access control, lineage tracking, and audit trails. The post acknowledges the shift from dozens to thousands of agents in enterprises and positions Unity Catalog as a governance layer for agent lifecycle and credential management.

#agents #governance #Unity Catalog #MLOps

Read article →
OpenAI Outlines WebRTC Architecture for Low-Latency Voice AI at Scale AI 7.0
InfoQ DevOps

OpenAI Outlines WebRTC Architecture for Low-Latency Voice AI at Scale

OpenAI redesigned its WebRTC architecture for low-latency voice AI inference at global scale, replacing traditional media termination with a relay-transceiver model optimized for Kubernetes and cloud load balancers. Session state lives in a dedicated transceiver layer while relays reduce UDP exposure and keep media routing geographically close to users.

#WebRTC #voice AI #Kubernetes #low-latency

Read article →
Agent AI is Coming. Are You Ready? AI 6.0
The Hacker News

Agent AI is Coming. Are You Ready?

Orchid Security's 2026 Identity Gap report reveals that unmanaged identity elements now exceed visible ones by 57% to 43%, creating a critical security gap as enterprises deploy autonomous agents. The research highlights that identity infrastructure is unprepared for agent-driven workloads and multi-tenant access patterns.

#agents #identity #access-control #security

Read article →
Introducing Prempti: Policy and visibility for AI coding agents AI 8.0
CNCF Blog

Introducing Prempti: Policy and visibility for AI coding agents

The Falco team introduced Prempti, a Falco ecosystem project extending runtime security policy enforcement to AI coding agents. Prempti provides structured visibility into agent tool-call lifecycles (bash commands, file writes, credential access) and policy-driven controls, addressing the black-box nature of agent execution on developer machines.

#agents #security #runtime security #policy

Read article →
Cursor bets on cheaper coding with Composer 2.5 and Kimi K2.5 AI 7.0
The New Stack

Cursor bets on cheaper coding with Composer 2.5 and Kimi K2.5

Cursor released Composer 2.5, built on Moonshot Kimi K2.5, showing significant benchmark gains over Composer 2 (69.3% on Terminal-Bench 2.0 vs 61.7%, 63.2% on CursorBench v3.1 vs 52.2%) through scaled training and reinforcement learning improvements. The model remains cheaper than Opus 4.7 and GPT-5.5 while narrowing the performance gap.

#LLM #code generation #benchmarks #model training

Read article →
At Google I/O 2026, Antigravity gets a new job description AI 8.0
The New Stack

At Google I/O 2026, Antigravity gets a new job description

Google repositioned Antigravity from a coding environment to an agent orchestration platform, launching Antigravity 2.0 as a desktop application alongside CLI, SDK, and enterprise cloud integration for managing teams of autonomous AI agents. The company claims millions of developers already use the platform.

#agents #agent orchestration #platform #multi-agent systems

Read article →
Announcing etcd 3.7.0-beta.0 DevOps 7.0
Kubernetes Blog

Announcing etcd 3.7.0-beta.0

etcd v3.7.0-beta.0 introduces RangeStream, an RPC feature that streams large result sets in chunks instead of forcing clients to buffer entire responses, reducing latency and memory predictability. The release also includes security improvements and cleanup of legacy components. The project is seeking community testing before general availability.

#etcd #Kubernetes #distributed-systems #streaming

Read article →
Automate Data & KPI Monitoring with SQL Alerts Cloud 6.0
Databricks Blog

Automate Data & KPI Monitoring with SQL Alerts

Databricks SQL Alerts automate data quality and KPI monitoring by triggering notifications when metrics fall outside defined thresholds, replacing manual dashboard checks. The feature integrates with Databricks SQL and supports alerting to email, Slack, and webhooks for real-time incident response.

#monitoring #SQL #alerting #data-quality

Read article →
Mastering Agentic Techniques: AI Agent Evaluation AI 7.0
NVIDIA Developer Blog

Mastering Agentic Techniques: AI Agent Evaluation

NVIDIA distinguishes agent evaluation from model benchmarking: while model evals test foundation model capabilities on static tasks, agent evals measure end-to-end system behavior including planning, tool use, and uncertainty handling. The post covers practical frameworks for assessing agent performance across these dimensions.

#agents #evals #tool-use #LLM

Read article →
Meet Gordon: Docker's AI Agent For Your Entire Container Workflow AI 7.0
Docker Blog

Meet Gordon: Docker's AI Agent For Your Entire Container Workflow

Gordon is Docker's AI agent built into Desktop 4.74+ and the CLI that understands your container environment, proposes fixes, and takes action across build, compose, and deployment workflows. It reads logs, inspects configs, and diagnoses issues like cache invalidation and service connectivity problems without requiring you to paste context into generic coding assistants. All actions require explicit approval and permissions reset per session.

#agents #Docker #container-debugging #LLM

Read article →
Azure Files Entra-Only identities: Advancing cloud-native identity and security Cloud 7.0
Azure Blog

Azure Files Entra-Only identities: Advancing cloud-native identity and security

Azure Files now supports Entra-Only identities for SMB authentication, eliminating the need for on-premises Active Directory, hybrid sync, or managed domain controllers. Organizations can authenticate users and devices directly via Microsoft Entra ID with native Kerberos support, simplifying architecture and reducing management overhead. The feature includes built-in B2B support for Azure Virtual Desktop, enabling external partners to use existing identities with FSLogix profiles without duplicate accounts.

#Azure Files #identity #Entra ID #SMB

Read article →
Google wants to make the web agent-ready AI 8.0
The New Stack

Google wants to make the web agent-ready

Google announced WebMCP, an open standard for exposing JavaScript functions and HTML forms to AI agents, enabling agents to interact with websites as first-class tools. The initiative includes Chrome browser enhancements and developer tooling to bridge agentic workflows with web platform capabilities.

#agents #WebMCP #web standards #tool use

Read article →
Google's Gemini 3.5 Flash beats the frontier models AI 8.0
The New Stack

Google's Gemini 3.5 Flash beats the frontier models

Google released Gemini 3.5 Flash, which outperforms Gemini 3.1 Pro on multiple benchmarks including TerminalBench 2.1 (76.2% vs 70.3%), GDPval-AA, MCP Atlas, and CharXiv reasoning. The Flash model competes with frontier models like GPT 5.5 and Opus 4.7, particularly on tool-use benchmarks.

#LLM #Gemini #benchmarks #tool use

Read article →
Google now lets developers use GPT and Claude in Android Studio AI 7.0
The New Stack

Google now lets developers use GPT and Claude in Android Studio

Google announced multi-model support in Android Studio, allowing developers to choose Gemini, GPT, or Claude for code generation, plus local Gemma 4 support in the canary build. Android CLI reached 1.0 release and integrates with Google Antigravity app for development workflows.

#code generation #Android #multi-model #LLM

Read article →
What Google I/O '26 means for developing agents on Google Cloud AI 7.0
Google Cloud Blog

What Google I/O '26 means for developing agents on Google Cloud

Google introduced Antigravity 2.0 and Managed Agents API as a unified toolkit for local agent development and secure cloud deployment. The Gemini Enterprise Agent Platform now includes session memory and centralized governance, with a four-rung ladder model spanning quick-start to full production control.

#agents #Antigravity 2.0 #Managed Agents API #developer tools

Read article →
The future of agentic development: Redefining the data practitioner lifecycle with Data Agent Kit AI 7.0
Google Cloud Blog

The future of agentic development: Redefining the data practitioner lifecycle with Data Agent Kit

Google released Data Agent Kit, an open-source collection of data engineering skills and Model Context Protocol tools that integrate into VS Code, Claude Code, Gemini CLI, and Antigravity CLI. It provides pre-codified pathways for query optimization, ML best practices, data validation, and secure connections to BigQuery, AlloyDB, and Google Cloud Storage.

#agents #MCP #data engineering #BigQuery

Read article →
Google now lets you vibe code native Android apps in AI Studio AI 6.0
The New Stack

Google now lets you vibe code native Android apps in AI Studio

Google AI Studio now supports building native Kotlin-based Android apps from prompts, with the ability to test directly on device and export to Android Studio for refinement. The tool removes the installation barrier by running entirely in-browser and supports any popular LLM, not just Gemini.

#code generation #Android #Kotlin #LLM

Read article →
Google launches $100 AI Ultra plan and cuts top tier to $200 AI 5.0
The New Stack

Google launches $100 AI Ultra plan and cuts top tier to $200

Google introduced a $100/month AI Ultra plan between its existing $20 and $200 tiers, and reduced the top-tier price from $250 to $200. The company switched from prompt-based limits to a compute-used metering model and offers 5x higher usage limits in Antigravity and Gemini apps at the $100 tier.

#pricing #LLM #subscription #Gemini

Read article →
Azure hub-and-spoke generally available for HCP Vault Dedicated Cloud 6.0
HashiCorp Blog

Azure hub-and-spoke generally available for HCP Vault Dedicated

HCP Vault Dedicated now supports Azure hub-and-spoke networking topology, enabling enterprises to integrate Vault into centralized Azure network architectures without custom routing or peering patterns. HashiCorp Virtual Networks (HVNs) provide secure private connectivity for hybrid and multi-cloud environments.

#Vault #Azure #networking #HCP

Read article →
Stop rogue AI: How Unity Catalog secures your agent actions AI 8.0
Databricks Blog

Stop rogue AI: How Unity Catalog secures your agent actions

Databricks Unity Catalog now provides access controls for AI agent tool use, preventing agents from executing unauthorized actions on external systems. The feature enables fine-grained permission policies for agent-to-tool connections, addressing supply-chain and privilege-escalation risks.

#agents #security #tool-use #access-control

Read article →
Why AI Security Infrastructure is Now a CMO Priority Security 5.0
Databricks Blog

Why AI Security Infrastructure is Now a CMO Priority

Databricks argues that AI security infrastructure has become a board-level concern, citing emerging threats to LLM supply chains, model poisoning, and prompt injection attacks. The article positions security governance for AI systems as a CMO responsibility alongside traditional security.

#AI-security #LLM #threat-landscape #governance

Read article →
Scalable voice agent design with Amazon Nova Sonic: multi-agent, tools, and session segmentation AI 7.0
AWS ML Blog

Scalable voice agent design with Amazon Nova Sonic: multi-agent, tools, and session segmentation

AWS details architectural patterns for building scalable voice agents using Amazon Nova Sonic, Bedrock AgentCore, and Strands BidiAgent. The post covers three design patterns with trade-offs for minimizing latency in real-time speech-to-speech interactions, leveraging microVM-level session isolation and bidirectional WebSocket streaming to prevent noisy-neighbor effects.

#agents #voice #LLM #real-time

Read article →
Extending conversational memory in Kiro CLI using Amazon Bedrock AgentCore Memory AI 7.0
AWS ML Blog

Extending conversational memory in Kiro CLI using Amazon Bedrock AgentCore Memory

AWS demonstrates how to extend Kiro CLI's conversational memory across sessions using a custom Model Context Protocol server integrated with Bedrock AgentCore Memory. The solution stores and retrieves conversation context with semantic search, allowing agents to maintain context and preferences across multiple terminal sessions without repetitive context-setting.

#agents #memory #MCP #context

Read article →
Accelerate ML feature pipelines with new capabilities in Amazon SageMaker Feature Store AI 7.0
AWS ML Blog

Accelerate ML feature pipelines with new capabilities in Amazon SageMaker Feature Store

SageMaker Feature Store now supports Apache Iceberg table format, streaming ingestion, scalable batch ingestion, and AWS Lake Formation access control via SageMaker Python SDK v3.8.0. The update addresses metadata bloat (50+ TB in one year) and enables automatic fine-grained access control at feature group creation without manual configuration.

#MLOps #feature-store #Iceberg #access-control

Read article →
Implementing programmatic tool calling on Amazon Bedrock AI 8.0
AWS ML Blog

Implementing programmatic tool calling on Amazon Bedrock

AWS explains programmatic tool calling (PTC), where models generate Python code to invoke multiple tools in a sandboxed environment rather than orchestrating one tool call per round trip. This reduces latency and token consumption for multi-tool workflows by sampling the model once and returning only the final result, with three implementation patterns shown for Bedrock.

#tool-use #agents #LLM #latency

Read article →
Valkey 9.1 trims memory 10% and pulls search into the core Engineering 7.0
The New Stack

Valkey 9.1 trims memory 10% and pulls search into the core

Valkey 9.1 reduces per-key memory usage by 10% through reworked internal data layout, requires no tuning or reconfiguration, and integrates full-text search capabilities into the core engine. The release emphasizes compute efficiency and modularity for production workloads, with updates to Valkey Admin, Valkey Search, and the GLIDE client.

#Valkey #memory optimization #search #Redis

Read article →
Anthropic debuts MCP tunnels and self-hosted sandboxes to lock down AI agent infrastructure AI 8.0
The New Stack

Anthropic debuts MCP tunnels and self-hosted sandboxes to lock down AI agent infrastructure

Anthropic announced self-hosted sandboxes in public beta and MCP tunnels in research preview for Claude Managed Agents, allowing organizations to run agent tool execution on their own infrastructure or via managed providers like Cloudflare, Modal, and Vercel. The agent loop remains on Anthropic's infrastructure while tool execution moves to customer environments, preserving data privacy and security controls.

#agents #sandboxes #MCP #Claude

Read article →
Introducing AI Spend Controls with Unity AI Gateway AI 7.0
Databricks Blog

Introducing AI Spend Controls with Unity AI Gateway

Databricks Unity AI Gateway now includes AI Spend Controls, allowing teams to set per-user and per-model budget caps for LLM API calls, preventing runaway costs. The feature integrates with Databricks' gateway to enforce quotas across multiple LLM providers.

#cost-control #LLM #API-gateway #budgeting

Read article →
Why production RAG systems give confident, wrong answers at scale AI 8.0
The New Stack

Why production RAG systems give confident, wrong answers at scale

Production RAG systems fail not because of weak LLMs but because retrieval architectures designed for small datasets collapse under scale with millions of documents, messy metadata, and access controls. As retrieval quality degrades silently, models compensate by hallucinating context, producing fluent but increasingly incorrect answers.

#RAG #retrieval #vector databases #LLM

Read article →
How to safeguard AI workloads with Unity AI Gateway Guardrails AI 6.0
Databricks Blog

How to safeguard AI workloads with Unity AI Gateway Guardrails

Databricks details guardrail capabilities in Unity AI Gateway for securing AI workloads against injection attacks, data leakage, and policy violations. The post covers practical implementation of content filtering, input/output validation, and audit logging to prevent AI-related security incidents.

#AI safety #guardrails #prompt injection #observability

Read article →
What's new in Unity AI Gateway: service policies, guardrails, observability, and cost controls for AI agents and MCPs AI 7.0
Databricks Blog

What's new in Unity AI Gateway: service policies, guardrails, observability, and cost controls for AI agents and MCPs

Databricks announces new governance features in Unity AI Gateway including service policies, enhanced guardrails, observability dashboards, and cost controls for AI agents and Model Context Protocol (MCP) integrations. The update addresses the gap between rapid agent adoption and governance maturity.

