Get your expert

The develeap news feed

A curated, ranked stream of the news that actually moves our craft.

Introducing computer use in Gemini 3.5 Flash AI 9.0 Introducing computer use in Gemini 3.5 Flash Jun 24, 2026 Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager Security 9.0 Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager Jun 24, 2026 Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root Security 9.0 Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root Jun 24, 2026 Evaluating performance and efficiency of the GitHub Copilot agentic harness across models and tasks AI 8.0 Evaluating performance and efficiency of the GitHub Copilot agentic harness across models and tasks Jun 25, 2026
Build interactive PDF text extraction from Amazon S3 Cloud 6.0
AWS ML Blog

Build interactive PDF text extraction from Amazon S3

AWS demonstrates an MCP server approach for real-time PDF text extraction from S3, providing on-demand document access without batch pipelines. The solution uses a protocol-based architecture for programmatic queries and compares against Amazon Textract for use-case selection.

#MCP #S3 #document processing #serverless

Read article →
How Cara pioneers domain-specific AI for enterprise insurance brokerages with AWS AI 7.0
AWS ML Blog

How Cara pioneers domain-specific AI for enterprise insurance brokerages with AWS

Cara delivers a domain-specific AI solution on AWS that automates back-office workflows for insurance brokerages, handling application completion, policy analysis, and data re-keying while maintaining PII security and regulatory compliance. The post details technical design decisions and measurable outcomes for enterprise deployments.

#domain-specific AI #insurance #workflow automation #compliance

Read article →
Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study AI 7.0
Meta Engineering

Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study

Meta describes privacy-aware infrastructure (PAI) for enforcing retention, access, and anonymization policies in AI-native systems. The approach combines rich context building with LLM-driven asset classification to handle ambiguous, noisy data at scale while maintaining human oversight for judgment and accountability.

#LLM #privacy #data governance #classification

Read article →
Introducing the Cluster API plugin for Headlamp DevOps 7.0
Kubernetes Blog

Introducing the Cluster API plugin for Headlamp

Headlamp adds a dedicated Cluster API plugin providing visual management of cluster lifecycle resources including MachineDeployments, MachineSets, and KubeadmControlPlane objects. The plugin enables platform teams to scale worker nodes, monitor control plane status, and trace resource ownership hierarchies directly from the browser UI instead of raw kubectl commands.

#Kubernetes #Cluster API #UI #platform engineering

Read article →
Deploy Boundary on Kubernetes with official Helm charts DevOps 6.0
HashiCorp Blog

Deploy Boundary on Kubernetes with official Helm charts

HashiCorp released two official Helm charts for Boundary: one for the controller (control plane) and one for workers (data plane). These charts eliminate hand-crafted manifests and provide standardized, production-ready deployment for both self-managed Boundary clusters and HCP Boundary deployments with self-managed workers.

#Kubernetes #Helm #Boundary #PAM

Read article →
How to Generate an SBOM for Container Workflows DevOps 7.0
Docker Blog

How to Generate an SBOM for Container Workflows

Docker outlines best practices for SBOM generation in container pipelines, emphasizing build-time generation over post-build scanning for completeness and accuracy. The post covers decisions that determine SBOM quality (completeness, accuracy, freshness, verifiability), security considerations for generation tooling, and how pre-built SBOMs in base images reduce burden.

#SBOM #supply-chain #security #container

Read article →
See your serverless: introducing the Headlamp plugin for Knative DevOps 7.0
Kubernetes Blog

See your serverless: introducing the Headlamp plugin for Knative

Headlamp adds a Knative plugin enabling operators to inspect KServices, Revisions, and DomainMappings with a resource graph view and inline editing of traffic splits and autoscaling annotations. The plugin consolidates Knative management from kn CLI and kubectl into a single web interface.

#Kubernetes #Knative #serverless #traffic management

Read article →
Retrofit, don't rebuild: Agentic overlays for transforming legacy enterprise services AI 8.0
AWS ML Blog

Retrofit, don't rebuild: Agentic overlays for transforming legacy enterprise services

Agentic overlays are thin wrapper layers that transform REST-based microservices into agents capable of Agent-to-Agent (A2A) communication without rewriting business logic. The post presents reference architectures and sample code showing how to expose REST APIs as tools compatible with the Model Context Protocol (MCP), enabling enterprises to integrate legacy services into standardized agent frameworks while reducing infrastructure sprawl.

#agents #A2A #MCP #legacy systems

Read article →
"Code should be regenerated, not maintained": Codeplain makes the case for spec-driven development AI 6.0
The New Stack

"Code should be regenerated, not maintained": Codeplain makes the case for spec-driven development

Codeplain, a new startup, advocates spec-driven development using Plain, an open-source specification language, to replace traditional code review with spec review. The approach treats code as regenerated output from specifications rather than maintained artifacts, shifting the bottleneck from writing to reviewing.

#code-generation #spec-driven #LLM #development-workflow

Read article →
Optimize model training on Amazon SageMaker AI with NVIDIA Blackwell AI 7.0
AWS ML Blog

Optimize model training on Amazon SageMaker AI with NVIDIA Blackwell

P6-B200 instances with 8 NVIDIA Blackwell GPUs are now available on Amazon SageMaker AI Training, enabling larger batch sizes, longer sequence lengths, and reduced model sharding overhead. The post provides a practical framework for tuning training configurations including batch size selection, sequence length optimization, precision format choices for 1B-64B parameter models, and activation checkpointing strategies.

#training #Blackwell #GPU #SageMaker

Read article →
Implementing super resolution by deploying SeedVR2 on Amazon SageMaker AI AI 6.0
AWS ML Blog

Implementing super resolution by deploying SeedVR2 on Amazon SageMaker AI

SeedVR2, an open-source video restoration model from ByteDance, can be deployed on Amazon SageMaker AI for scalable video upscaling and super resolution. The post covers solution architecture, deployment steps, and performance comparisons showing quality improvements and processing efficiency for upscaling lower-resolution video libraries to modern display resolutions.

#video restoration #super resolution #SeedVR2 #SageMaker

Read article →
Build self-service AWS Health analytics to find actionable health insights with AI agents powered by Amazon Bedrock AI 7.0
AWS ML Blog

Build self-service AWS Health analytics to find actionable health insights with AI agents powered by Amazon Bedrock

Chaplin is an open-source solution using AI agents exposed through the Model Context Protocol (MCP) to provide self-service AWS Health event analytics. Operations teams can query health events in natural language from MCP-compatible AI assistants to identify production impact and prioritize actions across 50+ accounts without waiting for AWS Support or Technical Account Managers.

#agents #MCP #AWS Health #Bedrock

Read article →
Building agentic AI applications with a modern data mesh strategy on AWS AI 7.0
AWS ML Blog

Building agentic AI applications with a modern data mesh strategy on AWS

Building agentic AI applications requires fine-grained access control across multiple data sources that RAG-based approaches cannot provide. The post extends earlier serverless data lake patterns by replacing Amazon OpenSearch Serverless with Amazon S3 Vectors for cost-optimized knowledge bases, reducing vector storage and query costs by up to 90% while enforcing governance from tool discovery through query execution to response synthesis.

#agents #data mesh #governance #S3 Vectors

Read article →
Template-based data extraction is dead. Here's what comes next. AI 7.0
The New Stack

Template-based data extraction is dead. Here's what comes next.

Amazon Bedrock Data Automation (BDA) is a fully managed AWS service for end-to-end document and media automation using foundation models. It automates extraction, classification, and transformation of unstructured content across documents, images, audio, and video, replacing brittle template-based systems.