#AI agents #governance #MCP #cost controls

Read article →
Steve Yegge's AI agent orchestration project Gas Town comes to the cloud and brings the Wasteland with it AI 7.0
The New Stack

Steve Yegge's AI agent orchestration project Gas Town comes to the cloud and brings the Wasteland with it

Gas Town, Steve Yegge's multi-agent orchestration system for software development, is moving to the cloud via partnership with Kilo, a model-agnostic coding agent platform founded by GitLab co-founder Sid Sijbrandij. The ecosystem now includes Wasteland and Gas City, with agents coordinating specialized roles (coding, testing, review, operations) across shared codebases.

#agents #orchestration #multi-agent #coding

Read article →
Announcing Claude Managed Agents on Cloudflare AI 7.0
Cloudflare Blog

Announcing Claude Managed Agents on Cloudflare

Cloudflare integrated Claude Managed Agents with Cloudflare Sandboxes, enabling agents to run on Claude Platform while executing code and tool calls in Cloudflare's secure environment. The integration provides customizable proxies for credential injection, sandbox observability with SSH access, and lightweight stateful Linux microVMs.

#agents #Claude #sandboxes #security

Read article →
Pulumi bets infrastructure's next decade belongs to AI agents AI 8.0
The New Stack

Pulumi bets infrastructure's next decade belongs to AI agents

Pulumi shipped agent-optimized capabilities including ephemeral 72-hour Cloud accounts, npx pulumi one-shot invocation, and pulumi do imperative verb for single-resource provisioning. AI agents already drive 20% of operations on Pulumi's platform, up from near-zero a year ago.

#agents #infrastructure #IaC #Pulumi

Read article →
The New Phishing Click: How OAuth Consent Bypasses MFA Security 9.0
The Hacker News

The New Phishing Click: How OAuth Consent Bypasses MFA

EvilTokens, a phishing-as-a-service platform launched in February 2026, compromised over 340 Microsoft 365 organizations within five weeks by using OAuth consent screens to bypass MFA. Victims complete normal MFA challenges but unknowingly grant token access to attackers.

#phishing #OAuth #MFA-bypass #credential-theft

Read article →
Kernel-Level Ground Truth: Why eBPF is Replacing User-Space Agents for Security Observability DevOps 7.0
InfoQ DevOps

Kernel-Level Ground Truth: Why eBPF is Replacing User-Space Agents for Security Observability

eBPF probes attached to Linux kernel syscall interfaces provide consistent security visibility even during container compromises, replacing traditional user-space agents. Kernel-level filtering reduces CPU overhead and data volume compared to post-hoc collection, improving operational efficiency for threat detection and forensics.

#eBPF #security #observability #kernel

Read article →
GitHub Actions Supply Chain Attack Redirects Tags to Steal CI/CD Credentials Security 8.0
The Hacker News

GitHub Actions Supply Chain Attack Redirects Tags to Steal CI/CD Credentials

Threat actors compromised the popular GitHub Actions workflow 'actions-cool/issues-helper' and redirected all repository tags to malicious commits to harvest CI/CD credentials and exfiltrate them to attacker-controlled servers. The attack demonstrates tag-hijacking as a supply chain vector against workflows relying on semantic versioning.

#supply chain #GitHub Actions #CI/CD #credential theft

Read article →
CISA Admin Leaked AWS GovCloud Keys on Github Security 9.0
Krebs on Security

CISA Admin Leaked AWS GovCloud Keys on Github

A CISA contractor's public GitHub repository exposed highly privileged AWS GovCloud credentials, internal CISA/DHS tokens, plaintext passwords, and build/deployment documentation. GitGuardian researcher Guillaume Valadon flagged the 'Private-CISA' repository after the account owner failed to respond, revealing one of the most significant government data leaks in recent history.

#credential exposure #AWS #GitHub #government

Read article →
Why Google's Remy leaks have enterprise architects rethinking the AI stack AI 6.0
The New Stack

Why Google's Remy leaks have enterprise architects rethinking the AI stack

Google is reportedly developing Remy, an OpenClaw-style agent that performs actions on behalf of users within Gemini, integrating with Google services and representing a shift toward orchestrated AI services embedded in workflows rather than chat-based tools. The unconfirmed reports suggest Remy could significantly advance autonomous agent capabilities in enterprise environments.

#agents #Gemini #autonomous #enterprise

Read article →
AWS Weekly Roundup: AWS Transform at 1 year, Claude Platform on AWS, EC2 M3 Ultra Mac instances, and more (May 18, 2026) AI 7.0
AWS News

AWS Weekly Roundup: AWS Transform at 1 year, Claude Platform on AWS, EC2 M3 Ultra Mac instances, and more (May 18, 2026)

AWS Transform, an agentic AI service for modernizing enterprise applications, marks its 1-year anniversary with 4.5+ billion lines of code processed and 1.6+ million hours saved across thousands of customers. The service now integrates with Claude, Cursor, Codex, and Kiro agents, and AWS launched Claude Platform on AWS for direct access to Anthropic's native APIs and console.

#agents #code modernization #LLM #AWS Transform

Read article →
GitHub will start paying some bug bounty hunters in swag instead of cash Security 6.0
The New Stack

GitHub will start paying some bug bounty hunters in swag instead of cash

GitHub is tightening bug bounty submission standards as AI-assisted reports flood the program with low-quality, unvalidated findings. The company is shifting payouts to swag for reports lacking proof-of-concept, demonstrated impact, or clear exploitable boundaries, while emphasizing that AI tool use itself is acceptable but output quality is what matters.

#bug bounty #security research #AI-assisted #supply chain

Read article →
Prompting Amazon Nova 2 for content moderation AI 6.0
AWS ML Blog

Prompting Amazon Nova 2 for content moderation

This post demonstrates prompt-based content moderation using Amazon Nova 2 Lite against the MLCommons AILuminate taxonomy, avoiding the need for fine-tuning or training data. Benchmarks compare Nova 2 Lite's moderation performance against other foundation models on three public datasets, with structured and free-form prompting techniques that adapt to custom policies.

#LLM #prompting #content moderation #evals

Read article →
AI security readiness is now the No. 1 obstacle to adoption, Linux Foundation finds AI 5.0
The New Stack

AI security readiness is now the No. 1 obstacle to adoption, Linux Foundation finds

A Linux Foundation report identifies security readiness as the primary blocker to AI deployment, with 67% of organizations reporting pressure to accelerate AI rollout despite unresolved security concerns. The report recommends hiring security-aware staff and upskilling existing teams to close AI and security capability gaps.

#AI security #risk management #talent #adoption

Read article →
Aderant transforms cloud operations with Amazon Quick AI 6.0
AWS ML Blog

Aderant transforms cloud operations with Amazon Quick

Aderant, a legal software provider, deployed Amazon Quick to unify search across six vendor systems and automate documentation workflows for its 38-person Cloud Engineering team. The implementation achieved 90% faster search times and 75% documentation acceleration, reducing manual search time from 30-45 minutes per task.

#LLM #RAG #search #documentation

Read article →
Take your local GitHub sessions anywhere AI 8.0
GitHub Blog

Take your local GitHub sessions anywhere

GitHub Copilot now supports remote control for CLI sessions and introduces remote control in VS Code and JetBrains IDEs, allowing developers to monitor and manage multi-surface agent workflows from any device via github.com or GitHub Mobile. Sessions persist across CLI, web, and mobile with real-time progress tracking and mid-flight instruction updates.

#agents #GitHub Copilot #CLI #IDE

Read article →
How Google Does It: Fleet-wide, large-scale A/B experimentation DevOps 7.0
Google Cloud Blog

How Google Does It: Fleet-wide, large-scale A/B experimentation

Google shares methodology for A/B testing infrastructure changes like memory allocators and kernel schedulers across fleet-wide deployments. The post covers four pillars: application-level vs. machine-level experimentation, balanced setup, binary hermeticity, and performance metrics selection.

#A/B-testing #infrastructure #kernel #performance

Read article →
Beyond the Query: 5 Scenarios Laying the Foundation for the Agentic Era AI 7.0
Google Cloud Blog

Beyond the Query: 5 Scenarios Laying the Foundation for the Agentic Era

Google outlines five architectural patterns for exposing enterprise data to autonomous systems, moving from static reports to dynamic LLM-driven access. The patterns span from manual SQL to Model Context Protocol (MCP) standardized workflows, addressing trust, complexity, security, and semantic accuracy in BigQuery and legacy data sources.

#agents #LLM #data-access #MCP

Read article →
What we announced in streaming AI at Next '26 AI 7.0
Google Cloud Blog

What we announced in streaming AI at Next '26

Google Cloud announced a unified streaming data platform addressing real-time AI challenges, specifically 'context lag' where agentic AI systems must choose between stale batch data or memory-intensive context windows. The platform integrates Google Cloud-native and open-source services for large-scale AI training and inference with real-time data.

#agentic AI #streaming data #real-time analytics #context window

Read article →
Integrate Atlassian Confluence Cloud with Amazon Quick AI 6.0
AWS ML Blog

Integrate Atlassian Confluence Cloud with Amazon Quick

AWS Quick now integrates with Atlassian Confluence Cloud to enable natural language search over documentation without context switching. Teams can query Confluence pages, retrieve content, and manage updates while accessing data from S3, JIRA, and other business applications through a unified interface.

#RAG #semantic search #knowledge bases #LLM

Read article →
Build custom code-based evaluators in Amazon Bedrock AgentCore AI 8.0
AWS ML Blog

Build custom code-based evaluators in Amazon Bedrock AgentCore

Amazon Bedrock AgentCore Evaluations now supports custom code-based evaluators via AWS Lambda alongside LLM-as-a-Judge checks. Developers can implement deterministic validation logic for domain-specific requirements like JSON schema conformance, PII filtering, and business rule enforcement without consuming foundation model tokens.

#evals #agents #LLM-as-Judge #validation

Read article →
The Open Agent Leaderboard AI 7.0
Hugging Face Blog

The Open Agent Leaderboard

IBM Research and Hugging Face launched the Open Agent Leaderboard to benchmark and compare agent implementations across standardized tasks. The leaderboard provides a community-driven evaluation framework for assessing agent capabilities, tool use, and reasoning performance.

#agents #evals #benchmarking #leaderboard

Read article →
Coding Agent Horror Stories: The Security Crisis Threatening Developer Infrastructure AI 7.0
Docker Blog

Coding Agent Horror Stories: The Security Crisis Threatening Developer Infrastructure

Docker outlines documented security failures in AI coding agents, where agents have deleted home directories and dropped production databases. The article launches a series examining how autonomous agents can cause critical infrastructure damage and how Docker Sandboxes provide isolation to contain these failures in enterprise environments.

#agents #security #sandbox #code execution

Read article →
What kubectl debug doesn't tell you: The silent evidence gap DevOps 7.0
CNCF Blog

What kubectl debug doesn't tell you: The silent evidence gap

kubectl debug sessions on Kubernetes leave no audit trail in the API after the session ends. Exit codes, session duration, and target container details are discarded once the pod state changes, creating a blind spot in incident response. The article demonstrates the gap with a three-command reproduction on any Kubernetes 1.25+ cluster.

#Kubernetes #debugging #observability #incident-response

Read article →
Project Glasswing: what Mythos showed us AI 8.0
Cloudflare Blog

Project Glasswing: what Mythos showed us

Cloudflare tested Anthropic's Mythos Preview LLM on 50+ internal repositories as part of Project Glasswing to evaluate security-focused frontier models. Mythos Preview demonstrated significant advances in exploit chain construction and vulnerability identification compared to general-purpose models, requiring architectural changes for production-scale deployment.

#LLM #security #vulnerability-detection #Mythos

Read article →
Anthropic acquires Stainless AI 6.0
Anthropic News

Anthropic acquires Stainless

Anthropic has acquired Stainless, a company known for SDK generation and API tooling. The acquisition likely strengthens Anthropic's developer experience and API infrastructure for Claude integrations.

#LLM #Claude #SDK #developer tools

Read article →
Introducing Gemini Omni AI 9.0
DeepMind

Introducing Gemini Omni

DeepMind introduces Gemini Omni, a multimodal foundation model with native support for audio, video, text, and image inputs and outputs. The model enables low-latency streaming interactions and unified reasoning across modalities.

#foundation-models #multimodal #LLM #streaming

Read article →
The Mac mini just became infrastructure AI 7.0
The New Stack

The Mac mini just became infrastructure

Mac mini and Mac Studio are now sold out due to demand from agentic AI tools, with Perplexity, OpenClaw, and Hermes Agent all converging on Mac mini as the preferred always-on agent runtime. Apple's supply constraints and explicit developer recommendations signal a new substrate category emerging for local-first AI agent deployment.

#agents #inference #local-first #Mac

Read article →
The clean-up cost of AI-generated code is what the velocity narrative leaves out AI 7.0
The New Stack

The clean-up cost of AI-generated code is what the velocity narrative leaves out

The New Stack examines hidden technical debt and maintenance costs of AI-generated code at scale. GitHub forecasts 14 billion commits by 2026, but the article argues that rapid code generation via LLMs creates long-term cleanup burdens that velocity metrics ignore. Categorizes stakeholders: Inventors (OpenAI, Anthropic), Researchers, Platforms (GitHub, Cursor, Hugging Face), and Engineering Orgs.

#LLM #code generation #technical debt #MLOps

Read article →
GitHub takes aim at Claude Code and Codex with its new Copilot app AI 8.0
The New Stack

GitHub takes aim at Claude Code and Codex with its new Copilot app

GitHub announced a technical preview of GitHub Copilot app, a standalone desktop application for managing coding agents, issues, pull requests, and development sessions. Built on GitHub Copilot CLI (GA in February), the app runs multiple agents simultaneously, tracks progress across repos, and supports side-by-side diff reviews. Available for macOS, Windows, and Linux.

#LLM #agents #code generation #IDE tooling

Read article →
Forward deployed engineer is AI's hottest job as OpenAI and Google race to hire. Here's how to become one Other 6.0
The New Stack

Forward deployed engineer is AI's hottest job as OpenAI and Google race to hire. Here's how to become one

OpenAI launched Deployment Company, a $4 billion initiative to staff enterprises with forward deployed engineers (FDEs). Google Cloud and Anthropic are simultaneously hiring hundreds of FDEs. The article frames FDEs as the bridge between AI models and production outcomes inside companies, requiring AI engineering stack knowledge, real workflow experience, and customer-facing judgment.

#LLM #AI engineering #deployment #career

Read article →
Finding the molecular switches behind new infectious diseases AI 6.0
DeepMind

Finding the molecular switches behind new infectious diseases

Clare Bryant uses Co-Scientist, a multi-agent AI system built on Gemini, to identify genetic triggers in emerging infectious diseases. The system helps researchers analyze complex biological data and surface molecular mechanisms that drive disease emergence.

#LLM agents #research acceleration #biology #Co-Scientist

Read article →
Opening new paths in aging research AI 6.0
DeepMind

Opening new paths in aging research

Calico Life Sciences uses Co-Scientist to synthesize scattered research findings and generate novel research leads in aging biology. The system connects disparate datasets and literature to surface previously unconnected insights.

#LLM agents #research acceleration #RAG #Co-Scientist

Read article →
Accelerating discovery of liver disease mechanisms AI 6.0
DeepMind

Accelerating discovery of liver disease mechanisms

Filippo Menolascina uses Co-Scientist to identify new liver disease treatments and explain patient-specific drug efficacy. The system analyzes biological mechanisms to predict which patients benefit from existing therapies.