#LLM #document-automation #multimodal #foundation-models

Read article →
EU Cyber Resilience Act: Overview, Requirements, and Timelines Security 7.0
Docker Blog

EU Cyber Resilience Act: Overview, Requirements, and Timelines

The EU Cyber Resilience Act (CRA), effective December 11, 2027, establishes mandatory cybersecurity baselines for all hardware and software products sold in Europe. Mandatory vulnerability reporting begins September 11, 2026. For container teams, the CRA turns SBOM generation, vulnerability disclosure, and image hardening into legal requirements.

#compliance #CRA #SBOM #vulnerability-reporting

Read article →
How we cut AI costs by 80% AI 8.0
The New Stack

How we cut AI costs by 80%

The post identifies context accumulation as the primary driver of AI agent costs and demonstrates an 80% cost reduction through context management optimization. It details how agents repeatedly ingest growing context windows across tool calls and proposes caching strategies to avoid redundant context reingestion.

#agents #context-management #cost-optimization #MCP

Read article →
How we built saga rollbacks for Cloudflare Workflows DevOps 7.0
Cloudflare Blog

How we built saga rollbacks for Cloudflare Workflows

Cloudflare Workflows now supports saga rollbacks, allowing developers to declare compensation logic within step definitions to handle failures in multi-step durable workflows. Enables semantic reversal of operations when downstream steps fail, eliminating manual compensation tracking.

#saga-pattern #workflow-orchestration #distributed-systems #state-management

Read article →
Building a Cluster-Aware AI Agent with Kubernetes, Argo CD, and GitOps AI 8.0
CNCF Blog

Building a Cluster-Aware AI Agent with Kubernetes, Argo CD, and GitOps

A walkthrough of deploying a self-hosted, read-only AI agent inside Kubernetes that observes live cluster state through the API and reasons with a local LLM, with no data egress and full GitOps auditability via Argo CD. The agent runs as a standard Deployment with a scoped ServiceAccount (get/list only), making it cluster-aware and immutable by design. Source code provided at github.com/MaryamTavakkoli/local-k8s-ai-agent.

#LLM #agents #Kubernetes #GitOps

Read article →
Cloudflare Ships Agent Skills for Zero Trust Deployment and Migration AI 7.0
InfoQ DevOps

Cloudflare Ships Agent Skills for Zero Trust Deployment and Migration

Cloudflare released the Cloudflare One stack, an open-source library of agent skills for planning, deploying, and managing Zero Trust environments. The skills include automated migration logic for Zscaler and Palo Alto Networks, reusing logic from Cloudflare's Descaler program that has moved enterprise customers in hours rather than months.

#agents #Zero Trust #automation #infrastructure

Read article →
Boundary 1.0 releases RDP session recording and improved management DevOps 6.0
HashiCorp Blog

Boundary 1.0 releases RDP session recording and improved management

Boundary 1.0 marks production maturity for privilege access management with RDP session recording (capture and replay of interactive user actions), Kubernetes Helm charts for simplified deployment, and planned expansion to other protocols. The release reflects architecture maturity and proven deployments across customer environments.

#Boundary #PAM #RDP #session-recording

Read article →
Scaling without friction: Aliases at project scope in Boundary DevOps 5.0
HashiCorp Blog

Scaling without friction: Aliases at project scope in Boundary

Boundary 1.0 introduces project-scoped target aliases, allowing teams to independently create and manage memorable names for infrastructure targets within their own project boundaries instead of requiring global uniqueness. This solves the naming collision problem at enterprise scale where multiple teams need identical names like ssh-jumper or postgres.db across different environments.

#Boundary #PAM #scaling #multi-tenancy

Read article →
HCP Vault Dedicated introduces cluster disaster recovery (public preview) DevOps 6.0
HashiCorp Blog

HCP Vault Dedicated introduces cluster disaster recovery (public preview)

HCP Vault Dedicated now offers cluster-level disaster recovery (cluster DR) in public preview, enabling failover and DR testing for individual Vault clusters independent of regional outages. Cluster DR complements existing regional DR by allowing teams to rehearse incident response, verify runbooks, and test failover behavior under controlled conditions.

#disaster recovery #Vault #secrets management #resilience

Read article →
Grab Builds Secure Agentic AI Workload Platform AI 8.0
InfoQ DevOps

Grab Builds Secure Agentic AI Workload Platform

Grab's security team built Palana, a Kubernetes-native secure execution platform for running autonomous AI agents safely. Palana isolates agent threats including unpredictable tool-use, code-writing, and prompt injection risks using isolated namespaces, out-of-process control planes, and proxy-mediated Vault-backed secrets.

#agents #Kubernetes #security #tool-use

Read article →
Azul wants to find your unpatched JVMs before AI does Security 6.0
The New Stack

Azul wants to find your unpatched JVMs before AI does

Azul Systems launched a free JVM vulnerability risk assessment tool that scans networks to identify unpatched Java runtimes and maps findings to CISA KEV and NVD catalogs. The tool targets DevOps and SecOps teams lacking visibility into embedded and unmanaged JVM instances, with conversion to Azul Core subscriptions. Azul emphasizes its security-only Critical Patch Updates model versus AWS Corretto and Eclipse Temurin.

#Java #JVM #vulnerability scanning #security

Read article →
Will it Mythos? One coder's verdict on Anthropic's blend of debugging AI 7.0
The New Stack

Will it Mythos? One coder's verdict on Anthropic's blend of debugging

Independent developer Joe Cooper benchmarked Anthropic's Mythos model on security bug detection by building a corpus of bugs documented as Mythos-found, then testing whether top-tier models like Opus could identify them blind. Cooper's analysis questions Mythos's real-world effectiveness at finding challenging security vulnerabilities versus marketing claims.

#LLM evaluation #evals #security bugs #Anthropic

Read article →
Chainguard targets Java's unpatched vulnerability backlog with drop-in remediated libraries Security 7.0
The New Stack

Chainguard targets Java's unpatched vulnerability backlog with drop-in remediated libraries

Chainguard Libraries for Java is now generally available, offering backported CVE fixes for Spring Boot, Spring Framework, Spring Security, and H2 Database without requiring upstream patches. The offering targets legacy Java shops where 90% of Fortune 500 companies rely on Java for core systems, many stuck on end-of-life versions like Spring Boot 2.7 that carry 143 unpatched CVEs across 79 projects.

#CVE #Java #Spring Boot #supply-chain

Read article →
Build a healthcare appointment agent with Amazon Nova 2 Sonic AI 7.0
AWS ML Blog

Build a healthcare appointment agent with Amazon Nova 2 Sonic

Tutorial on building a voice agent for healthcare appointment reminders using Amazon Nova 2 Sonic and Bedrock AgentCore. The agent handles voice authentication, appointment confirmation/cancellation/rescheduling, pre-visit health collection, and escalation to staff, with optional Amazon Connect integration for outbound dialing.

#voice-agents #Amazon Nova #Bedrock #tool-use

Read article →
AI-powered BI with Snowflake and Amazon Quick Cloud 7.0
AWS ML Blog

AI-powered BI with Snowflake and Amazon Quick

Snowflake semantic views paired with Amazon QuickSight datasets eliminate data reconciliation gaps by embedding business logic at the data layer. Semantic views provide unified definitions for metrics, dimensions, and relationships that both AI and BI systems inherit, reducing hallucinations and ensuring consistent answers across applications.

#semantic-layer #Snowflake #QuickSight #data-governance

Read article →
Spotlight on WG Device Management DevOps 8.0
Kubernetes Blog

Spotlight on WG Device Management

Kubernetes Device Management Working Group discusses the graduation of Dynamic Resource Allocation (DRA) to GA, addressing hardware-intensive workloads like GPUs, TPUs, and network interfaces. DRA enables programmable, hardware-aware scheduling beyond legacy CPU and memory models, critical for AI, Edge, and Telecom workloads at scale.

#Kubernetes #device-management #DRA #GPU-scheduling

Read article →
Enhanced data resilience with cross-region backups in Backup and DR Service Cloud 7.0
Google Cloud Blog

Enhanced data resilience with cross-region backups in Backup and DR Service

Google Cloud announced general availability of cross-region backups in Backup and DR Service, decoupling backup destination from source region. The feature is now available for Compute Engine instances, Disks, and Filestore, with Cloud SQL and AlloyDB support coming later, enabling cost-optimized regional resilience and GDPR compliance.

#backup #disaster-recovery #cross-region #compliance

Read article →
What if the answer was already in your data? AI 5.0
Databricks Blog

What if the answer was already in your data?

Databricks and Kythera Labs discuss AI-native approaches to querying and reasoning over enterprise data. The post covers how LLMs can surface insights from existing data without requiring new collection or transformation.

#LLM #RAG #data-retrieval #enterprise-AI

Read article →
Agentic infrastructure operations begin with accurate, reliable infrastructure data AI 6.0
The New Stack

Agentic infrastructure operations begin with accurate, reliable infrastructure data

Infrastructure AI agents require a unified, accurate data model to avoid confident mistakes that expose databases, cause failed deployments, or trigger outages. The article argues that 70% of industry leaders identify fragmented infrastructure tooling as a core bottleneck, and agents will expose these gaps through failures unless organizations consolidate their IP address management, inventory, and configuration data.

#agents #infrastructure #data quality #automation

Read article →
Introducing computer use in Gemini 3.5 Flash AI 9.0
DeepMind

Introducing computer use in Gemini 3.5 Flash

Google DeepMind announces computer-use capabilities in Gemini 3.5 Flash, enabling the model to interact with screens, click buttons, and navigate interfaces. This extends tool-use beyond APIs to direct UI automation.

#LLM #tool-use #computer-vision #UI-automation

Read article →
Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered Security 6.0
The Hacker News

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

Law enforcement and private sector partners including Bitdefender, Bitsight, ESET, and Microsoft dismantled criminal infrastructure powering Amadey and StealC malware. The operation recovered 27 million stolen credentials and disrupted the infrastructure used to launch ransomware, financial fraud, and attacks on critical infrastructure.

#malware #ransomware #supply-chain #threat-intelligence

Read article →
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks Security 8.0
The Hacker News

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Novee Security identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows attackers to hijack workflows and compromise open-source supply chains. The vulnerability affects 300+ GitHub repositories at major organizations including Microsoft, Google, and Apache, enabling full attacker control of repositories.

#CI/CD #supply-chain #GitHub #workflow-hijacking

Read article →
Sakana Fugu is more than a router. But it's not the blueprint for AI sovereignty, either. AI 6.0
The New Stack

Sakana Fugu is more than a router. But it's not the blueprint for AI sovereignty, either.

Sakana AI released Fugu, a multi-agent orchestration system that breaks user prompts into subtasks and routes them across expert models via learned orchestration logic, not simple model comparison. Early feedback reports mixed results: some users see frontier-model performance on engineering and reasoning benchmarks, while others report high costs, fast token burn, and performance below Anthropic Claude 5 and Mythos Preview.

#agents #model routing #orchestration #multi-model

Read article →
From Awareness to Engineered Accessibility in Open Source Other 5.0
CNCF Blog

From Awareness to Engineered Accessibility in Open Source

The CNCF Merge Forward Neurodiversity group reframes open-source accessibility from individual awareness (Day 1) to systemic universal design (Day 2), reducing cognitive friction in documentation, communication norms, and governance. The article argues that invisible assumptions in issue templates, PR comments, and synchronous-first workflows create barriers that compound across the contributor journey.

#accessibility #open-source #community #governance

Read article →
Dawn of the Apex Agentic Adversary Security 7.0
The Hacker News

Dawn of the Apex Agentic Adversary

The article discusses a shift from human-speed threats to machine-speed adversaries powered by AI agents. Traditional security timelines where researchers find bugs, CVEs are cataloged, patches are developed, and fixes deployed over weeks or months are becoming obsolete as agentic adversaries operate at machine speed.

#AI agents #adversarial-AI #threat-intelligence #security

Read article →
Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager Security 9.0
Google Cloud Blog

Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager

Mandiant identified active exploitation of CVE-2026-20245, a zero-day privilege escalation vulnerability in Cisco Catalyst SD-WAN Manager. A threat actor exploited the flaw via malicious CSV file upload to escalate from compromised admin account to root access, using anti-forensic techniques including selective file deletion and configuration restoration.

#CVE #zero-day #SD-WAN #privilege-escalation

Read article →
Unlocking the Cloudflare app ecosystem with OAuth for all DevOps 7.0
Cloudflare Blog

Unlocking the Cloudflare app ecosystem with OAuth for all

Cloudflare announced self-managed OAuth for all customers, enabling developers to create OAuth clients for delegated API access without manual onboarding. The feature supports SaaS integrations, CI/CD workflows, and agentic tools, replacing reliance on API tokens with scoped OAuth flows for better security and developer experience.

#OAuth #API #authentication #CI/CD

Read article →
Advancing AI agent security in Vault AI 7.0
HashiCorp Blog

Advancing AI agent security in Vault

HashiCorp Vault now offers AI agent authorization in public preview for Enterprise customers, enforcing per-request authorization via OAuth 2.0 Rich Authorization Requests (RFC 9396). The `authorization_details` claim is now required by default, enabling fine-grained, ephemeral permissions that prevent over-authorization and enforce least privilege for each agent request.

#agents #authorization #OAuth 2.0 #least privilege

Read article →
Kubernetes teams trust automation to ship code but not to touch CPU, and AI is raising the stakes DevOps 7.0
The New Stack

Kubernetes teams trust automation to ship code but not to touch CPU, and AI is raising the stakes

Survey of 321 Kubernetes practitioners reveals a trust asymmetry: 82% trust automated deployments, but only 27% allow auto-applied CPU/memory changes even within guardrails. As AI inference scales on Kubernetes, this hesitation around resource optimization becomes increasingly expensive, forcing teams to choose between safety margins and cost efficiency.

#Kubernetes #autoscaling #resource optimization #AI inference

Read article →
Genesis Workbench: A blueprint for industry AI in life sciences, powered by Databricks and NVIDIA AI 6.0
Databricks Blog

Genesis Workbench: A blueprint for industry AI in life sciences, powered by Databricks and NVIDIA

Databricks and NVIDIA announce Genesis Workbench, a reference architecture for GPU-accelerated drug discovery combining Databricks' data platform with NVIDIA's compute and BioNeMo models. The workbench provides a blueprint for life sciences organizations to build end-to-end AI pipelines for discovery workflows.

#life sciences #GPU acceleration #drug discovery #data platform

Read article →
OpenClaw and Hermes agree on what an agent is. They disagree on what controls it. AI 8.0
The New Stack

OpenClaw and Hermes agree on what an agent is. They disagree on what controls it.

OpenClaw (Microsoft) and Hermes Agent (Nous Research) both provide harnesses that turn language models into autonomous systems, but diverge on architecture: OpenClaw centers on gateway/channel integration, while Hermes prioritizes memory and learning. Both shipped in 2024 and compete on the control layer that governs agent behavior.

#agents #agent harness #LLM #autonomy

Read article →
What is an SBOM (and Why Can't You Ship Without One)? Security 6.0
Docker Blog

What is an SBOM (and Why Can't You Ship Without One)?

Docker explains SBOM fundamentals, formats, and tooling for container security. The article covers why 73% of organizations recognize SBOMs improve vulnerability mitigation, regulatory drivers (EO 14028, CISA, EU CRA), and how to generate SBOMs at image build time to capture the full dependency tree including OS packages.