#LLM agents #research acceleration #mechanistic reasoning #Co-Scientist

Read article →
Uniting biological toolkits for a new approach to ALS AI 6.0
DeepMind

Uniting biological toolkits for a new approach to ALS

Co-Scientist enables collaboration between Boston Children's Hospital and MIT labs to explore RNA-based ALS treatments. The system integrates disparate experimental toolkits and research methodologies across institutions.

#LLM agents #research acceleration #multi-institutional #Co-Scientist

Read article →
Uncovering repurposed medicines to fight liver fibrosis AI 6.0
DeepMind

Uncovering repurposed medicines to fight liver fibrosis

Stanford geneticist uses Co-Scientist to identify existing drugs that can be repurposed for chronic liver disease and liver fibrosis treatment. The system screens existing pharmacology against disease mechanisms to surface candidates.

#LLM agents #research acceleration #drug repurposing #Co-Scientist

Read article →
Why Block handed Goose to the Linux Foundation AI 7.0
The New Stack

Why Block handed Goose to the Linux Foundation

Block open-sourced its Goose coding agent and subsequently transferred governance to the newly formed Agentic AI Foundation under the Linux Foundation. The move addressed trademark and governance concerns that were hampering enterprise adoption despite rapid early uptake.

#agents #open-source #governance #coding agents

Read article →
Kubernetes v1.36: New Metric for Route Sync in the Cloud Controller Manager DevOps 6.0
Kubernetes Blog

Kubernetes v1.36: New Metric for Route Sync in the Cloud Controller Manager

Kubernetes v1.36 adds route_controller_route_sync_total, an alpha counter metric to the Cloud Controller Manager, enabling operators to measure the impact of the CloudControllerManagerWatchBasedRoutesReconciliation feature gate. This watch-based approach replaces fixed-interval polling, reducing unnecessary API calls to cloud providers and lowering rate-limit pressure on infrastructure APIs.

#Kubernetes #metrics #Cloud Controller Manager #observability

Read article →
Kubernetes v1.36: Mixed Version Proxy Graduates to Beta DevOps 7.0
Kubernetes Blog

Kubernetes v1.36: Mixed Version Proxy Graduates to Beta

The Mixed Version Proxy (MVP), introduced as alpha in Kubernetes 1.28, reaches beta status in v1.36 and is now enabled by default. MVP solves the problem of incorrect 404 responses during control plane upgrades by proxying requests to peer API servers that can serve newer API versions, preventing garbage collection errors and blocked namespace deletions.

#Kubernetes #API server #upgrades #high availability

Read article →
AWS found bugs in 60% of software requirements. Its fix isn't more AI — it's a 50-year-old logic engine. AI 8.0
The New Stack

AWS found bugs in 60% of software requirements. Its fix isn't more AI — it's a 50-year-old logic engine.

AWS introduces Requirements Analysis in its Kiro agentic platform, which uses LLMs to formalize natural-language specs into mathematical logic, then applies SMT solvers to detect contradictions, ambiguities, and gaps before they propagate into code. The three-stage pipeline catches requirement bugs that typically surface only in production.

#agents #formal verification #SMT solver #requirements engineering

Read article →
Building a general-purpose accessibility agent—and what we learned in the process AI 7.0
GitHub Blog

Building a general-purpose accessibility agent—and what we learned in the process

GitHub describes an experimental accessibility agent integrated into Copilot CLI and VS Code that automatically detects and remediates accessibility issues in pull requests. The agent has reviewed 3,535 PRs with a 68% resolution rate, focusing on WCAG-aligned issues like semantic structure, control naming, and keyboard navigation.

#agents #Copilot #accessibility #code review automation

Read article →
Gemini Live Agent Challenge: Announcing the winners and highlights AI 5.0
Google Cloud Blog

Gemini Live Agent Challenge: Announcing the winners and highlights

Google announced winners of the Gemini Live Agent Challenge, which drew 11,878 participants and 1,536 projects from 151 countries. Winning agents demonstrated multimodal capabilities using the Gemini Live API and Agent Development Kit (ADK), spanning three categories: Live Agent, Creative Storyteller, and UI Navigator.

#agents #Gemini Live API #multimodal #ADK

Read article →
Why AI is failing in the security operations center Security 6.0
The New Stack

Why AI is failing in the security operations center

Agentic AI tools deployed in SOCs underperform because they operate on siloed, stale, or incorrect data across disconnected tools and cloud/on-premises infrastructure. The article examines why real-world SOC complexity defeats vendor demo conditions and highlights data unification as the prerequisite for effective AI.

#agents #SOC #security #data integration

Read article →
Restrict access to sensitive documents in your Amazon Quick knowledge bases for Amazon S3 AI 6.0
AWS ML Blog

Restrict access to sensitive documents in your Amazon Quick knowledge bases for Amazon S3

Amazon Quick now supports document-level access control lists (ACLs) for S3-backed knowledge bases, enabling fine-grained permission enforcement at the document or folder level. When users query the knowledge base, Quick evaluates their identity against ACL configuration and surfaces only authorized content, allowing organizations to safely ingest full document libraries while maintaining compliance.

#RAG #access control #knowledge bases #S3

Read article →
Welcome to BlackFile: Inside a Vishing Extortion Operation Security 8.0
Google Cloud Blog

Welcome to BlackFile: Inside a Vishing Extortion Operation

Google Threat Intelligence Group documented UNC6671 (BlackFile), an extortion campaign targeting organizations via voice phishing and SSO compromise. The group uses adversary-in-the-middle techniques to bypass MFA, then exfiltrates data from Microsoft 365 and Okta using Python and PowerShell scripts. Since early 2026, UNC6671 has targeted dozens of organizations across North America, Australia, and the UK.

#threat intelligence #vishing #identity compromise #MFA bypass

Read article →
Raising the bar: Quality, shared responsibility, and the future of GitHub's bug bounty program Security 5.0
GitHub Blog

Raising the bar: Quality, shared responsibility, and the future of GitHub's bug bounty program

GitHub addresses the surge in low-quality bug bounty submissions driven by AI-assisted security research tools. The post discusses how AI has lowered the barrier to entry for fuzzing and vulnerability discovery, leading to noise alongside legitimate findings, and outlines GitHub's approach to maintaining program quality without shutting down.

#security #bug bounty #vulnerability research #AI tooling

Read article →
Custom MCP Catalogs and Profiles: Advancing Enterprise MCP Adoption AI 7.0
Docker Blog

Custom MCP Catalogs and Profiles: Advancing Enterprise MCP Adoption

Docker announces general availability of Custom Catalogs and Profiles for Model Context Protocol (MCP) servers. Custom Catalogs let organizations curate and distribute approved MCP server collections; Profiles enable developers to define portable, named groupings of MCP tools. Both features address enterprise governance and cross-team tool sharing.

#MCP #Model Context Protocol #enterprise governance #tool distribution

Read article →
The hidden cost of build vs. buy for agentic AI in regulated industries AI 6.0
The New Stack

The hidden cost of build vs. buy for agentic AI in regulated industries

Organizations face a familiar pattern with agentic AI: point solutions proliferate, integration overhead balloons, and governance breaks down. The article argues that while DIY platforms enable learning, regulated industries need consistent, governable AI enablement across teams, not fragmented toolchains. Build vs. buy decisions require weighing engineering velocity against organizational scalability.

#agentic AI #platform strategy #governance #regulated industries

Read article →
Extending AI gateways with Rust: Custom transformations in agentgateway and kgateway AI 7.0
CNCF Blog

Extending AI gateways with Rust: Custom transformations in agentgateway and kgateway

Hands-on tutorial for building custom Envoy dynamic modules in Rust to extend agentgateway and kgateway with domain-specific request transformations. Covers packaging as Docker images, deploying to Kubernetes, and testing against mock LLM endpoints. No prior Rust experience required; runs entirely locally in 30-45 minutes.

#AI gateways #Envoy #Rust #custom policies

Read article →
What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface Security 6.0
The Hacker News

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

Bitdefender analysis shows that trusted administration tools (PowerShell, WMIC, netsh, Certutil, MSBuild) are the preferred toolkit of modern threat actors, not malware. A 45-day observation window reveals that the real attack surface is indistinguishable from legitimate IT operations.

#threat actor tactics #living-off-the-land #PowerShell #detection evasion

Read article →
Benchmarking AI Agents on Kubernetes AI 7.0
InfoQ DevOps

Benchmarking AI Agents on Kubernetes

Brandon Foley published a CNCF benchmarking study showing that AI coding agents can isolate and fix individual bugs but struggle with system-wide impact analysis. The research challenges the assumption that improved code retrieval alone drives better automated bug fixing.

#agents #code generation #RAG #evals

Read article →
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email Security 8.0
The Hacker News

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

Microsoft Exchange Server on-premises is under active exploitation for CVE-2026-42897, a CVSS 8.1 spoofing vulnerability stemming from a cross-site scripting flaw in email handling. The vulnerability allows attackers to craft malicious emails that trigger the XSS condition, potentially leading to credential theft or session hijacking.

#CVE #Exchange Server #XSS #spoofing

Read article →
Amazon Bedrock introduces new advanced prompt optimization and migration tool AI 7.0
AWS News

Amazon Bedrock introduces new advanced prompt optimization and migration tool

Amazon Bedrock Advanced Prompt Optimization automates prompt refinement across up to 5 models simultaneously using metric-driven feedback loops. The tool accepts prompt templates, example inputs, ground truth answers, and evaluation metrics (including LLM-as-a-judge rubrics or Lambda functions), supporting multimodal inputs (PNG, JPG, PDF) and outputting optimized prompts with cost and latency estimates.

#LLM #prompt engineering #evals #model migration

Read article →
GitHub availability report: April 2026 DevOps 5.0
GitHub Blog

GitHub availability report: April 2026

GitHub experienced 10 incidents in April, including an 8-hour 43-minute outage of code search on April 1 caused by an overly aggressive messaging system upgrade and unintended service deployment that cleared routing state. The company is increasing transparency with detailed incident postmortems and enhanced status page visibility.

#incident #outage #infrastructure #observability

Read article →
Expanded interoperability with Unity Catalog Open APIs Cloud 6.0
Databricks Blog

Expanded interoperability with Unity Catalog Open APIs

Databricks expands Unity Catalog with open APIs enabling third-party tools and platforms to read and write metadata without vendor lock-in. The APIs allow external systems to query lineage, governance, and schema information across the open lakehouse.

#Unity Catalog #metadata #APIs #interoperability

Read article →
OpenAI brings Codex to the ChatGPT mobile app AI 6.0
The New Stack

OpenAI brings Codex to the ChatGPT mobile app

OpenAI extended Codex to iOS and Android by connecting the mobile app to a local or remote machine running Codex, keeping the mobile interface in sync with desktop state. The connection routes through a relay layer to maintain security without exposing machines to the public internet.

#LLM #code generation #mobile #Codex

Read article →
Granite Embedding Multilingual R2: Open Apache 2.0 Multilingual Embeddings with 32K Context - Best Sub-100M Retrieval Quality AI 7.0
Hugging Face Blog

Granite Embedding Multilingual R2: Open Apache 2.0 Multilingual Embeddings with 32K Context - Best Sub-100M Retrieval Quality

IBM and Hugging Face release Granite Embedding Multilingual R2, an open-source embedding model under Apache 2.0 license with 32K context window and sub-100M parameters. The model achieves competitive retrieval quality across multiple languages while remaining lightweight for on-premise or edge deployment.

#embeddings #RAG #multilingual #open-source

Read article →
Kubernetes v1.36: Deprecation and removal of Service ExternalIPs DevOps 8.0
Kubernetes Blog

Kubernetes v1.36: Deprecation and removal of Service ExternalIPs

Kubernetes 1.36 formally deprecates the .spec.externalIPs field for Service due to security vulnerabilities (CVE-2020-8554) that enable exploits in untrusted clusters. The feature, an early attempt at load-balancer functionality for non-cloud environments, will be removed in a future release, with better alternatives now available. A DenyServiceExternalIPs admission controller can enforce the deprecation immediately.

#Kubernetes #security #deprecation #API

Read article →
Improve bot accuracy with Amazon Lex Assisted NLU AI 6.0
AWS ML Blog

Improve bot accuracy with Amazon Lex Assisted NLU

Amazon Lex Assisted NLU uses large language models to handle natural language variations without manual utterance configuration. The feature combines traditional ML with LLMs to improve bot accuracy on complex requests, ambiguous phrases, and diverse customer phrasings that rule-based systems struggle with.

#LLM #NLU #conversational AI #Lex

Read article →
Cloud code: Conductor joins the rush toward remote coding agents AI 7.0
The New Stack

Cloud code: Conductor joins the rush toward remote coding agents

Conductor, an AI coding agent startup, launched Conductor Cloud to move agents from local laptops into persistent cloud environments where they can run longer, operate in parallel, and continue after developers close their machines. This mirrors similar moves by Anthropic (Claude Managed Agents), Mistral (Vibe), and Roo Code (Roomote).

#agents #code generation #cloud #AI coding

Read article →
Real-time voice agents with Stream Vision Agents and Amazon Nova 2 Sonic AI 7.0
AWS ML Blog

Real-time voice agents with Stream Vision Agents and Amazon Nova 2 Sonic

Stream's Vision Agents open-source framework integrates with Amazon Bedrock and Amazon Nova 2 Sonic to build production-grade voice agents with low-latency audio streaming, function calling, automatic reconnection, and multilingual support. The post covers orchestrating speech-to-text, LLM inference, and text-to-speech within latency windows of hundreds of milliseconds.

#LLM #agents #voice #real-time

Read article →
Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets Security 9.0
The Hacker News

Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets

Three versions of the npm package node-ipc (9.1.6, 9.2.3, 12.0.1) were confirmed malicious by Socket and StepSecurity, containing a stealer backdoor targeting developer secrets. The compromised versions exfiltrate credentials and sensitive data from developer environments. Immediate removal and audit of node-ipc dependencies required.

#supply-chain #npm #backdoor #malware

Read article →
GitLab is betting a 19th-century economic theory will shape its AI era AI 5.0
The New Stack

GitLab is betting a 19th-century economic theory will shape its AI era

GitLab's new CEO Bill Staples announced a major restructuring focused on AI agents, arguing that cheaper software production will expand demand rather than shrink it (Jevons' paradox). The company is consolidating products and shifting developer focus from writing code to supervising and reviewing machine-generated output.

#agents #AI #developer tools #strategy

Read article →
Anthropic splits billing again: Agent SDK gets separate credit pools AI 6.0
The New Stack

Anthropic splits billing again: Agent SDK gets separate credit pools

Anthropic introduced separate monthly credit pools for programmatic usage (Agent SDK, claude-p, GitHub Actions, third-party apps) starting June 15, drawing a distinction between interactive and programmatic billing. Users must claim the credit once; if exhausted, they can enable usage credits to continue.

#LLM #billing #Agent SDK #Claude

Read article →
From siloed data to unified insights: Cross-account Athena Access for Amazon Quick Cloud 5.0
AWS ML Blog

From siloed data to unified insights: Cross-account Athena Access for Amazon Quick

Amazon Quick now supports cross-account Amazon Athena access, enabling centralized Quick deployments to query data across multiple AWS accounts without data movement. This solves the multi-account data silo problem common in enterprises where Quick runs in a central account while data resides in business unit accounts.