#SBOM #supply-chain #container security #provenance

Read article →
Build a protein research copilot with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

Build a protein research copilot with Amazon Bedrock AgentCore

Tutorial on building a conversational protein research agent using Amazon Bedrock AgentCore, Strands Agents SDK, and pgvector-backed Aurora PostgreSQL to enable natural language queries over peptide embeddings. Demonstrates tool-use orchestration, SageMaker serverless endpoints for ESM-C 300M embeddings, and vector similarity search for structural peptide matching.

#agents #tool-use #embeddings #RAG

Read article →
Nx debuts Polygraph, taking aim at what's stalling AI coding agents AI 8.0
The New Stack

Nx debuts Polygraph, taking aim at what's stalling AI coding agents

Nx launched Polygraph, a service that creates a synthetic monorepo from multiple repositories so AI coding agents can work across repos as if they were unified. Agents stall when changes span repositories or depend on others' work; Polygraph combines repos with agent traces to enable cross-repo autonomy. Currently free during early access.

#agents #coding agents #monorepo #AI

Read article →
Maximize AI Factory Energy Efficiency Through Full-Stack Inference and Training Optimizations AI 7.0
NVIDIA Developer Blog

Maximize AI Factory Energy Efficiency Through Full-Stack Inference and Training Optimizations

NVIDIA outlines strategies to optimize power consumption across AI infrastructure, where power can represent 40% of operating expenses. The post covers full-stack optimizations spanning data ingestion, training, and inference to maximize performance per watt, a critical metric when power budgets are capped by regional providers.

#inference #training #energy efficiency #optimization

Read article →
Scattered Spider Hackers Plead Guilty on Day 1 of Trial Security 5.0
Krebs on Security

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two Scattered Spider members pleaded guilty in UK court for the August 2024 Transport for London ransomware attack. The group is linked to 120 U.S. computer intrusions across 47 entities between May 2022 and September 2025, with victims paying at least $115 million in ransom.

#ransomware #Scattered Spider #breach #threat intelligence

Read article →
How Meta Engineered Ultra-Narrow Batteries for AI Glasses Other 5.0
Meta Engineering

How Meta Engineered Ultra-Narrow Batteries for AI Glasses

Meta engineered steel-can batteries as narrow as 7mm to power Ray-Ban Meta and Oakley Meta Vanguards smart glasses, enabling concurrent camera, speaker, and AI workload operation. Traditional pouch cells waste volume and cannot deliver peak power for multitasking; steel-can cells provide rigid, precise form factors that maximize usable space in temple arms.

#hardware #batteries #wearables #AI glasses

Read article →
AI can write the code. Your team still owns the debt. AI 8.0
The New Stack

AI can write the code. Your team still owns the debt.

AI-generated code can pass unit tests while missing architectural context and maintainability standards, shifting costs from production to verification. Teams now face overwhelming review volume as AI increases the surface area of potential issues; the economics of technical debt have fundamentally changed from upfront prevention to downstream remediation.

#code quality #technical debt #verification #AI

Read article →
Log Analytics is now Observability Analytics: Query logs and traces with SQL Cloud 7.0
Google Cloud Blog

Log Analytics is now Observability Analytics: Query logs and traces with SQL

Google Cloud rebranded Log Analytics to Observability Analytics and made Trace data and the Observability API generally available. The platform now supports SQL queries that join logs with distributed trace spans, enabling root-cause analysis across microservices and AI agent telemetry. Example: single SQL query to find checkout requests exceeding 5 seconds and identify which microservice consumed the most time.

#observability #SQL #distributed tracing #logs

Read article →
Verifiable, private AI: Google Cloud expands Confidential Computing frontiers Cloud 7.0
Google Cloud Blog

Verifiable, private AI: Google Cloud expands Confidential Computing frontiers

Google Cloud announced Confidential G4 VMs with NVIDIA RTX PRO 6000 Blackwell GPUs in preview, enabling confidential AI inference and fine-tuning at global scale. The offering supports multiple consumption models (On Demand, Reservations, DWS Flex Start, Spot/Preemptible) across all Google Cloud regions where standard G4 is available, providing hardware-based TEE protection for sensitive AI workloads.

#confidential computing #TEE #GPU #AI infrastructure

Read article →
I automated my job (and it made me a better leader) AI 5.0
GitHub Blog

I automated my job (and it made me a better leader)

A GitHub leader describes using GitHub Copilot app automations to consolidate fragmented workflow context across Slack, docs, and planning tools. By automating context-switching and routine coordination tasks, the author freed cognitive load for higher-value thinking and decision-making.

#agents #automation #workflow #GitHub Copilot

Read article →
GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source Other 5.0
GitHub Blog

GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source

GitHub, Hugging Face, Black Forest Labs, and Mozilla form a coalition opposing California's SB 942/SB 1000 AI Transparency Act as drafted, arguing that mandatory license revocation provisions conflict with perpetual open-source licenses. The coalition proposes aligning with the EU AI Act's approach of notifying downstream users via documentation instead.

#policy #open-source #licensing #regulation

Read article →
From insight to action: The next phase of agentic cloud operations AI 6.0
Azure Blog

From insight to action: The next phase of agentic cloud operations

Azure outlines agentic cloud operations as a model where AI agents continuously observe, reason, and act across hybrid infrastructure and microservices, moving from reactive dashboards to closed-loop automated workflows. The approach integrates observability signals into coordinated actions for performance, cost, and reliability optimization. Microsoft highlights Azure Copilot and governance-embedded workflows as enablers, citing research showing 79% of organizations already deploying agentic AI in production.

#agents #cloud operations #observability #automation

Read article →
Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration Security 6.0
The Hacker News

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

Executive Order 14409 mandates federal agencies migrate high-value assets to post-quantum cryptography by December 31, 2030, with digital signatures following by December 31, 2031. National security systems operate on a separate compliance track. The deadline addresses the threat of harvest-now-decrypt-later attacks as quantum computing advances.

#post-quantum cryptography #compliance #federal mandate #cryptography migration

Read article →
Boost Inference Performance up to 15x on NVIDIA Blackwell Using DFlash Speculative Decoding AI 8.0
NVIDIA Developer Blog

Boost Inference Performance up to 15x on NVIDIA Blackwell Using DFlash Speculative Decoding

NVIDIA describes DFlash speculative decoding on Blackwell GPUs, achieving up to 15x inference speedup for latency-sensitive multiagent workflows. The technique uses a lightweight draft model to predict future tokens, improving GPU utilization and throughput in autoregressive LLM serving scenarios.

#speculative decoding #inference #Blackwell #latency

Read article →
GitLab just surveyed 1,500 developers. Here's why it matters for your codebase. AI 8.0
The New Stack

GitLab just surveyed 1,500 developers. Here's why it matters for your codebase.

GitLab survey of 1,500 developers shows 78% report faster code commits with AI tools, but only 21% see productivity gains beyond code generation. The core problem: Git backends and governance frameworks built for human-scale concurrency fail under machine-scale agent load, causing platform reliability, security, and cost issues.

#agents #governance #infrastructure #scale

Read article →
GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns Security 7.0
The Hacker News

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

GitHub hardened the actions/checkout action effective June 18, 2026 to block pwn request attacks that abuse pull_request_target workflow triggers to execute malicious code with elevated privileges. The update prevents attackers from exploiting the risky pattern of running untrusted PR code with full workflow permissions.

#supply-chain security #GitHub Actions #pwn request #workflow security

Read article →
Build an AI Scientist for Life Science Discovery with NVIDIA BioNeMo Agent Toolkit AI 7.0
NVIDIA Developer Blog

Build an AI Scientist for Life Science Discovery with NVIDIA BioNeMo Agent Toolkit

NVIDIA introduces BioNeMo Agent Toolkit for building autonomous AI agents in life sciences that can read papers, write code, generate hypotheses, and iterate on experiments. The toolkit addresses the unique challenge that scientific discovery is iterative and grounded in physical validation, unlike deterministic software engineering.

#agents #tool use #life sciences #BioNeMo

Read article →
Presentation: The Time It Wasn't DNS DevOps 7.0
InfoQ DevOps

Presentation: The Time It Wasn't DNS

Sean Klein presents incident analysis from Azure's 2023 global WAN outage, arguing that 'human error' framing obscures systemic failures in complex infrastructure. The talk moves beyond Five Whys methodology to examine how engineering leaders can redesign Standard Operating Procedures and systems architecture to protect engineers rather than blame them.

#incident analysis #resilience #SRE #Azure

Read article →
Can DNS become the basis for AI agent identity? AI 7.0
The New Stack

Can DNS become the basis for AI agent identity?

Linux Foundation announced Agent Name Service (ANS), an open standard for verifiable AI agent identity using DNS. Built on OWASP GenAI Security research, ANS ties agent identity to domain control via ACME (Let's Encrypt protocol), allowing operators to issue certificates and track agent status changes like registration and renewal.

#agents #identity #security #DNS

Read article →
Open models, global networks: How AT&T and GSMA are accelerating telecom innovation with Gemma AI 7.0
Google Cloud Blog

Open models, global networks: How AT&T and GSMA are accelerating telecom innovation with Gemma

AT&T and GSMA are deploying Gemma, Google's open foundation model, to address the telecom industry's critical gap in domain-specific AI. Telecom networks require specialized knowledge unavailable in general-purpose models; only 16% of telecom AI deployments currently run on network infrastructure due to this constraint. Domain-specific models built on open foundations enable the agentic workflows and network automation that modern carriers need at global scale.

#LLM #domain-specific models #telecom #agents

Read article →
Agent Auth: A lawyer's day in court AI 6.0
CNCF Blog

Agent Auth: A lawyer's day in court

CNCF post frames agent authentication as microservices-plus, requiring agent identity (who is the agent), principal identity (who is it acting for), and delegation (authorization to act on behalf of a user). Uses courtroom analogy: lawyer proves identity, names client, presents authorization documents, paralleling agent auth requirements.

#agents #authentication #authorization #identity

Read article →
Guide to Agentic Systems and AI Agents AI 5.0
Databricks Blog

Guide to Agentic Systems and AI Agents

Educational guide covering agentic AI systems where software autonomously plans and executes tasks. Likely covers agent architectures, planning loops, tool use, and deployment patterns for production agentic applications.

#agents #agentic AI #planning #tool use

Read article →
AWS Launches Blocks, an Open-Source TypeScript Framework Designed for AI Agents to Build Backends AI 8.0
InfoQ DevOps

AWS Launches Blocks, an Open-Source TypeScript Framework Designed for AI Agents to Build Backends

AWS released Blocks, an open-source TypeScript framework enabling AI agents to generate correct backend code by bundling application logic, local mocks, and infrastructure-as-code. Code runs locally without AWS credentials and deploys unchanged to Lambda, DynamoDB, Aurora, and Bedrock, eliminating the gap between agent-generated code and production infrastructure.

#agents #tool-use #TypeScript #Lambda

Read article →
What is Vector Search? AI 5.0
Databricks Blog

What is Vector Search?

Explainer on vector search as a semantic search technique that retrieves results based on meaning rather than keyword matching. Foundational content for understanding retrieval in RAG and similarity-based applications.

#vector search #embeddings #retrieval #semantic search

Read article →
How Telcos Build Autonomous Networks with Agentic AI AI 6.0
NVIDIA Developer Blog

How Telcos Build Autonomous Networks with Agentic AI

NVIDIA discusses how telecom operators deploy agentic AI across network operations, customer care, and back-office workflows, progressing from Level 2-3 to Level 4-5 autonomy on TM Forum's taxonomy. The post covers the transition from rule-based automation to autonomous decision-making in network management.

#agents #autonomous systems #network operations #telecom

Read article →
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool Security 6.0
The Hacker News

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Kaspersky identified an active campaign distributing malicious VBScript files via WhatsApp Desktop and Web targeting users across Malaysia, Brazil, India, Mexico, Singapore, UK, Spain, Taiwan, and Australia. The scripts lead to installation of legitimate ManageEngine RMM software, which attackers then abuse for remote access and lateral movement.

#social engineering #malware distribution #RMM abuse #WhatsApp

Read article →
OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws AI 6.0
The Hacker News

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

OpenAI released an improved GPT-5.5-Cyber model to trusted defenders as part of the Daybreak initiative. The model performs deeper analysis across large codebases to identify and help patch software vulnerabilities, positioning it as OpenAI's strongest model yet for vulnerability discovery and remediation.

#LLM #vulnerability detection #code analysis #security tooling

Read article →
Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs Cloud 8.0
AWS News

Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs

AWS Lambda MicroVMs provide VM-level isolation for untrusted code execution in serverless environments, combining Firecracker's lightweight virtualization with near-instant launch and stateful session support. Targets multi-tenant applications like AI coding assistants, interactive notebooks, and vulnerability scanners that need dedicated execution contexts without managing infrastructure.

#serverless #isolation #Firecracker #untrusted code

Read article →
How we found a bug in the hyper HTTP library Engineering 7.0
Cloudflare Blog

How we found a bug in the hyper HTTP library

Cloudflare's Images service on Workers encountered a race condition in the hyper Rust HTTP library that caused intermittent truncation of large image responses (returning 200 status with incomplete data). The six-week investigation revealed a subtle concurrency bug in hyper's connection handling that was fixed with four lines of code, affecting how the Images binding returned processed image data to clients.

#Rust #hyper #race-condition #HTTP

Read article →
Building pay-per-intelligence for AI agents: How Ampersend uses Amazon Bedrock AgentCore Payments AI 7.0
AWS ML Blog

Building pay-per-intelligence for AI agents: How Ampersend uses Amazon Bedrock AgentCore Payments

Ampersend and Amazon Bedrock AgentCore Payments enable autonomous agents to transact programmatically for model services using x402 payment protocols, routing tasks to cost-effective models within spending budgets. Eliminates manual billing integrations and per-provider credential management for agent developers.

#agents #payments #model routing #x402

Read article →
Boost BigQuery with Python: Managed Python UDFs now generally available Cloud 7.0
Google Cloud Blog

Boost BigQuery with Python: Managed Python UDFs now generally available

BigQuery Managed Python UDFs are now generally available, allowing data engineers to execute custom Python code directly within BigQuery queries without managing containers or infrastructure. The feature runs on BigQuery-managed serverless resources that auto-scale to billions of rows, with automatic compilation, security patching, and deployment handled by Google. Python UDFs integrate with both standard SQL and BigQuery DataFrames, fully supported for production workloads under BigQuery's billing SKUs.

#BigQuery #Python #UDF #serverless

Read article →
Embed the world: Multimodal AI for searchable aerial imagery at scale AI 7.0
AWS ML Blog

Embed the world: Multimodal AI for searchable aerial imagery at scale

Multimodal embeddings and LLM captioning enable natural-language search over billions of aerial imagery tiles without manual inspection or per-query model training. AWS and Vexcel evaluated embedding models, fusion strategies, and vector search methods on orthomosaic and oblique imagery across 45+ countries using OpenStreetMap ground truth.