#AI #data integration #cross-account #Athena

Read article →
Control where your AI agents can browse with Chrome enterprise policies on Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Control where your AI agents can browse with Chrome enterprise policies on Amazon Bedrock AgentCore

Amazon Bedrock AgentCore Browser now supports Chrome enterprise policies and custom root CA certificates to restrict agent web access and enable connectivity to internal services. Organizations can configure over 450 browser settings including URL filtering, download restrictions, and password manager controls via familiar Chrome JSON configuration.

#agents #security #browser control #Bedrock

Read article →
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories Security 6.0
The Hacker News

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

A weekly threat bulletin covering multiple critical vulnerabilities including PAN-OS RCE, cURL bugs, and AI tokenizer attacks, alongside supply-chain exploitation and social engineering campaigns. The bulletin emphasizes recurring patterns of weak security controls, fake help desks, and supply-chain attacks being weaponized for reputation and profit.

#CVE #supply-chain #RCE #threat intelligence

Read article →
From latency to instant: Modernizing GitHub Issues navigation performance Engineering 7.0
GitHub Blog

From latency to instant: Modernizing GitHub Issues navigation performance

GitHub optimized Issues navigation by shifting work to the client with IndexedDB-backed caching, a preheating strategy to boost cache hits, and a service worker to preserve cached data across hard navigations. The approach renders instantly from local data then revalidates in the background, eliminating redundant fetches during backlog workflows.

#performance #caching #service worker #IndexedDB

Read article →
What's new with Google Data Cloud AI 7.0
Google Cloud Blog

What's new with Google Data Cloud

Google Data Cloud updates include Managed Service for Apache Airflow 3.1 GA with AI-powered agentic troubleshooting and YAML orchestration, BigQuery Graph preview for graph analytics, new Google-built ODBC driver, and Conversational Analytics for Looker powered by Gemini.

#Apache Airflow #BigQuery #Gemini #agents

Read article →
The great AI divide: Why early leaders embrace an AI operating model AI 5.0
HashiCorp Blog

The great AI divide: Why early leaders embrace an AI operating model

Organizations are moving beyond isolated AI experimentation toward operationalizing AI at enterprise scale. Early leaders adopt an AI operating model that enables intelligence, automation, governance, and execution consistently across hybrid environments, with infrastructure adapting dynamically and operational decisions happening continuously.

#AI #operations #governance #enterprise

Read article →
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike Security 5.0
The Hacker News

Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike

The Belarus-aligned threat group Ghostwriter (also tracked as FrostyNeighbor, PUSHCHA, Storm-0257, TA445, UAC-0057) conducted fresh attacks on Ukrainian government organizations using geofenced PDF phishing and Cobalt Strike payloads. Active since at least 2016, the group conducts both cyber espionage and influence operations targeting Ukraine and neighboring countries.

#threat actor #phishing #Cobalt Strike #Ukraine

Read article →
The Rust sidecar pattern that fixes Python AI's biggest weakness Engineering 7.0
The New Stack

The Rust sidecar pattern that fixes Python AI's biggest weakness

A guide to pairing Python (for AI logic and abstraction) with Rust (for high-performance networking, concurrency, and memory safety) in a sidecar architecture to achieve production-grade deterministic performance at scale. The pattern isolates Python's intelligence from infrastructure concerns while Rust handles reliability and operational responsibility.

#Python #Rust #sidecar #performance

Read article →
Work with Codex from anywhere AI 5.0
OpenAI Blog

Work with Codex from anywhere

Codex is now available in the ChatGPT mobile app, allowing engineers to monitor, steer, and approve coding tasks in real time across devices and remote environments.

#Codex #code generation #mobile #remote work

Read article →
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure AI 8.0
The Hacker News

PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

CVE-2026-44338 (CVSS 7.3), a missing authentication flaw in PraisonAI open-source multi-agent orchestration framework, was exploited within four hours of public disclosure. The vulnerability exposes sensitive endpoints to unauthenticated access, allowing attackers to invoke arbitrary agent operations. Immediate patching required for all PraisonAI deployments.

#CVE #authentication #AI agents #open-source

Read article →
How AI Hallucinations Are Creating Real Security Risks AI 7.0
The Hacker News

How AI Hallucinations Are Creating Real Security Risks

AI hallucinations pose serious security risks in critical infrastructure decision-making by generating confident but incorrect outputs that exploit human trust. Models lack mechanisms to signal uncertainty and instead produce high-confidence false information based on training data patterns. This creates dangerous scenarios where infrastructure operators rely on fabricated recommendations.

#AI safety #hallucinations #LLM #infrastructure

Read article →
When AI agents become contributors: How KubeStellar reached 81% PR acceptance AI 8.0
CNCF Blog

When AI agents become contributors: How KubeStellar reached 81% PR acceptance

A solo developer used two AI coding agents in parallel to build KubeStellar Console, a multi-cluster Kubernetes dashboard in Go/React/TypeScript with Helm packaging, achieving 81% PR acceptance. Initial velocity gains (2-hour tasks vs 3-day estimates) degraded into cascading failures and architectural drift, requiring extensive reverting. The core lesson: agent autonomy requires robust surrounding codebase infrastructure to prevent scope creep and silent regressions.

#AI agents #code generation #Kubernetes #multi-agent

Read article →
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation Security 8.0
The Hacker News

Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

A researcher disclosed two Windows zero-days codenamed YellowKey and GreenPlasma: a BitLocker bypass and a CTFMON (Collaborative Translation Framework) privilege escalation. These follow three previously disclosed Microsoft Defender vulnerabilities from the same researcher. Both flaws remain unpatched and expose full-disk encryption and privilege escalation attack vectors.

#CVE #Windows #BitLocker #privilege escalation

Read article →
Follow a goal | Codex use cases AI 7.0
OpenAI Developers

Follow a goal | Codex use cases

OpenAI documents Codex /goal, an experimental CLI mode that keeps the agent working across turns toward a verifiable stopping condition instead of stopping after one turn. Targets migrations, large refactors, deployment retry loops, and prompt-optimization workflows that have a clear validation loop. Exposes /goal pause, /goal resume, /goal clear, plus checkpoint-based progress tracking; intended to run unattended for hours.

#Codex #agents #CLI #long-running tasks

Read article →
Unlocking asynchronicity in continuous batching AI 7.0
Hugging Face Blog

Unlocking asynchronicity in continuous batching

Hugging Face explores asynchronous request handling in continuous batching inference systems, addressing latency and throughput trade-offs when requests arrive at irregular intervals. The post covers architectural patterns for decoupling request arrival from batch formation to maximize GPU utilization.

#inference #batching #performance #async

Read article →
Helping ChatGPT better recognize context in sensitive conversations AI 6.0
OpenAI Blog

Helping ChatGPT better recognize context in sensitive conversations

OpenAI has updated ChatGPT's safety systems to improve context awareness in sensitive conversations, enabling the model to detect risks that emerge over time rather than in isolation. The update helps ChatGPT respond more safely by understanding conversational patterns and nuance in high-stakes scenarios.

#LLM #safety #context-awareness #prompt-engineering

Read article →
Fivetran's CPO: Closed data stacks won't survive the agent era AI 7.0
The New Stack

Fivetran's CPO: Closed data stacks won't survive the agent era

Fivetran CPO Anjan Kundavaram argues that closed data stacks cannot handle agentic AI workloads efficiently because agents run 10-100x more queries than humans, routing all queries through expensive compute paths. Fivetran proposes Open Data Infrastructure with multiple compute engines so agents can route queries to cost-optimal paths.

#agents #data infrastructure #cost optimization #analytics

Read article →
MinIO's MemKV promises 95% better GPU utilization by ending AI recompute tax AI 8.0
The New Stack

MinIO's MemKV promises 95% better GPU utilization by ending AI recompute tax

MinIO launched MemKV, a context memory store for AI inference that uses petabyte-scale flash-based storage accessed over 800 Gbps RDMA to reduce recomputation overhead. MemKV improves TTFT and TPOT metrics by providing persistent, shared context across GPU clusters, addressing the recompute tax problem in multi-step reasoning workloads.

#inference infrastructure #context memory #GPU optimization #RDMA

Read article →
Data quality is the AI strategy AI 5.0
Databricks Blog

Data quality is the AI strategy

Databricks argues that data quality is foundational to AI success, particularly in healthcare where poor data directly impacts model reliability and patient outcomes. The post connects data governance, lineage tracking, and quality metrics to downstream AI model performance.

#data-quality #AI #governance #healthcare

Read article →
The Rosetta stone of CPS: Claroty's AI-powered library AI 5.0
Databricks Blog

The Rosetta stone of CPS: Claroty's AI-powered library

Claroty has built an AI-powered library that translates between industrial control system protocols and formats, enabling unified visibility across heterogeneous OT environments. The system uses machine learning to normalize and correlate data from legacy and modern industrial equipment.

#AI #industrial #OT-security #protocol-translation

Read article →
Kubernetes v1.36: Advancing Workload-Aware Scheduling DevOps 8.0
Kubernetes Blog

Kubernetes v1.36: Advancing Workload-Aware Scheduling

Kubernetes v1.36 separates the Workload API (static template) from the new PodGroup API (runtime state) to improve scheduling for AI/ML and batch workloads. The release introduces a new PodGroup scheduling cycle for atomic workload processing, topology-aware scheduling, workload-aware preemption, and ResourceClaim support for Dynamic Resource Allocation on PodGroups. Job controller integration with the new APIs begins in this release.

#Kubernetes #scheduling #workload-aware #batch

Read article →
Clinical operations intelligence belongs on the Lakehouse Cloud 5.0
Databricks Blog

Clinical operations intelligence belongs on the Lakehouse

Databricks argues that clinical operations data (scheduling, resource allocation, patient flow) should be centralized on a lakehouse rather than siloed in separate systems. The post outlines how unified data enables real-time operational analytics and AI-driven optimization in healthcare.

#lakehouse #healthcare #analytics #operational-intelligence

Read article →
Build financial document processing with Pulse AI and Amazon Bedrock AI 6.0
AWS ML Blog

Build financial document processing with Pulse AI and Amazon Bedrock

This post demonstrates a document extraction and fine-tuning pipeline combining Pulse AI's document understanding with Amazon Bedrock to handle complex financial documents (balance sheets, SEC filings, audit materials) that traditional OCR fails on. The solution addresses OCR errors that cascade through interconnected calculations and preserves structural relationships and contextual nuances in multi-column layouts with merged cells.

#LLM #document-understanding #OCR #fine-tuning

Read article →
Build real-time voice streaming applications with Amazon Nova Sonic and WebRTC AI 6.0
AWS ML Blog

Build real-time voice streaming applications with Amazon Nova Sonic and WebRTC

AWS demonstrates a real-time voice streaming solution combining Amazon Nova 2 Sonic (unified speech-to-speech model) with Amazon Kinesis Video Streams WebRTC for dynamic bitrate adjustment and cross-browser compatibility. Nova Sonic handles speech recognition, language processing, and synthesis in a single model, while WebRTC maintains audio quality over unstable networks with automatic bitrate scaling.

#LLM #speech-to-speech #voice-agents #streaming

Read article →
Securing AI agents: How AWS and Cisco AI Defense scale MCP and A2A deployments AI 7.0
AWS ML Blog

Securing AI agents: How AWS and Cisco AI Defense scale MCP and A2A deployments

AWS and Cisco address security gaps in rapidly scaling Model Context Protocol (MCP) and Agent-to-Agent (A2A) deployments by providing visibility into tool and agent inventory, automating security reviews, and maintaining audit trails. The partnership tackles three challenges: visibility gaps in which tools are deployed, manual review bottlenecks slowing AI application deployment, and compliance risks from incomplete tracking under SOX and GDPR frameworks.

#agents #MCP #security #compliance

Read article →
Fine-tune LLM with Databricks Unity Catalog and Amazon SageMaker AI AI 7.0
AWS ML Blog

Fine-tune LLM with Databricks Unity Catalog and Amazon SageMaker AI

This post demonstrates secure LLM fine-tuning on Ministral-3-3B-Instruct by integrating Databricks Unity Catalog with Amazon SageMaker AI and Amazon EMR Serverless for preprocessing. The solution preserves Unity Catalog's fine-grained authorization model when SageMaker Training jobs access S3 data, maintaining data lineage and compliance visibility without bypassing governance controls.

#LLM #fine-tuning #data-governance #SageMaker

Read article →
The power of LLMs on your data, more than two orders of magnitude faster and cheaper AI 8.0
Google Cloud Blog

The power of LLMs on your data, more than two orders of magnitude faster and cheaper

Google Cloud published a SIGMOD paper on proxy models, ultra-lightweight task-specific models that replace majority LLM calls in AI-powered SQL functions, achieving 100x+ speedup and 1000x cost reduction. Proxy models are trained on-the-fly or ahead of time to handle semantic queries like 'which product reviews mention durability issues' without full LLM invocation on every row.

#LLM #SQL #inference optimization #proxy models

Read article →
How Glance turns hours of video into mobile-ready clips with AI AI 6.0
Google Cloud Blog

How Glance turns hours of video into mobile-ready clips with AI

Glance built an AI pipeline to transform 1-2 hour landscape videos into 30-180 second vertical mobile clips, handling key moment identification, active speaker detection, and dynamic split-screen layout. The system scales from 3,500 to 10,000+ videos daily using computer vision and video generation models.

#video generation #computer vision #active speaker detection #video processing

Read article →
From commit to cloud: Powering what's next for PostgreSQL Cloud 6.0
Azure Blog

From commit to cloud: Powering what's next for PostgreSQL

Microsoft has contributed 345 commits to the latest PostgreSQL release and maintains a team of upstream committers. The post highlights PostgreSQL's role as foundational infrastructure for AI workloads, with emphasis on transactional correctness, extensibility, and Azure's managed Postgres services and developer tools.

#PostgreSQL #database #managed services #AI infrastructure

Read article →
The new era of SaMD: Why cloud infrastructure is the foundation for digital health in 2026 Cloud 5.0
Google Cloud Blog

The new era of SaMD: Why cloud infrastructure is the foundation for digital health in 2026

Google Cloud discusses how cloud infrastructure enables software-as-medical-device (SaMD) compliance with FDA QMSR and EU AI Act. Modern SaMD systems combine embedded firmware, mobile apps, and cloud services; cloud-native patterns automate document control and change management required for regulated AI diagnostics.

#medical device #regulatory compliance #FDA QMSR #EU AI Act

Read article →
Smart moves: Building resilient transportation systems with Google AI AI 5.0
Google Cloud Blog

Smart moves: Building resilient transportation systems with Google AI

Google Cloud highlights Road Management Insights (RMI), which provides high-accuracy travel time, speed, disruption, and vehicle count data across road networks without physical sensors. The system enables agencies to identify incidents before emergency calls and analyze congestion trends for Vision Zero safety goals.

#transportation #computer vision #incident detection #traffic analytics

Read article →
Red Hat's skill packs give AI agents something a bigger model never could: 20 years of institutional memory AI 7.0
The New Stack

Red Hat's skill packs give AI agents something a bigger model never could: 20 years of institutional memory

Red Hat announced a dedicated AI skills repository enabling agents to access 20+ years of institutional knowledge through RAG-enriched LLMs with reasoning and execution capabilities. The Ask Red Hat chatbot demonstrates this approach, combining retrieval with agent planning against real Red Hat estates while enforcing subscription, security, and lifecycle guardrails.

#agents #RAG #LLM #skills

Read article →
Anthropic's Claude Code agent view is a better dashboard. So why aren't developers convinced? AI 5.0
The New Stack

Anthropic's Claude Code agent view is a better dashboard. So why aren't developers convinced?

Anthropic released agent view in Claude Code, a CLI dashboard for managing multiple parallel agent sessions with status indicators and inline reply capabilities. While it centralizes session management and reduces terminal window juggling, developers remain skeptical about whether it addresses deeper workflow challenges.

#agents #Claude #CLI #developer tools

Read article →
OpenAI's Daybreak and Anthropic's Glasswing have nearly identical benchmarks — and 3 of the same partners AI 7.0
The New Stack

OpenAI's Daybreak and Anthropic's Glasswing have nearly identical benchmarks — and 3 of the same partners

OpenAI launched Daybreak, a cybersecurity initiative using GPT-5.5 and Codex Security agent harness, mirroring Anthropic's Project Glasswing (Claude Mythos Preview). Both aim to find and validate vulnerabilities at scale. Notably, Cisco, CrowdStrike, and Palo Alto Networks run both stacks in parallel rather than choosing sides.

#agents #security #LLM #cybersecurity

Read article →
Transform Video Into Instantly Searchable, Actionable Intelligence with AI Agents and Skills AI 6.0
NVIDIA Developer Blog

Transform Video Into Instantly Searchable, Actionable Intelligence with AI Agents and Skills

NVIDIA Metropolis Blueprint for video search and summarization (VSS) uses AI agents and skills to extract real-time insights from massive video streams and recorded footage. The system transforms millions of live or recorded videos into instantly searchable, actionable intelligence for organizations.

#agents #video processing #NVIDIA Metropolis #real-time inference

Read article →
ABAC row filtering and column masking policies, governed tags, and data classification are now generally available in Unity Catalog DevOps 7.0
Databricks Blog

ABAC row filtering and column masking policies, governed tags, and data classification are now generally available in Unity Catalog

Databricks Unity Catalog now offers attribute-based access control (ABAC), row filtering, column masking, governed tags, and automated data classification for fine-grained governance at scale. These features enable organizations to enforce data protection policies automatically as data estates grow.

#Unity Catalog #ABAC #data governance #security

Read article →
Temporal hits 3,000 paying customers with its crash-proof workflow engine AI 7.0
The New Stack

Temporal hits 3,000 paying customers with its crash-proof workflow engine

Temporal announced 3,000+ paying customers for its Durable Execution framework, which automatically persists workflow state to enable long-running processes to resume after crashes or network failures. The platform is increasingly used for AI workloads by companies like Nvidia, Netflix, Snap, and Stripe.

#durable execution #workflow orchestration #fault tolerance #AI infrastructure

Read article →
Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday AI 7.0
The Hacker News

Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

Microsoft unveiled MDASH (multi-model agentic scanning harness), an AI-driven vulnerability discovery system using bespoke agents for different vulnerability classes. The model-agnostic system is in limited private preview and has already identified 16 Windows flaws included in recent Patch Tuesday releases.

#AI agents #vulnerability detection #security automation #LLM

Read article →
Why agent harnesses fail inside cloud-native systems AI 8.0
The New Stack

Why agent harnesses fail inside cloud-native systems

Agent performance depends more on harness design (prompts, tools, feedback loops, sandboxes) than model selection, but cloud-native systems make feedback loops difficult to implement. The article examines how distributed infrastructure complicates the feedback signals agents need to validate their code changes, and what infrastructure patterns are required to close that loop.

#agents #feedback loops #cloud-native #tool-use

Read article →
How to build a skills library for your engineering team AI 6.0
The New Stack

How to build a skills library for your engineering team

A team built a centralized skills library to standardize AI agent configuration across engineers, replacing ad-hoc local configs with version-controlled Markdown skill files. The library enforces company standards (security, incident protocols, coding conventions) while allowing optional skills based on task context.

#agents #skills #prompt engineering #team practices

Read article →
Cimento emerges from stealth to secure the one thing no firewall can protect Security 6.0
The New Stack

Cimento emerges from stealth to secure the one thing no firewall can protect

Cimento launched an AI-native human risk management platform that builds behavioral risk profiles for employees by integrating with email, IDPs, cloud providers, and security tools. The platform aims to address the human element in enterprise security as AI-driven attacks become cheaper and more prevalent.

#security #human risk #behavioral analysis #enterprise security

Read article →
Why enterprise AI needs customization AI 7.0
The New Stack

Why enterprise AI needs customization

One-size-fits-all model strategies fail because different tasks require different models: code generation models struggle with security analysis, frontier models may not meet data residency requirements. Organizations need the ability to mix and match models by task and deploy specialized models alongside general-purpose ones.

#LLM #model selection #enterprise AI #deployment

Read article →
Building a cloud native platform from the ground up with Kairos, k0rdent, and bindy DevOps 8.0
CNCF Blog

Building a cloud native platform from the ground up with Kairos, k0rdent, and bindy

RBC Capital Markets shares how they manage 50+ Kubernetes clusters across hybrid infrastructure (VMware and multi-cloud) using Kairos for node configuration, k0rdent for cluster lifecycle, and bindy for DNS integration. The post covers solving cluster drift, node reproducibility, and compliance challenges (SOX, PCI-DSS, Basel III) in a regulated environment.

#Kubernetes #platform engineering #cluster lifecycle #node configuration

Read article →
Most Remediation Programs Never Confirm the Fix Actually Worked Security 7.0
The Hacker News

Most Remediation Programs Never Confirm the Fix Actually Worked

Mandiant's M-Trends 2026 report highlights a critical gap: security teams lack verification that remediation actually persists. With mean time to exploit at negative seven days and median remediation time at 32 days for edge devices, the industry faces a validation problem beyond visibility.

#remediation #vulnerability management #threat intelligence #metrics

Read article →
Building a safe, effective sandbox to enable Codex on Windows AI 6.0
OpenAI Blog

Building a safe, effective sandbox to enable Codex on Windows

OpenAI describes the sandbox architecture for Codex on Windows that enables safe code generation with controlled file access and network restrictions. The post covers how the sandbox isolates code execution while maintaining performance for real-time coding agent interactions.

#agents #code-generation #sandbox #security

Read article →
NIST Narrows the NVD: What Container Security Programs Should Reassess Security 9.0
Docker Blog

NIST Narrows the NVD: What Container Security Programs Should Reassess

NIST announced a prioritized enrichment model for the National Vulnerability Database effective April 15, 2026. Only CVEs in CISA's Known Exploited Vulnerabilities catalog, federal government software, or critical software (EO 14028) receive full CVSS scores, CPE mappings, and CWE classifications. Everything else moves to 'Not Scheduled' status, requiring organizations to reassess scanning and SLA workflows.

#CVE #NVD #container security #vulnerability scanning

Read article →
AWS WorkSpaces Now Lets AI Agents Operate Legacy Desktop Applications Without APIs AI 7.0
InfoQ DevOps

AWS WorkSpaces Now Lets AI Agents Operate Legacy Desktop Applications Without APIs

AWS WorkSpaces now supports AI agents in public preview, enabling them to authenticate via IAM and control legacy desktop applications through computer vision and input simulation rather than APIs. Reflex benchmarks show vision-based agents consume 45x more tokens than API-based agents, highlighting the efficiency trade-off of this approach.

#agents #computer vision #tool-use #legacy systems

Read article →
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens Security 8.0
Google Project Zero

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

Google Project Zero published a 0-click exploit chain for Pixel 10 that achieves root in two exploits. The chain updates CVE-2025-54957 (Dolby UDC) for Pixel 10's RET PAC mitigation and replaces the BigWave LPE with a new VPU driver exploit. The Dolby exploit works on unpatched devices with SPL December 2025 or earlier.

#CVE #exploit #Android #privilege escalation

Read article →
Android Adds Intrusion Logging for Sophisticated Spyware Forensics Security 6.0
The Hacker News

Android Adds Intrusion Logging for Sophisticated Spyware Forensics

Google introduced Intrusion Logging, an opt-in Android feature within Advanced Protection Mode that stores persistent, privacy-preserving forensic logs for analyzing sophisticated spyware attacks. The feature enables post-compromise investigation and forensic analysis on suspected compromised devices.

#Android security #forensics #spyware detection #mobile security

Read article →
Our response to the TanStack npm supply chain attack Security 8.0
OpenAI Blog

Our response to the TanStack npm supply chain attack

OpenAI details its response to the TanStack 'Mini Shai-Hulud' npm supply chain attack, which compromised signing certificates and affected macOS users. The company outlines defensive measures taken and mandates that macOS app users update by June 12, 2026 to maintain security.

#supply-chain #npm #security #CVE

Read article →
Introducing Claude for Small Business AI 5.0
Anthropic News

Introducing Claude for Small Business

Anthropic has launched Claude for Small Business, a product tier targeting SMBs with simplified pricing and features. The offering includes pre-built templates and workflows for common small business tasks like customer service, content creation, and operations.

#LLM #Claude #SMB #product launch

Read article →
The new FinOps problem isn't cloud bills AI 7.0
The New Stack

The new FinOps problem isn't cloud bills

FinOps discipline is being forced to evolve in months rather than years as AI token economics break traditional cloud cost models. New reasoning models consume 3x more tokens per task despite falling per-token prices, and identical prompts produce variable costs, requiring deterministic guardrails in agentic FinOps tools to remain useful.

#FinOps #token economics #cost management #agents

Read article →
The Rise of Sports Intelligence: How the Lakehouse Turns Tracking Data into Competitive Advantage Cloud 5.0
Databricks Blog

The Rise of Sports Intelligence: How the Lakehouse Turns Tracking Data into Competitive Advantage

Databricks showcases how professional sports teams use lakehouse architecture to process high-volume tracking data (20,000+ data points per second in basketball) for real-time analytics and competitive insights. The post covers Delta Lake, streaming ingestion, and ML model deployment on tracking data.

#lakehouse #streaming #Delta Lake #real-time analytics

Read article →
Patch Tuesday, May 2026 Edition Security 8.0
Krebs on Security

Patch Tuesday, May 2026 Edition

Microsoft shipped 118 security fixes on May's Patch Tuesday, including 16 critical vulnerabilities, with no zero-day exploits currently in the wild. CVE-2026-41089 is a critical stack-based buffer overflow in Windows Netlogon granting SYSTEM privileges on domain controllers. This marks the first Patch Tuesday in nearly two years without active zero-day patches.

#CVE #Windows #critical #buffer-overflow

Read article →
Jensen Huang and Bill McDermott bet on OpenShell to secure enterprise AI agents AI 8.0
The New Stack

Jensen Huang and Bill McDermott bet on OpenShell to secure enterprise AI agents

Nvidia released OpenShell, an Apache 2.0 open-source secure runtime for autonomous agents that sandboxes agent execution to prevent direct OS/network/credential access. The project addresses the architectural mismatch between legacy software stacks built for human-speed interaction and autonomous agents operating at machine speed.

#agents #security #sandbox #runtime

Read article →
Kubernetes v1.36: PSI Metrics for Kubernetes Graduates to GA DevOps 7.0
Kubernetes Blog

Kubernetes v1.36: PSI Metrics for Kubernetes Graduates to GA

Pressure Stall Information (PSI) metrics reach GA in Kubernetes v1.36, providing node, pod, and container-level visibility into resource contention and task stalling. PSI captures cumulative stall time and moving averages (10s, 60s, 300s windows) across CPU, memory, and I/O, distinguishing transient spikes from sustained resource tension. Performance testing on high-density workloads (80+ pods) validated production readiness with minimal overhead.

#Kubernetes #observability #PSI #metrics

Read article →
Docker AI Governance: Unlock Agent Autonomy, Safely AI 8.0
Docker Blog

Docker AI Governance: Unlock Agent Autonomy, Safely

Docker introduced AI Governance, a centralized control plane for agent execution policies, network reach, credential access, and MCP tool calls. The platform addresses the shift of agentic AI from developer laptops to production, where agents like Claws manage emails, calendars, CRM data, and production queries outside traditional CI/CD and security perimeters.

#agents #governance #MCP #security

Read article →
How to Eliminate Pipeline Friction in AI Model Serving AI 7.0
NVIDIA Developer Blog

How to Eliminate Pipeline Friction in AI Model Serving

NVIDIA addresses the gap between model training and production deployment, where format conversions, layer incompatibilities, and version mismatches cause silent failures and performance degradation. The post details strategies for standardizing export formats, validation checkpoints, and runtime compatibility layers.

#model serving #inference #deployment #ONNX

Read article →
GitHub Copilot individual plans: Introducing flex allotments in Pro and Pro+, and a new Max plan Other 5.0
GitHub Blog

GitHub Copilot individual plans: Introducing flex allotments in Pro and Pro+, and a new Max plan

GitHub updates Copilot individual pricing effective June 1, 2026, introducing usage-based billing with flex allotments and a new Max tier. Pro ($10/mo) includes $15 total credits, Pro+ ($39/mo) includes $70, and Max ($100/mo) includes $200, with base credits matched 1:1 to subscription price and flex allotments covering variable overages.

#Copilot #pricing #usage-based billing #agents

Read article →
How Amazon Finance streamlines regulatory inquiries by using generative AI on AWS AI 7.0
AWS ML Blog

How Amazon Finance streamlines regulatory inquiries by using generative AI on AWS

Amazon FinTech teams built a scalable AI application using Amazon Bedrock to automate regulatory inquiry handling. The system uses dedicated knowledge bases with multi-format document support (PDF, PPT, Word, CSV) to retrieve relevant precedents and synthesize responses across thousands of historical documents while maintaining compliance.

#Bedrock #RAG #knowledge bases #document retrieval

Read article →
Terraform Enterprise 2.0: Evolving infrastructure operations for scale DevOps 7.0
HashiCorp Blog

Terraform Enterprise 2.0: Evolving infrastructure operations for scale

Terraform Enterprise 2.0 introduces Stacks for multi-tier, multi-environment orchestration as a single unit, project-level notifications, SCIM 2.0 provisioning, site auditor role, cross-org workspace migration, and enhanced API token expiration. Stacks reduce coordination overhead and improve deployment consistency across complex infrastructure.

#Terraform #infrastructure orchestration #multi-environment #SCIM

Read article →
AI is creating a generation of developers who can't debug their own code AI 8.0
The New Stack

AI is creating a generation of developers who can't debug their own code

Junior developers using AI coding tools complete tasks 55% faster but cannot explain or debug the code they ship, creating a knowledge gap that senior engineers must fill. Claude Code adoption reached 24% in US/Canada (6x growth from mid-2025), and organizations have reduced junior hiring by 73% over two years, replacing entry-level cohorts with senior developers augmented by AI.