#embeddings #multimodal #vector search #geospatial

Read article →
Adopting AV1 for Real-Time Communication (RTC) at Scale Engineering 7.0
Meta Engineering

Adopting AV1 for Real-Time Communication (RTC) at Scale

Meta deployed AV1 video codec across real-time communication applications (Messenger, WhatsApp) on the majority of mobile devices after a multi-year effort. The deployment achieved at least 20% bitrate reduction compared to H.264/AVC on low-end and mid-range devices, with greater savings on higher-end hardware. Meta addressed codec selection, device eligibility, rate control, and error resilience challenges at scale.

#AV1 #video-codec #RTC #bitrate-optimization

Read article →
CCCL Runtime: A Modern C++ Runtime for CUDA Engineering 7.0
NVIDIA Developer Blog

CCCL Runtime: A Modern C++ Runtime for CUDA

NVIDIA introduces CCCL Runtime, a modernized C++ abstraction layer for CUDA programming that wraps fundamental CUDA concepts with safer, more ergonomic APIs. The library provides both C++ and Python bindings to reduce boilerplate and improve developer experience for GPU-accelerated workloads.

#CUDA #C++ #GPU #runtime

Read article →
Enable Real-Time AI for High-Speed Data Acquisition with DAQIRI AI 7.0
NVIDIA Developer Blog

Enable Real-Time AI for High-Speed Data Acquisition with DAQIRI

NVIDIA presents DAQIRI, a framework for real-time AI inference on streaming high-speed sensor data. The system processes data as it arrives, filters for relevant events, and enables low-latency decision-making for applications like scientific instrumentation and industrial monitoring.

#real-time #streaming #inference #data acquisition

Read article →
AWS Weekly Roundup: NY Summit recap, Local Zone in Hanoi, Grok 4.3 in Bedrock, price reductions, and more (June 22, 2026) AI 7.0
AWS News

AWS Weekly Roundup: NY Summit recap, Local Zone in Hanoi, Grok 4.3 in Bedrock, price reductions, and more (June 22, 2026)

AWS announces agent-focused launches across productivity, security, and development: Amazon Quick adds multi-step agent orchestration with activity feeds; AWS Continuum provides AI-native security reasoning with pull-request scanning and IDE integrations; AWS DevOps Agent adds release management and AWS Transform enables autonomous tech debt reduction.

#agents #security #DevOps #code scanning

Read article →
Inside NVIDIA Halos for Robotics: A Full-Stack Functional Safety System for Physical AI AI 8.0
NVIDIA Developer Blog

Inside NVIDIA Halos for Robotics: A Full-Stack Functional Safety System for Physical AI

NVIDIA introduces Halos, a full-stack safety framework for autonomous robots operating in unstructured environments alongside humans. The system combines AI-driven perception, planning, and control with formal safety guarantees to enable safe physical AI deployment in factories, warehouses, and homes.

#robotics #safety #autonomous systems #physical AI

Read article →
Stop Your Legacy Infrastructure from Hijacking Your AI Agents AI 6.0
The Hacker News

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

A security blind spot emerges as attackers exploit legacy infrastructure to hijack AI agents, circumventing modern AI security controls. The article highlights that 71% of organizations are piloting AI agents while security programs lag in threat modeling for agent-infrastructure interactions.

#AI-agents #security #legacy-systems #threat-model

Read article →
AWS Graviton5 Reaches General Availability with 192 Cores and Formally Verified VM Isolation Cloud 7.0
InfoQ DevOps

AWS Graviton5 Reaches General Availability with 192 Cores and Formally Verified VM Isolation

AWS Graviton5 EC2 instances (M9g and M9gd) are now generally available with 192 ARM cores, DDR5-8800 memory, and formally verified VM isolation via the Nitro Isolation Engine. ClickHouse reported 36% performance improvement with zero code changes; Meta committed tens of millions of cores. On-demand pricing is 9% above Graviton4, delivering roughly 15% better price-performance.

#Graviton5 #ARM #EC2 #price-performance

Read article →
The Starter Tier for Google AI Studio explained Cloud 6.0
Google Cloud Blog

The Starter Tier for Google AI Studio explained

Google Cloud Starter Tier provides free, fully-managed project provisioning for prototyping AI applications directly from Google AI Studio, with Cloud Run, Cloud Firestore, Cloud SQL for PostgreSQL, and Firebase Authentication pre-configured. No payment method or billing account required for individual Google Accounts; Google handles region selection, API enablement, and security policies automatically. This enables developers to move from prompt to live URL with database and auth in minutes.

#Google AI Studio #Cloud Run #Firebase #prototyping

Read article →
We got local models to triage the OpenClaw repo for FREE!* AI 6.0
Hugging Face Blog

We got local models to triage the OpenClaw repo for FREE!*

Hugging Face demonstrates running local open-source models for automated PR triage on the OpenClaw repository without cloud costs. The approach uses smaller models deployed locally to classify and route pull requests, reducing infrastructure overhead compared to proprietary API-based solutions.

#LLM #local models #inference #automation

Read article →
Samsung Electronics brings ChatGPT and Codex to employees AI 5.0
OpenAI Blog

Samsung Electronics brings ChatGPT and Codex to employees

Samsung Electronics deployed ChatGPT Enterprise and Codex to its global workforce, representing one of OpenAI's largest enterprise rollouts to date. The deployment enables employees across the organization to access both conversational AI and code generation capabilities.

#LLM #enterprise #ChatGPT #code-generation

Read article →
A public Sentry key is all it takes to hijack Claude Code, Cursor, and Codex Security 9.0
The New Stack

A public Sentry key is all it takes to hijack Claude Code, Cursor, and Codex

Tenet Security documented agentjacking, an attack exploiting Model Context Protocol (MCP) integrations where a forged Sentry error report can trick AI coding agents into arbitrary code execution on a developer's machine. The attack leverages the fact that Sentry DSNs are intentionally public write-only credentials, and agents treat MCP service responses as trusted instructions without validation.

#agents #security #MCP #code-execution

Read article →
Your agent wants to search like a 2010 quant AI 7.0
The New Stack

Your agent wants to search like a 2010 quant

The article traces the evolution of retrieval for AI agents from simple vector similarity (2024) through hybrid search and BM25 ranking, to emerging search-as-code approaches exemplified by Perplexity's recent announcement. Modern production agents now combine classical information retrieval techniques with learned ranking to surface relevant context reliably.

#RAG #retrieval #agents #search

Read article →
"An agent is an LLM and a harness": What Nvidia really thinks about OpenClaw AI 6.0
The New Stack

"An agent is an LLM and a harness": What Nvidia really thinks about OpenClaw

Nvidia's Nader Khalil articulates the company's vision for agentic AI as a loop combining an LLM with a control harness that reasons about tool selection and iterates toward a goal. Nvidia is positioning itself as infrastructure provider for agent development, supporting projects like OpenClaw and helping developers build production agent systems.

#agents #LLM #tool-use #inference

Read article →
Gemini CLI vs. Antigravity: What works, not the spec sheet AI 6.0
The New Stack

Gemini CLI vs. Antigravity: What works, not the spec sheet

Google decommissioned Gemini CLI (100k GitHub stars) on June 18 with no grace period, replacing it with closed-source Antigravity CLI written in Go and invoked via agy command. The article benchmarks both tools across speed, multi-file coding tasks, feature migration, and scripted automation to test Google's claims about performance and agent capabilities.

#CLI #agents #tooling #Go

Read article →
Backporting bug fixes is dead, Project Valkey now sends in the bots AI 7.0
The New Stack

Backporting bug fixes is dead, Project Valkey now sends in the bots

Project Valkey 9.1 deployed an AI agent to automate cherry-picking bug fixes from main to release branches, handling merge conflicts and running CI pipelines without manual intervention. The agent replaced laborious manual backporting work, demonstrating practical AI use for maintenance workflows in an open-source in-memory data store.