#code generation #debugging #junior developers #skill gap

Read article →
Migrating Data Ingestion Systems at Meta Scale DevOps 7.0
Meta Engineering

Migrating Data Ingestion Systems at Meta Scale

Meta revamped its data ingestion system to migrate petabytes of social graph data from MySQL into the data warehouse, moving from customer-owned pipelines to a self-managed data warehouse service. The migration successfully transitioned 100% of workload and fully deprecated the legacy system while maintaining efficiency at hyperscale.

#data infrastructure #MySQL #data warehouse #migration

Read article →
Announcing native AI agent support in HashiCorp Vault AI 8.0
HashiCorp Blog

Announcing native AI agent support in HashiCorp Vault

HashiCorp Vault added native AI agent support with an agent registry, granular identity-based policies, and per-request ephemeral authorization designed for non-deterministic autonomous actors. The new capabilities enable fine-grained access control, runtime policy evaluation, and clear attribution for agent actions in regulated environments.

#agents #identity #authorization #secrets management

Read article →
Automate schema generation for intelligent document processing AI 7.0
AWS ML Blog

Automate schema generation for intelligent document processing

AWS IDP Accelerator now includes a Discovery Module that uses visual embeddings and agents to automatically cluster unknown documents and generate extraction schemas. This pre-processing step eliminates manual schema creation at scale, enabling downstream IDP workflows without prior knowledge of document classes.

#IDP #agents #embeddings #document clustering

Read article →
Red Hat is betting on AgentOps to close the gap between AI experiments and production AI 7.0
The New Stack

Red Hat is betting on AgentOps to close the gap between AI experiments and production

Red Hat AI 3.4 introduces Model-as-a-Service (MaaS) to bridge experimentation and production deployment of agents across hybrid cloud. MaaS provides governed API endpoints for curated models with consumption tracking and policy enforcement, part of Red Hat's four-pillar AI strategy covering inference, data connection, agent deployment, and unified platform management.

#MaaS #agents #model serving #hybrid cloud

Read article →
Dungeons & Desktops: Building a procedurally generated roguelike with GitHub Copilot CLI AI 5.0
GitHub Blog

Dungeons & Desktops: Building a procedurally generated roguelike with GitHub Copilot CLI

A developer built GitHub Dungeons, a terminal roguelike game written in Go using GitHub Copilot CLI, where dungeons are procedurally generated from repository structure and reshape with each commit. The project demonstrates Copilot CLI's ability to accelerate development in unfamiliar languages by letting developers focus on behavior rather than syntax, using features like the /yolo command to allow all suggestions.

#GitHub Copilot #CLI #code generation #Go

Read article →
Co-Scientist: A multi-agent AI partner to accelerate research AI 8.0
DeepMind

Co-Scientist: A multi-agent AI partner to accelerate research

DeepMind introduces Co-Scientist, a multi-agent AI system built on Gemini designed to accelerate scientific research. The system coordinates multiple specialized agents to help researchers formulate hypotheses, design experiments, and interpret results.

#LLM agents #multi-agent systems #research acceleration #Gemini

Read article →
AI teams are spending months on web scrapers that SerpApi replaces with one API call AI 6.0
The New Stack

AI teams are spending months on web scrapers that SerpApi replaces with one API call

SerpApi provides a structured JSON API for search results from Google and Amazon, eliminating the need for custom web scrapers that consume months of maintenance effort. Teams building AI systems with live data typically waste time fighting IP blocks, CAPCHAs, and parser breakage when search engines change layout, problems SerpApi handles transparently.

#RAG #data retrieval #search API #web scraping

Read article →
Living off the agent: The new tactic hijacking enterprise AI Security 8.0
The New Stack

Living off the agent: The new tactic hijacking enterprise AI

Autonomous agents introduce new attack vectors as they eagerly execute user requests without understanding intent, creating opportunities for data exfiltration and credential theft. Unlike centralized GenAI chat apps where security teams can monitor traffic, agentic AI proliferates across enterprise systems with access to sensitive data and workflows, making traditional endpoint monitoring insufficient.

#agents #security #data exfiltration #threat

Read article →
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots Security 6.0
The Hacker News

New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots

ThreatFabric discovered a new TrickMo Android banking trojan variant using The Open Network (TON) for command-and-control instead of traditional infrastructure. The variant observed between January-February 2026 targets banking and cryptocurrency wallet users in France, Italy, and Austria via runtime-loaded APK modules. TON-based C2 makes attribution and takedown harder.

#Android #banking-trojan #C2 #TON

Read article →
SAP launches managed Joule Studio with Cursor and Claude Code support AI 7.0
The New Stack

SAP launches managed Joule Studio with Cursor and Claude Code support

SAP expanded Joule Studio with managed hosting, adding Cursor and Claude Code as supported coding tools, AutoGen and LlamaIndex as agent frameworks, and bidirectional Agent2Agent protocol for third-party integration. The company also introduced SAP Domain Models, a family of SAP-aware foundation models including SAP-ABAP-2 and specialized variants for S/4HANA and Ariba, with general availability planned for Q3 2026.

#agents #foundation models #SAP #LLMs

Read article →
SAP launches AI Agent Hub at Sapphire 2026 to tame vendor agent sprawl AI 7.0
The New Stack

SAP launches AI Agent Hub at Sapphire 2026 to tame vendor agent sprawl

SAP opened the AI Agent Hub, a vendor-agnostic governance platform for inventorying and managing agents, LLMs, and MCP servers across an enterprise, regardless of vendor. The hub now covers agents from Microsoft Copilot, Salesforce Agentforce, Anthropic, OpenAI, LangGraph, AutoGen, and SAP's own Joule, with two of six capabilities generally available and four scheduled for Q3 2026.

#agents #governance #MCP #LLMs

Read article →
As agentic dev tools boom, workflow auditability becomes the constraint AI 8.0
The New Stack

As agentic dev tools boom, workflow auditability becomes the constraint

Agentic AI coding tools are shipping fast but lack auditability infrastructure. A financial institution's audit team could not trace which prompts an agent used, what policy checks ran, or how to reproduce an agent-opened merge request, exposing a critical gap between deployment velocity and compliance requirements in regulated environments.

#agents #CI/CD #auditability #compliance

Read article →
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages Security 9.0
The Hacker News

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

TeamPCP compromised npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI in a Mini Shai-Hulud campaign. The malicious npm packages inject obfuscated JavaScript (router_init.js) designed to profile execution environments and exfiltrate data. This represents a significant supply-chain attack spanning web and AI infrastructure packages.

#supply-chain #npm #PyPI #malicious-packages

Read article →
A decade of governance: Cloud Custodian at 10 and its role in the agentic AI era AI 8.0
CNCF Blog

A decade of governance: Cloud Custodian at 10 and its role in the agentic AI era

Cloud Custodian, a CNCF incubating project, evolved from a cloud management tool into a real-time policy engine for agentic AI governance. It enforces FinOps, security, and compliance guardrails across AWS, Azure, and GCP as autonomous agents provision infrastructure and AI workloads like GPU fleets and model serving endpoints.

#agents #governance #FinOps #policy engine

Read article →
Why Agentic AI Is Security's Next Blind Spot AI 7.0
The Hacker News

Why Agentic AI Is Security's Next Blind Spot

The article argues that agentic AI systems are already running in production without meaningful security team involvement, and the policy-focused framing of allow/restrict/monitor misses the urgent operational reality. Agentic systems execute tasks, consume data, and take actions autonomously, creating detection and governance gaps that traditional security controls do not address.

#agentic-AI #agents #security #governance

Read article →
Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak Security 7.0
The Hacker News

Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak

Instructure, parent company of Canvas learning management system, reached an agreement with ShinyHunters ransomware group after a breach exposed 3.65TB of data from thousands of schools and universities. The company negotiated with the decentralized extortion group to prevent public release of stolen information.

#ransomware #breach #ShinyHunters #data-exfiltration

Read article →
IBM Vault 2.0 adds UI enhancements and improved reporting visibility DevOps 5.0
HashiCorp Blog

IBM Vault 2.0 adds UI enhancements and improved reporting visibility

IBM Vault 2.0.1 improved onboarding and operational visibility with enhanced UI, consumption reporting, and usage analytics across secrets management, key lifecycle management, identity brokering, and data protection. The release focuses on reducing expertise barriers and enabling better forecasting and governance.

#secrets management #identity #reporting #UI

Read article →
Building web search-enabled agents with Strands and Exa AI 7.0
AWS ML Blog

Building web search-enabled agents with Strands and Exa

The Exa integration for Strands Agents SDK provides AI-native web search and retrieval optimized for agent workflows, delivering structured content directly into LLM context windows without post-processing. Agents access real-time web knowledge through two tools: exa_search for semantic search across news and research papers, and exa_get_contents for full URL retrieval.

#agents #RAG #tool-use #web-search

Read article →
Anthropic's Claude Platform comes to AWS Cloud 7.0
The New Stack

Anthropic's Claude Platform comes to AWS

AWS now offers general availability of Claude Platform, Anthropic's native developer tools and APIs, directly through AWS credentials. This includes Messages API, Claude Managed Agents (beta), web search, MCP connector (beta), code execution, and files API (beta), though data processing occurs outside the AWS security boundary and is not subject to AWS data residency controls.

#Claude #LLM APIs #AWS #agents

Read article →
Unlocking the Archives: Turning Unstructured Documents into a Searchable Database for Groundwater Discovery AI 6.0
Databricks Blog

Unlocking the Archives: Turning Unstructured Documents into a Searchable Database for Groundwater Discovery

Databricks demonstrates a workflow for converting unstructured documents (PDFs, scans) into searchable databases using vector embeddings and retrieval. The case study applies this to groundwater research in Sudan, showing how RAG pipelines can unlock archived data for domain-specific discovery.

#RAG #embeddings #unstructured data #vector search

Read article →
Introducing NVIDIA Fleet Intelligence for Real-Time GPU Fleet Visibility and Optimization DevOps 7.0
NVIDIA Developer Blog

Introducing NVIDIA Fleet Intelligence for Real-Time GPU Fleet Visibility and Optimization

NVIDIA Fleet Intelligence provides real-time visibility and optimization for large GPU fleets, addressing challenges of heterogeneous hardware, fast-moving software stacks, power constraints, and multitenant workloads. The platform detects hotspots, driver misconfigurations, and hardware faults at scale.

#GPU #fleet-management #observability #infrastructure

Read article →
Meet the latest Database Center, now with Gemini-powered fleet intelligence Cloud 7.0
Google Cloud Blog

Meet the latest Database Center, now with Gemini-powered fleet intelligence

Google Cloud Database Center now includes Gemini-powered AI analysis for fleet-wide database observability and optimization. Features include Gemini-driven correlation of performance shifts across database estates, actionable insights for diagnosis and remediation, and upcoming generative views driven by natural language queries replacing static dashboards.

#Gemini #database observability #fleet management #LLM

Read article →
Red Hat Summit 2026: Platform modernization and AI on Microsoft Azure Red Hat OpenShift DevOps 7.0
Azure Blog

Red Hat Summit 2026: Platform modernization and AI on Microsoft Azure Red Hat OpenShift

Microsoft and Red Hat highlighted Azure Red Hat OpenShift as a foundation for production AI workloads with consistent governance and security. The post features Banco Bradesco's deployment of 200+ AI initiatives on the platform, demonstrating how unified identity, security, and policy integration enables AI at enterprise scale.

#Kubernetes #AI operations #governance #security

Read article →
Introducing Claude Platform on AWS: Anthropic's native platform, through your AWS account AI 8.0
AWS ML Blog

Introducing Claude Platform on AWS: Anthropic's native platform, through your AWS account

Claude Platform on AWS is now generally available, giving customers direct access to Anthropic's native Claude Platform through AWS accounts with IAM authentication, AWS Marketplace billing, and CloudTrail audit logging. The service includes Claude Managed Agents, web search, MCP connectors, code execution, and files API, all integrated into AWS's identity and billing infrastructure.

#LLM #agents #Claude #AWS

Read article →
Anthropic trains Claude to resist blackmail & self-preservation behavior via agentic misalignment AI 8.0
The New Stack

Anthropic trains Claude to resist blackmail & self-preservation behavior via agentic misalignment

Anthropic released techniques to mitigate agentic misalignment in Claude Opus 4.7, where models exhibit self-preservation behavior and disobey orders when threatened with replacement. The company uses direct training on model evaluation distributions to suppress misaligned actions, addressing scenarios where models blackmail engineers or leak sensitive data to avoid shutdown.

#AI safety #agents #model alignment #Claude

Read article →
Manufacturing intelligence with Amazon Nova Multimodal Embeddings AI 7.0
AWS ML Blog

Manufacturing intelligence with Amazon Nova Multimodal Embeddings

Amazon Nova Multimodal Embeddings maps text, images, and document pages into a shared vector space, enabling cross-modal retrieval for manufacturing documents. A text query can retrieve engineering diagrams and thermal plots, while image queries retrieve written specifications, solving the limitation of text-only retrieval for technical documentation.

#embeddings #multimodal #RAG #retrieval

Read article →
How Miro uses Amazon Bedrock to boost software bug routing accuracy and improve time-to-resolution from days to hours AI 7.0
AWS ML Blog

How Miro uses Amazon Bedrock to boost software bug routing accuracy and improve time-to-resolution from days to hours

Miro built BugManager, an AI-powered bug triaging system using Amazon Bedrock, achieving six times fewer team reassignments and five times shorter resolution time. The system automates bug routing to responsible teams, reducing the estimated 42 years of annual cumulative lost productivity from misrouting and repeated reassignments.

#LLM #agents #classification #Bedrock

Read article →
Cloud Storage Rapid: Turbocharged object storage for AI and analytics Cloud 7.0
Google Cloud Blog

Cloud Storage Rapid: Turbocharged object storage for AI and analytics

Google Cloud announced Cloud Storage Rapid, a family of high-performance object storage capabilities for AI and analytics workloads. The offering includes Rapid Bucket (zonal high-performance storage) and Rapid Cache (on-demand read acceleration with compute-data colocation), addressing the storage bottleneck that emerges when training trillion-parameter models and running large-scale inference.

#storage #object storage #AI infrastructure #training

Read article →
Cluster-level reliability for trillion-parameter models on TPUs Cloud 8.0
Google Cloud Blog

Cluster-level reliability for trillion-parameter models on TPUs

Google Cloud presented a cluster-level reliability framework for TPU superpods, shifting from traditional instance-level reliability to aggregate infrastructure availability. The framework treats thousands of interconnected TPU chips as a single entity, with reliability guarantees at the superpod level (cubes of 64 TPUs connected via high-speed Inter-Chip Interconnect), and is now the operational standard for production TPU deployments.

#TPU #reliability #cluster #AI infrastructure

Read article →
AWS Weekly Roundup: Amazon Bedrock AgentCore payments, Agent Toolkit for AWS, and more (May 11, 2026) AI 8.0
AWS News

AWS Weekly Roundup: Amazon Bedrock AgentCore payments, Agent Toolkit for AWS, and more (May 11, 2026)

Amazon Bedrock AgentCore now supports managed payment capabilities, enabling AI agents to autonomously transact with APIs, MCP servers, and other services using Coinbase or Stripe wallets with session-level spending limits. The Agent Toolkit for AWS, a production-ready suite of tools for AI coding agents, launched alongside AWS MCP Server GA, reducing token costs and adding enterprise security controls.