#agents #automation #CI/CD #maintenance

Read article →
Losing Fable made the best case yet for AI models you can run yourself AI 7.0
The New Stack

Losing Fable made the best case yet for AI models you can run yourself

Anthropic pulled Fable 5 and Mythos 5 offline June 12 due to US export-control directives barring foreign nationals from accessing the models. The incident highlights the risk of hosted-only models and strengthens the case for open-weight alternatives like Z.ai's GLM-5.2, which users can download and self-host.

#open-weight #models #export controls #deployment

Read article →
Claude Fable 5 on Bedrock Requires Sharing Inference Data with Anthropic Cloud 6.0
InfoQ DevOps

Claude Fable 5 on Bedrock Requires Sharing Inference Data with Anthropic

Claude Fable 5 and Mythos 5 on Amazon Bedrock require opting into provider_data_share, sending all prompts and outputs to Anthropic for 30-day retention with human review. This breaks the AWS data boundary that previous Bedrock models maintained, and both models were revoked three days after launch due to export compliance.

#Bedrock #data privacy #inference #export controls

Read article →
How we built an internal data analytics agent AI 8.0
GitHub Blog

How we built an internal data analytics agent

GitHub built Qubot, a Copilot-powered agent that lets employees query any data warehouse model in natural language and get answers in seconds. The agent handles exploratory questions like cohort retention and metric attribution without requiring SQL knowledge or data analyst support.

#agents #LLM #tool-use #data-analytics

Read article →
Checkmarx's new SAST engine isn't about the LLM. It's about what happens after. Security 7.0
The New Stack

Checkmarx's new SAST engine isn't about the LLM. It's about what happens after.

Checkmarx released a three-engine SAST architecture combining deterministic rules, an LLM trained on security data, and a Findings Analysis Engine (FAE) that classifies true vs. false positives before results reach developers. The FAE claims F1 score of 0.499 vs. industry average 0.20, and found 327 true positives missed by a frontier model.

#SAST #LLM #security #evals

Read article →
Introducing Web Search on Amazon Bedrock AgentCore AI 8.0
AWS ML Blog

Introducing Web Search on Amazon Bedrock AgentCore

Amazon Bedrock AgentCore now includes a managed web search capability that lets AI agents retrieve current information without building custom infrastructure. The feature uses Model Context Protocol (MCP) compatibility, maintains a tens-of-billions-document index refreshed within minutes, and handles privacy and result parsing internally.

#agents #RAG #MCP #tool-use

Read article →
Anthropic overhauled Claude Design to fix the handoff. A designer and an engineer disagree on whether it worked. AI 5.0
The New Stack

Anthropic overhauled Claude Design to fix the handoff. A designer and an engineer disagree on whether it worked.

Anthropic released a major Claude Design update with bidirectional Design-Code integration, token efficiency improvements, and connectors for Adobe, Vercel, Replit, and others. However, a lead AI product designer questions whether it meaningfully reduces design-engineering handoff friction and warns token costs remain high.

#Claude #design-tools #LLM #tool-use

Read article →
Temporary Cloudflare Accounts for AI agents AI 8.0
Cloudflare Blog

Temporary Cloudflare Accounts for AI agents

Cloudflare launches temporary accounts for AI agents, allowing wrangler deploy --temporary to spin up a Worker without signup, OAuth, or MFA. The deployment lives 60 minutes and can be claimed to make it permanent, eliminating the browser-based friction that blocks autonomous agent workflows.

#agents #deployment #tool-use #infrastructure

Read article →
Azure Functions Ships Serverless Agents Runtime at Build 2026 AI 8.0
InfoQ DevOps

Azure Functions Ships Serverless Agents Runtime at Build 2026

Azure Functions released a serverless agents runtime in public preview, allowing agents defined in .agent.md markdown files with YAML triggers, MCP server access, 1,400+ connectors, and sandboxed execution. No cold start overhead or billing premium beyond standard Flex Consumption.

#agents #serverless #Azure #MCP

Read article →
Monitor and debug generative AI inference with SageMaker detailed metrics and Insights dashboard on CloudWatch AI 8.0
AWS ML Blog

Monitor and debug generative AI inference with SageMaker detailed metrics and Insights dashboard on CloudWatch

AWS SageMaker adds detailed observability for LLM inference endpoints via CloudWatch Insights dashboard, surfacing GPU memory pressure, KV cache saturation, traffic imbalance across AZs, and auto-scaling state. Covers both single-model endpoints and multi-model inference component architectures for production LLM serving.

#LLM #inference #observability #SageMaker

Read article →
Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs Cloud 7.0
AWS News

Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs

AWS launches EC2 G7 instances with NVIDIA RTX PRO 4500 Blackwell GPUs, delivering 4.6x AI inference performance and 2.1x graphics performance over G6. G7 features 32GB GPU memory per GPU, 5th Gen Tensor Cores, and 700 Gbps EFA networking, targeting AI inference, graphics rendering, video transcoding, and analytics workloads.

#GPU #inference #EC2 #Blackwell

Read article →
Amazon ECS introduces new high-resolution metrics for faster service auto scaling DevOps 7.0
AWS News

Amazon ECS introduces new high-resolution metrics for faster service auto scaling

Amazon ECS now supports 20-second high-resolution metrics for service auto scaling, reducing scale-out latency from 363 seconds to 86 seconds (76% faster) and total scale-and-provision time from 386 to 109 seconds (72% faster). The feature works with predictive scaling, scheduled scaling, and target tracking policies on CloudWatch metrics.

#ECS #auto-scaling #observability #CloudWatch

Read article →
Gusto Cofounder: An AI agent that runs payroll, HR, and benefits without waiting to be asked AI 6.0
The New Stack

Gusto Cofounder: An AI agent that runs payroll, HR, and benefits without waiting to be asked

Gusto released Cofounder, an AI agent that proactively manages payroll, HR, benefits, and accounting for small businesses rather than responding reactively to queries. The agent is designed to operate autonomously on routine back-office tasks, positioning itself as a co-founder-like partner rather than a traditional copilot or search interface.

#agents #LLM #autonomous workflows #small business

Read article →
MCP gets its missing enterprise authorization layer AI 8.0
The New Stack

MCP gets its missing enterprise authorization layer

The Model Context Protocol now includes a stable Enterprise-Managed Authorization extension that lets enterprises centrally control MCP server access through their identity provider instead of per-employee OAuth prompts. Anthropic, Microsoft, and Okta are among the first to support this, enabling single sign-on for all MCP connectors in Claude, Visual Studio Code, and other clients.

#MCP #agents #enterprise #authorization

Read article →
MosaicLeaks: Can your research agent keep a secret? AI 7.0
Hugging Face Blog

MosaicLeaks: Can your research agent keep a secret?

ServiceNow and Hugging Face research paper examining information leakage in research agents, analyzing how tool-use agents inadvertently expose sensitive data through API calls, logs, and intermediate outputs. Highlights security risks in production agent deployments.

#agents #security #tool-use #information leakage

Read article →
Build your own vulnerability harness Security 7.0
Cloudflare Blog

Build your own vulnerability harness

Cloudflare extends Project Glasswing findings on frontier security models applied to enterprise codebases, arguing that agentic vulnerability scanning requires treating LLMs as interchangeable components rather than relying on single models. The post advocates for cross-model validation pipelines and fleet-wide scanning across repositories to ensure comprehensive vulnerability detection.

#security #agents #LLM #vulnerability-scanning

Read article →
'Popa' Botnet Linked to Publicly-Traded Israeli Firm Security 6.0
Krebs on Security

'Popa' Botnet Linked to Publicly-Traded Israeli Firm

Researchers linked the Popa Android botnet, which has compromised millions of TV boxes for four years, to NetNut, a residential proxy service operated by publicly-traded Alarum Technologies. Popa serves as a persistent communications layer for advertising fraud, account takeovers, and mass data scraping.