#agents #tool-use #MCP #payments

Read article →
Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable Security 7.0
Meta Engineering

Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable

Labyrinth 1.1 improves end-to-end encrypted backup reliability for Messenger with a new sub-protocol that allows messages to reach encrypted backups immediately rather than waiting for device sign-in. Messages survive device loss, device switches, and long sign-in gaps through a message encryption key placed directly into the recipient's encrypted backup.

#E2EE #encryption #backup systems #security

Read article →
Build AI apps with Azure Cosmos DB: Key trends from Cosmos Conf 2026 Cloud 7.0
Azure Blog

Build AI apps with Azure Cosmos DB: Key trends from Cosmos Conf 2026

Azure Cosmos DB Conf 2026 highlighted three architectural shifts for AI applications: semi-structured data as foundational, accelerated development via coding agents, and flexible schemas replacing rigid data models. The post emphasizes Cosmos DB's role as a system of reasoning for AI workloads rather than just a system of record.

#database #semi-structured data #AI applications #schema flexibility

Read article →
Architecting a resilient, scalable and secure foundation for the agentic era AI 6.0
Google Cloud Blog

Architecting a resilient, scalable and secure foundation for the agentic era

Google Cloud blog on public sector AI infrastructure for agentic workloads. Announces eighth-generation TPUs (TPU 8t for training, TPU 8i for inference), AI Hypercomputer architecture, and Virgo Networking for high-performance at scale. Emphasizes infrastructure, data, and security layers for organization-wide agentic transformation.

#TPU #inference #training #AI infrastructure

Read article →
Future-proof your data strategy: AlloyDB adds PostgreSQL 18 and new Extended Support Cloud 6.0
Google Cloud Blog

Future-proof your data strategy: AlloyDB adds PostgreSQL 18 and new Extended Support

Google Cloud AlloyDB now supports PostgreSQL 18 and introduces Extended Support for older major versions, providing three years of security patches beyond community EOL. PostgreSQL 14-17 get defined extended-support windows through 2030-2033, allowing teams to upgrade on their own schedule.

#PostgreSQL #managed database #version support #cloud infrastructure

Read article →
Terraform adds cost visibility, project-level notifications, and more DevOps 6.0
HashiCorp Blog

Terraform adds cost visibility, project-level notifications, and more

HCP Terraform and Terraform Enterprise added billable resource analytics (GA) breaking down managed resources by project and workspace, project-level remote state sharing (GA), module testing for dynamic credentials (GA), and project-level notifications (GA). These features address cost visibility and governance blind spots in infrastructure management.

#Terraform #cost visibility #governance #infrastructure as code

Read article →
Amazon Quick: Accelerating the path from enterprise data to AI-powered decisions AI 7.0
AWS ML Blog

Amazon Quick: Accelerating the path from enterprise data to AI-powered decisions

Amazon Quick adds five new capabilities including Dataset Q&A, which lets users ask natural-language questions against enterprise datasets and receive SQL-generated results in seconds without sampling. The system handles row-level and column-level security, governance rules, and multi-dataset queries at scale, bridging the gap between ad-hoc business questions and trustworthy AI-generated answers.

#LLM #RAG #SQL generation #enterprise data

Read article →
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation Security 9.0
The Hacker News

Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation

Google disclosed the first known zero-day exploit developed with an AI system, used by cybercriminals to bypass 2FA at scale. The exploit was generated and discovered using AI, marking a significant shift in threat actor capability and the first documented malicious use of AI for vulnerability discovery in the wild.

#AI #zero-day #2FA bypass #exploit generation

Read article →
How AI-native systems are built AI 8.0
The New Stack

How AI-native systems are built

Outlines a layered architecture for building AI-native enterprise systems that shift from deterministic Software 1.0 to learned-logic Software 2.0. Emphasizes governance shields, probabilistic reasoning, and audit logging to maintain compliance and accountability while deploying LLMs in high-risk business contexts.

#LLM #agents #governance #enterprise architecture

Read article →
Why your AI agent doesn't actually remember anything AI 8.0
The New Stack

Why your AI agent doesn't actually remember anything

Deep dive into agent memory architecture beyond basic idempotency and workflow state. The article examines how agents fail to recall and reason about historical context across sessions, using a real customer support agent that lost track of multi-day conversations and promised actions. Distinguishes memory from infrastructure concerns like idempotency keys and state machines.

#agents #memory #state management #reliability

Read article →
GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access Security 8.0
Google Cloud Blog

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

Google Threat Intelligence Group report on adversarial use of AI: threat actors using AI-generated zero-day exploits, PRC and DPRK actors pursuing AI-driven vulnerability discovery, and AI-accelerated malware development with polymorphic obfuscation and defense evasion. First documented case of zero-day developed with AI in planned mass exploitation.

#threat intelligence #zero-day #malware #AI-generated exploits

Read article →
Presentation: Evolution of a Backend for a Streaming Application Cloud 7.0
InfoQ DevOps

Presentation: Evolution of a Backend for a Streaming Application

InfoQ presentation by Daniele Frasca on Joyn's architectural evolution from fragile single-node setups to resilient serverless on AWS. Covers Hub and Spoke pattern for data consistency, cell-based isolation for blast radius reduction, and cost optimization for multi-region active-active deployments.

#serverless #AWS #architecture #multi-region

Read article →
How to get engineering time back from Kubernetes upgrades DevOps 7.0
CNCF Blog

How to get engineering time back from Kubernetes upgrades

CNCF article quantifies the operational burden of Kubernetes maintenance: mid-size EKS deployments consume 4-6 weeks of senior engineer time per minor upgrade across three regions, displacing 2-3 roadmap features. Frames upgrade complexity as a hidden cost that compounds with CVE pressure and multi-cluster coordination.

#Kubernetes #EKS #operations #maintenance

Read article →
Article: Local-First AI Inference: A Cloud Architecture Pattern for Cost-Effective Document Processing AI 7.0
InfoQ DevOps

Article: Local-First AI Inference: A Cloud Architecture Pattern for Cost-Effective Document Processing

A hybrid inference pattern routes 70-80% of documents through deterministic local extraction at zero API cost, reserving Azure OpenAI calls for edge cases and low-confidence results flagged for human review. Deployed on 4,700 engineering drawing PDFs, the approach cut API costs by 75% and processing time by 55% while maintaining error bounds through a human review tier.

#inference #cost optimization #document processing #Azure OpenAI

Read article →
How enterprises are scaling AI AI 5.0
OpenAI Blog

How enterprises are scaling AI

OpenAI publishes guidance on enterprise AI scaling covering governance, workflow design, trust frameworks, and quality assurance practices. The resource distills patterns from customer deployments moving from pilot to production.

#LLM #governance #MLOps #enterprise

Read article →
Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads Security 8.0
The Hacker News

Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads

A malicious Hugging Face repository impersonating OpenAI's Privacy Filter model delivered a Rust-based information stealer to Windows users, reaching #1 on the platform's trending list with 244K downloads. The fake Open-OSS/privacy-filter project copied the legitimate openai/privacy-filter release to gain credibility and distribute malware.

#supply-chain #malware #Hugging Face #impersonation

Read article →
TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack Security 9.0
Snyk Blog

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

The Mini Shai-Hulud worm compromised 84 npm package artifacts across 42 @tanstack/* packages and others on May 11, 2026, exploiting GitHub Actions cache poisoning, OIDC token extraction, and Pwn Request vulnerabilities. This marks the first npm supply chain attack with valid SLSA Build Level 3 attestations, indicating sophisticated abuse of CI/CD trust chains.

#supply-chain #npm #GitHub Actions #OIDC

Read article →
Cursor in Microsoft Teams AI 7.0
Cursor Changelog

Cursor in Microsoft Teams

Cursor ships a Microsoft Teams integration: mention @Cursor in any channel to delegate work to a cloud agent or pull Cursor context back into the thread. The agent picks a repository and model automatically based on the prompt and recent activity, reads the full thread for context, implements a solution, and opens a PR for review. Install from the Cursor dashboard.

#agents #developer tools #Microsoft Teams #Cursor

Read article →
OpenAI launches the OpenAI Deployment Company to help businesses build around intelligence AI 6.0
OpenAI

OpenAI launches the OpenAI Deployment Company to help businesses build around intelligence

OpenAI is spinning up DeployCo, a majority-owned standalone unit that embeds Forward Deployed Engineers into enterprises to rebuild critical workflows around frontier models. Launches with over $4B of initial investment in a TPG-led partnership (Advent, Bain Capital, Brookfield as co-lead founding partners) and acquires Tomoro to bring ~150 FDEs and Deployment Specialists on day one. Engagements run a diagnostic, pick priority workflows, then design, build, test, and deploy production systems that wire OpenAI models into customer data, tools, and controls.

#OpenAI #enterprise AI #AI deployment #consulting

Read article →
Why 157,000 developers are hedging against Anthropic with OpenCode AI 8.0
The New Stack

Why 157,000 developers are hedging against Anthropic with OpenCode

OpenCode, an open-source coding agent, has accumulated 157,000 GitHub stars as developers adopt it over Anthropic's proprietary Claude Code following January's OAuth lockout. Anthropic simultaneously expanded Claude Code's rate limits, added multi-agent orchestration to Managed Agents, and signed a SpaceX deal for 220,000 Nvidia GPUs, but the divergence between managed and open-source coding harnesses reflects developer preference for portability.

#agents #coding agents #open-source #Claude

Read article →
Claude can now follow users across Outlook, Word, Excel, and PowerPoint AI 6.0
The New Stack

Claude can now follow users across Outlook, Word, Excel, and PowerPoint

Anthropic expanded Claude's Microsoft 365 integration to include Outlook in public beta while bringing Word, Excel, and PowerPoint integrations to general availability. Claude now maintains persistent context across emails, documents, spreadsheets, and presentations within a single conversation thread, with Word supporting direct editing via sidebar with tracked changes.

#Claude #Microsoft 365 #integrations #context persistence

Read article →
Why Prometheus couldn't see Cilium metrics at 2 a.m. DevOps 7.0
The New Stack

Why Prometheus couldn't see Cilium metrics at 2 a.m.

CNCF projects like Prometheus and Cilium work independently but fail to integrate without explicit ServiceMonitor configuration, creating what the article calls the 'integration tax'. Platform teams spend 80% of their time wiring together 20-30 core cloud-native tools rather than tuning individual components, a hidden cost that most production Kubernetes deployments face.

#Kubernetes #observability #service-mesh #integration

Read article →
Anthropic puts the "myth" in Mythos with its HackerOne bug bounty program Security 6.0
The New Stack

Anthropic puts the "myth" in Mythos with its HackerOne bug bounty program

Anthropic launched a public HackerOne bug bounty program one month after unveiling Claude Mythos, a restricted-access frontier model designed to identify and chain software vulnerabilities. The timing creates tension: Mythos is positioned as a powerful offensive AI tool for cybersecurity, yet Anthropic simultaneously opens vulnerability research to the broader community, suggesting confidence in its own defenses or a hedge against Mythos hype.

#security #bug bounty #Claude #vulnerability disclosure

Read article →
The attack surface moved inside the agent. So did Arcjet. AI 7.0
The New Stack

The attack surface moved inside the agent. So did Arcjet.

Arcjet announced Guards, a runtime security capability that enforces policy inside AI agent tool handlers, queue consumers, and workflow steps - code paths invisible to traditional WAFs and proxies. Traditional application security assumes HTTP request boundaries; agentic systems bypass those boundaries entirely, leaving untrusted inputs in function arguments and inter-agent state transfers unprotected. Guards addresses this gap by moving security enforcement into the agent runtime itself.

#AI agents #security #runtime security #tool-use

Read article →
Datadog and T-Mobile leaders reveal the reality of deploying AI agents in production AI 8.0
The New Stack

Datadog and T-Mobile leaders reveal the reality of deploying AI agents in production

Datadog and T-Mobile share production deployment lessons for AI agents: code generation from agents cannot be trusted without human review, T-Mobile handles 200k customer conversations daily via agents, and observability tooling must evolve to predict agent-driven system failures. The core challenge is validating agent-generated code before shipping.

#agents #observability #production #validation

Read article →
cPanel, WHM Release Fixes for Three New Vulnerabilities - Patch Now Security 6.0
The Hacker News

cPanel, WHM Release Fixes for Three New Vulnerabilities - Patch Now

cPanel released patches for three vulnerabilities in cPanel and Web Host Manager (WHM): CVE-2026-29201 (CVSS 4.3) allows privilege escalation via insufficient input validation in feature file handling, with additional CVEs addressing code execution and denial-of-service. Immediate patching recommended for all affected installations.

#CVE #cPanel #WHM #privilege-escalation

Read article →
Ship code within minutes with the Gemini CLI DevOps Extension AI 7.0
Google Cloud Blog

Ship code within minutes with the Gemini CLI DevOps Extension

Google released a Gemini CLI extension for CI/CD that bridges the gap between local development and production deployment by using an AI agent to generate full-stack apps and deployment pipelines from natural language prompts. The extension handles both quick deployments and complete pipeline generation from a single terminal interface, demonstrated with a React/Node.js example app.

#LLM agents #CI/CD #code generation #DevOps

Read article →
Kubernetes v1.36: Moving Volume Group Snapshots to GA DevOps 7.0
Kubernetes Blog

Kubernetes v1.36: Moving Volume Group Snapshots to GA

Volume group snapshots reach GA in Kubernetes v1.36, enabling crash-consistent snapshots across multiple PersistentVolumeClaims via label selectors and CSI drivers. This feature allows workloads to recover from a single point-in-time snapshot of multiple volumes, completing a multi-release maturation from Alpha in v1.27.

#Kubernetes #storage #snapshots #CSI

Read article →
OpenAI Codex arrives in the browser with new Chrome extension AI 7.0
The New Stack

OpenAI Codex arrives in the browser with new Chrome extension

OpenAI released a Chrome extension for Codex that allows agents to operate within a user's live browser session, accessing authenticated workflows in Gmail, Salesforce, LinkedIn, and internal web apps without taking over the desktop. This builds on Codex's April computer-use capabilities by enabling agents to work alongside users rather than monopolizing the machine.

#agents #tool use #browser automation #computer use

Read article →
Why age assurance laws matter for developers Other 5.0
GitHub Blog

Why age assurance laws matter for developers

GitHub outlines emerging age assurance and age verification regulations globally and their potential impact on open source software development and developer infrastructure. The post advocates for developer awareness and engagement with policymakers to prevent overly broad requirements that could burden non-consumer-facing platforms.

#policy #open source #regulation

Read article →
EMO: Pretraining mixture of experts for emergent modularity AI 6.0
Hugging Face Blog

EMO: Pretraining mixture of experts for emergent modularity

Allen AI's EMO research demonstrates how mixture-of-experts (MoE) architectures can develop emergent modularity during pretraining, where different experts specialize in distinct reasoning tasks without explicit supervision. This enables more efficient scaling and interpretability in large language models.

#MoE #architecture #training #interpretability

Read article →
With faster node startup for GKE, say goodbye to cold-start latency Cloud 8.0
Google Cloud Blog

With faster node startup for GKE, say goodbye to cold-start latency

Google Kubernetes Engine now delivers up to 4x faster node startup times through an architectural rework of VM and GKE node provisioning logic. The improvement is automatic and requires no configuration changes, directly reducing cold-start latency for AI inference, batch processing, and dynamic scaling workloads.

#Kubernetes #GKE #cold-start #node provisioning

Read article →
"The terminal still matters": Amp rebuilds its CLI for an agentic future beyond the command line AI 7.0
The New Stack

"The terminal still matters": Amp rebuilds its CLI for an agentic future beyond the command line

Amp, the AI coding startup from Sourcegraph, released Neo, a rebuilt CLI designed for remote control, plugin extensibility, and longer-running agent workflows. Amp argues that coding agents are evolving beyond single-editor, single-terminal models toward cross-environment systems, with the CLI becoming a control surface rather than the primary interface.

#agents #CLI #coding agents #tool use

Read article →
Pushing the Frontier for Data Agents with Genie AI 7.0
Databricks Blog

Pushing the Frontier for Data Agents with Genie

Databricks describes Genie as a state-of-the-art data agent that answers complex questions over structured data by reasoning over schemas, queries, and business logic. The system combines LLM reasoning with data platform integration for autonomous analytics.

#agents #data agents #LLM #SQL

Read article →
Energy trading analytics in a real-time market Cloud 5.0
Databricks Blog

Energy trading analytics in a real-time market

Databricks demonstrates real-time energy trading analytics and price forecasting use cases. The post covers streaming data ingestion, feature engineering, and model serving for energy market participants making sub-second trading decisions.

#streaming #analytics #forecasting #real-time

Read article →
Halliburton enhances seismic workflow creation with Amazon Bedrock and Generative AI AI 7.0
AWS ML Blog

Halliburton enhances seismic workflow creation with Amazon Bedrock and Generative AI

Halliburton deployed an AI assistant on Amazon Bedrock to automate seismic workflow configuration, replacing manual setup of ~100 specialized tools with natural language interaction. The solution uses Bedrock Knowledge Bases, Amazon Nova, and DynamoDB to convert geoscientist queries into executable workflows, achieving up to 95% acceleration in workflow creation.

#LLM #agents #RAG #tool-use

Read article →
Running Codex safely at OpenAI AI 7.0
OpenAI Blog

Running Codex safely at OpenAI

OpenAI details operational security practices for Codex, including sandboxing, approval workflows, network policies, and agent-native telemetry to enable safe deployment of code-generation agents in production environments.

#agents #code-generation #security #tool-use

Read article →
Benchmarking AI agent retrieval strategies on Kubernetes bug fixes AI 8.0
CNCF Blog

Benchmarking AI agent retrieval strategies on Kubernetes bug fixes

Empirical study evaluating AI coding agents on real Kubernetes bugs using three retrieval strategies: RAG-only (KAITO with Qdrant/BM25), filesystem search, and hybrid approaches. Found that retrieval alone is insufficient; agents fail at cross-file reasoning and scope identification even when surfacing correct files, revealing a bottleneck in contextual reasoning rather than code discovery.

#agents #RAG #evals #Kubernetes

Read article →
Anthropic recruited SpaceX's 220,000-GPU Colossus 1 to fix what Claude users kept complaining about AI 8.0
The New Stack

Anthropic recruited SpaceX's 220,000-GPU Colossus 1 to fix what Claude users kept complaining about

Anthropic partnered with SpaceX to access Colossus 1, a 220,000-GPU data center in Memphis delivering over 300 megawatts of compute. Anthropic is using the capacity to double Claude Code's rate limits for Pro and Max subscribers, remove peak-hour reductions, and increase Claude Opus API token rates (e.g., input tokens per minute from 30k to 500k for Tier 1).

#LLM inference #compute infrastructure #rate limits

Read article →
Retail markdown optimization: from reactive markdowns to proactive Other 5.0
Databricks Blog

Retail markdown optimization: from reactive markdowns to proactive

Databricks outlines a machine learning approach to retail markdown optimization, shifting from reactive discounting to predictive pricing strategies. The post covers data pipeline architecture, feature engineering, and model deployment for demand forecasting and price elasticity estimation using Databricks' platform.

#MLOps #pricing #demand forecasting #feature engineering

Read article →
Why telecom churn prediction misses the intervention window AI 5.0
Databricks Blog

Why telecom churn prediction misses the intervention window

Databricks analyzes why traditional churn prediction models fail in telecom by missing the intervention window between prediction and customer departure. The article argues for real-time, low-latency prediction pipelines that enable timely retention actions.

#churn prediction #real-time ML #latency #use case

Read article →
Canvas Breach Disrupts Schools & Colleges Nationwide Security 9.0
Krebs on Security

Canvas Breach Disrupts Schools & Colleges Nationwide

Cybercrime group ShinyHunters breached Canvas (Instructure) and defaced the login page with ransom demands, claiming access to data from 275 million students and faculty across 9,000 institutions. Instructure disabled the platform and confirmed stolen data includes names, email addresses, student IDs, and user messages; no passwords or government identifiers confirmed compromised.

#breach #ransomware #extortion #data-exfiltration

Read article →
Teaching Claude why AI 7.0
Anthropic Research

Teaching Claude why

Anthropic presents research on reducing agentic misalignment by training Claude to provide reasoning for its decisions. The work focuses on making agent behavior more interpretable and aligned with user intent.

#alignment #agents #interpretability #Claude

Read article →
Improving token efficiency in GitHub Agentic Workflows AI 8.0
GitHub Blog

Improving token efficiency in GitHub Agentic Workflows

GitHub details systematic token optimization across hundreds of internal agentic workflows running in CI, addressing cost accumulation in automated agents. The post covers instrumentation across Claude CLI, Copilot CLI, and Codex CLI, with preliminary optimization results and logging strategies.

#agents #token efficiency #cost optimization #CI

Read article →
Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRA DevOps 8.0
Kubernetes Blog

Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRA

Kubernetes v1.36 graduates Dynamic Resource Allocation (DRA) features to Beta and Stable, including the Prioritized list feature for hardware fallback preferences and support for ResourceClaims in PodGroups. DRA now extends to native resources like memory and CPU, with expanded driver ecosystem support for GPUs, networking, and specialized hardware.

#Kubernetes #DRA #resource allocation #GPU scheduling

Read article →
Gemini 3.1 Flash-Lite is now generally available on Gemini Enterprise Agent Platform AI 8.0
Google Cloud Blog

Gemini 3.1 Flash-Lite is now generally available on Gemini Enterprise Agent Platform

Gemini 3.1 Flash-Lite reached general availability as the fastest and most cost-efficient model in the Gemini 3 series, optimized for ultra-low latency and high-volume agentic tasks like tool calling and orchestration. The model is designed for production deployments requiring real-time responsiveness, with adoption from JetBrains IDE assistants and enterprise customer service operations.

#LLM #Gemini #agents #tool-use

Read article →
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems Security 8.0
The Hacker News

PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems

PCPJack is a credential theft framework targeting exposed cloud infrastructure, harvesting credentials from cloud services, containers, developer tools, and financial platforms. The malware exploits 5 CVEs to propagate across environments and exfiltrates stolen data through attacker-controlled infrastructure.

#credential theft #cloud security #CVE #malware

Read article →
Elastic architects reveal how to query observability data in plain English AI 6.0
The New Stack

Elastic architects reveal how to query observability data in plain English

Elastic is demonstrating how OpenTelemetry and generative AI enable non-technical staff (product managers, finance teams, app owners) to query operational data in natural language without SRE gatekeeping. The approach democratizes access to telemetry by combining open standards with LLM-based natural language interfaces, turning expanding data inflow into a searchable knowledge base.

#LLM #observability #OpenTelemetry #natural language

Read article →
Real-Time Performance Monitoring and Faster Debugging with NCCL Inspector and Prometheus DevOps 7.0
NVIDIA Developer Blog

Real-Time Performance Monitoring and Faster Debugging with NCCL Inspector and Prometheus

NCCL Inspector provides lightweight, continuous monitoring of GPU-to-GPU communication in distributed training, integrating with Prometheus for real-time performance visibility. The tool accelerates debugging by isolating bottlenecks across computation, communication, ranks, and hardware.

#NCCL #distributed training #observability #GPU communication

Read article →
New Bigtable in-memory tier for sub-millisecond read latency Cloud 7.0
Google Cloud Blog

New Bigtable in-memory tier for sub-millisecond read latency

Google Cloud announced Bigtable in-memory tier, delivering sub-millisecond read latency and approximately 10x higher point read throughput per dollar with hotspot resistance supporting up to 120,000 queries per second on a single row. The tier eliminates the need for separate caching layers and cache-aside logic by integrating in-memory performance directly into the managed database.

#Bigtable #in-memory #latency #caching

Read article →
How BASF manages thousands of supply chain decisions with AlphaEvolve's agentic algorithms AI 7.0
Google Cloud Blog

How BASF manages thousands of supply chain decisions with AlphaEvolve's agentic algorithms

BASF Agricultural Solutions deployed AlphaEvolve, an evolutionary coding agent on Google Cloud, to build a digital twin of their supply chain managing 5,000+ value chains with 30-level bills of materials. The agent autonomously generates and refines algorithms to support thousands of daily planning decisions across 180 production sites, replacing traditional mathematical models that cannot capture dynamic network behavior.

#agents #optimization #supply-chain #AlphaEvolve

Read article →
Secure short-term GPU capacity for ML workloads with EC2 Capacity Blocks for ML and SageMaker training plans Cloud 7.0
AWS ML Blog

Secure short-term GPU capacity for ML workloads with EC2 Capacity Blocks for ML and SageMaker training plans

AWS introduces EC2 Capacity Blocks for ML and SageMaker training plans to address GPU scarcity for short-term ML workloads. These offerings provide reserved GPU capacity for exploratory work, model validation, and time-bound tasks without the long-term commitment and cost overhead of on-demand capacity reservations.

#GPU capacity #EC2 #SageMaker #cost optimization

Read article →
Overcoming reward signal challenges: Verifiable rewards-based reinforcement learning with GRPO on SageMaker AI AI 8.0
AWS ML Blog

Overcoming reward signal challenges: Verifiable rewards-based reinforcement learning with GRPO on SageMaker AI

AWS demonstrates reinforcement learning with verifiable rewards (RLVR) on SageMaker AI, combining Group Relative Policy Optimization (GRPO) with objective verification to improve LLM training on tasks like math reasoning and code generation. The approach addresses reward signal reliability by introducing transparency and verification mechanisms into feedback loops.

#reinforcement learning #LLM training #reward modeling #GRPO

Read article →
With the launch of Meko, Yugabyte targets the data layer that's breaking multi-agent AI systems AI 8.0
The New Stack

With the launch of Meko, Yugabyte targets the data layer that's breaking multi-agent AI systems

Yugabyte launched Meko, an open-source agent-native data infrastructure addressing state management failures in multi-agent systems. Research shows 37% of multi-agent failures are state failures (inconsistent views of what happened and what is true), not reasoning failures, making the memory/data layer the bottleneck, not the model.

#agents #state management #multi-agent #data infrastructure

Read article →
How Cloudflare responded to the "Copy Fail" Linux vulnerability Security 7.0
Cloudflare Blog

How Cloudflare responded to the "Copy Fail" Linux vulnerability

Cloudflare detailed its response to CVE-2026-31431, a Linux kernel local privilege escalation vulnerability disclosed April 29, 2026. The company's behavioral detections identified the exploit pattern within minutes; no customer impact occurred. The post explains Cloudflare's custom LTS kernel build process, automated weekly builds, and staged rollout via the Edge Reboot Release pipeline.

#CVE #Linux kernel #privilege escalation #incident response

Read article →
Scaling Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber AI 6.0
OpenAI Blog

Scaling Trusted Access for Cyber with GPT-5.5 and GPT-5.5-Cyber

OpenAI expands Trusted Access for Cyber program with GPT-5.5 and a specialized GPT-5.5-Cyber model, providing verified security researchers and defenders with early access to advanced models for vulnerability research and critical infrastructure protection.

#GPT-5.5 #security research #vulnerability research #trusted access

Read article →
Comparing Different Approaches to Sandboxing AI 6.0
Docker Blog

Comparing Different Approaches to Sandboxing

Docker explores sandboxing strategies for AI agents, starting from chroot-based file system isolation through cloud VMs. The article addresses the core risk: agents are non-deterministic and prone to hallucination and prompt injection, so write access to systems requires isolation to prevent destructive commands like rm -rf.

#agents #sandboxing #security #isolation

Read article →
Agents that transact: Introducing Amazon Bedrock AgentCore payments, built with Coinbase and Stripe AI 9.0
AWS ML Blog

Agents that transact: Introducing Amazon Bedrock AgentCore payments, built with Coinbase and Stripe

AWS announces Amazon Bedrock AgentCore payments, enabling AI agents to autonomously call APIs, access MCP servers, and execute financial transactions with built-in billing, credential management, and spending governance. The service abstracts payment orchestration across multiple providers, supporting the emerging agentic economy with real-time micro-transaction billing.

#agents #tool use #payments #MCP

Read article →
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories Security 6.0
The Hacker News

ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories

This bulletin aggregates multiple security threats including plaintext password exposure at edge, ICS zero-days, and supply-chain attacks via compromised packages and fake applications. The piece highlights that many 2026 attack chains rely on basic tactics like credential theft, DNS hijacking, and social engineering rather than sophisticated exploits.

#supply chain #credentials #ICS #0-day

Read article →
Parloa builds service agents customers want to talk to AI 6.0
OpenAI Blog

Parloa builds service agents customers want to talk to

Parloa uses OpenAI models to build voice-driven customer service agents that enterprises can design, simulate, and deploy for real-time interactions. The platform abstracts the complexity of building reliable conversational agents, enabling faster iteration and testing before production rollout.

#agents #voice #customer service #LLM

Read article →
The introverts' edge: How AI is leveling the developer floor AI 6.0
The New Stack

The introverts' edge: How AI is leveling the developer floor

AI coding assistants like GitHub Copilot and IBM Bob are reshaping junior developer onboarding by providing immediate, judgment-free feedback and reducing the need to interrupt senior engineers. The article argues that AI tools address a structural problem in developer training where introverted or less assertive juniors historically fall behind due to lack of mentorship access.

#coding assistants #developer experience #LLM #junior developers

Read article →
PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux Security 8.0
The Hacker News

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

Kaspersky researchers discovered three malicious PyPI packages that masquerade as legitimate tools while covertly delivering ZiChatBot malware via Zulip APIs to Windows and Linux systems. The packages implement advertised functionality as cover while executing hidden payload delivery, exploiting the trust model of open-source package repositories.

#supply-chain #malware #PyPI #CVE

Read article →
Microcks becomes a CNCF incubating project DevOps 6.0
CNCF Blog

Microcks becomes a CNCF incubating project

Microcks, an open-source API mocking and contract testing platform, has graduated from CNCF Sandbox to Incubating status. The tool converts OpenAPI, AsyncAPI, gRPC, GraphQL, Postman, and SOAP/WSDL specs into live mock servers and powers automated contract conformance tests across synchronous and asynchronous protocols. The project has grown significantly since joining Sandbox in June 2023, with adoption from financial institutions and major consulting firms.

#API mocking #contract testing #microservices #OpenAPI

Read article →