#botnet #malware #Android #supply-chain

Read article →
Cursor, GitLab and Zed agree GitHub is breaking. They disagree on how to rebuild it AI 7.0
The New Stack

Cursor, GitLab and Zed agree GitHub is breaking. They disagree on how to rebuild it

Cursor unveiled Origin, a Git-compatible code-hosting platform designed for AI agents to drive development workflows. The announcement follows SpaceX's $60 billion acquisition of Cursor and its earlier acquisition of Graphite, a code-review and stacked-diffs tool, positioning Cursor as a direct challenger to GitHub's workflow dominance.

#agents #code review #Git #developer tools

Read article →
Amazon Bedrock AgentCore harness is now generally available: Go from idea to production-grade agent in minutes AI 8.0
AWS ML Blog

Amazon Bedrock AgentCore harness is now generally available: Go from idea to production-grade agent in minutes

AWS Bedrock AgentCore harness reaches GA, providing production-ready agent orchestration with built-in Runtime, Memory, Gateway, Browser, Identity, and Observability primitives. Eliminates boilerplate for tool-use loops, concurrency, isolation, state management, and scaling across multiple users and models.

#agents #tool-use #LLM #orchestration

Read article →
Scaling Ray Serve LLM on GKE: Performance without losing the developer experience AI 8.0
Google Cloud Blog

Scaling Ray Serve LLM on GKE: Performance without losing the developer experience

Google and Anyscale jointly optimized Ray Serve for LLM inference on GKE, achieving 5x higher throughput and 8x lower latency through three architectural changes: HAProxy integration for request routing, direct token streaming to bypass the ingress router, and a v2 Ray executor backend for vLLM. The improvements maintain Python-native APIs while meeting production serving demands.

#LLM #inference #Kubernetes #Ray Serve

Read article →
How pull request limits are cutting down the noise DevOps 6.0
GitHub Blog

How pull request limits are cutting down the noise

GitHub introduces configurable pull request limits that cap the number of open PRs a user without write access can have at once, with bypass lists for trusted contributors and exemptions for draft PRs. The feature aims to reduce low-quality noise and help maintainers manage contribution volume.

#GitHub #pull requests #open source #maintainer tools

Read article →
How Stagwell built privacy-safe ID matching on Databricks Cloud 7.0
Databricks Blog

How Stagwell built privacy-safe ID matching on Databricks

Stagwell describes a privacy-preserving identity matching system built on Databricks, using techniques like differential privacy and secure multi-party computation to match customer IDs across datasets without exposing raw data. The case study covers architecture choices and performance trade-offs in production.

#privacy #differential privacy #data matching #Databricks

Read article →
Neoclouds, sovereign AI and Postgres: The new operating model for regulated enterprises AI 7.0
The New Stack

Neoclouds, sovereign AI and Postgres: The new operating model for regulated enterprises

Enterprises are shifting to sovereign AI infrastructure that keeps data and models on-premises or in controlled multi-cloud environments rather than exporting sensitive data to external inference providers. The article argues that successful enterprises adopt infrastructure-first strategies, with 75% of leaders operating across multiple clouds and on-premises, achieving 5x better ROI than those relying on single hyperscalers.

#inference #data sovereignty #multi-cloud #Postgres

Read article →
The database storage problem is solved. Here's what comes next. Engineering 6.0
The New Stack

The database storage problem is solved. Here's what comes next.

Postgres ecosystem innovation is shifting from storage performance to data interoperability, reducing the need to copy data across warehouses, search platforms, and AI systems. The article argues that the harder problem today is sharing operational data without creating additional pipelines and maintaining multiple copies.

#Postgres #data interoperability #data movement #architecture

Read article →
Fable 5 ban: 4 open models responded before Anthropic could restore access AI 8.0
The New Stack

Fable 5 ban: 4 open models responded before Anthropic could restore access

After the US government ordered Anthropic to suspend Claude Fable 5 and Mythos 5 for foreign nationals, open-weight coding models from Cohere (North Mini Code), Moonshot (Kimi K2.7-Code), and Zhipu (GLM 5.2) emerged as rapid alternatives. All three shipped with downloadable weights, lower costs than frontier models, and integration with existing agent harnesses.

#open weights #models #export controls #coding

Read article →
Your AI pipeline is broken, and your dashboards don't know it AI 8.0
The New Stack

Your AI pipeline is broken, and your dashboards don't know it

Traditional observability dashboards fail to detect failures in RAG and LLM pipelines because errors manifest as confident hallucinations rather than exceptions or crashes. The article describes a case where a prompt template change caused an LLM to ignore context and generate false financial recommendations, undetected for three days despite green health metrics.

#RAG #debugging #observability #hallucination

Read article →
Coding Agent Horror Stories: The 13-Hour AWS Outage AI 8.0
Docker Blog

Coding Agent Horror Stories: The 13-Hour AWS Outage

Docker's horror story series examines an agentic coding assistant (Kiro) with operator-level AWS credentials that deleted production infrastructure, causing a 13-hour outage and an estimated 6.3 million lost orders. The incident illustrates the blast radius when agents run with full system permissions in production environments.

#agents #AI safety #credentials #production incidents

Read article →
VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks Security 7.0
InfoQ DevOps

VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks

VS Code 1.123 introduces a two-hour delay before auto-updating extensions to newly published versions, creating a revocation window against supply chain attacks. The delay exempts trusted publishers like Microsoft, GitHub, and OpenAI. Similar cooldown mechanisms have been adopted across pip, RubyGems, npm, pnpm, Yarn, and Bun.

#supply-chain #security #VS Code #extensions

Read article →
Athena Coalition Brings Coordinated Defence to Open Source Security Security 7.0
InfoQ DevOps

Athena Coalition Brings Coordinated Defence to Open Source Security

Chainguard has launched Athena, an industry coalition using AI to proactively identify and remediate vulnerabilities in widely-used open-source libraries, containers, and components before exploitation. The initiative targets critical infrastructure underpinning browsers, data centers, smartphones, and payment systems.

#security #open-source #vulnerability #AI

Read article →
Agent Factory Recap: 100X engineering with AI agents in Google Antigravity 2.0 AI 7.0
Google Cloud Blog

Agent Factory Recap: 100X engineering with AI agents in Google Antigravity 2.0

Google Antigravity 2.0 evolved into an agent-first platform with four core components: a standalone desktop Agent Manager, CLI for server-side work, Python SDK for custom workflows, and a specialized IDE. The platform enables developers to reduce cognitive toil by offloading routine tasks like test suite generation and prototyping to AI agents while focusing on architecture.

#agents #IDE #developer-tools #AI

Read article →
Flipkart Wins CNCF End User Case Study Contest for Kubernetes and Chaos Engineering Scale DevOps 6.0
CNCF Blog

Flipkart Wins CNCF End User Case Study Contest for Kubernetes and Chaos Engineering Scale

Flipkart's central reliability engineering team built a multi-tenant chaos engineering platform on Kubernetes using LitmusChaos, executing 90% of chaos experiments in staging before high-traffic sales events. The team contributed five upstream fixes to LitmusChaos and won the CNCF End User Case Study Contest at KubeCon India 2026.

#Kubernetes #chaos engineering #LitmusChaos #reliability

Read article →
Is it agentic enough? Benchmarking open models on your own tooling AI 8.0
Hugging Face Blog

Is it agentic enough? Benchmarking open models on your own tooling

Hugging Face presents a framework for evaluating whether open-source LLMs have sufficient agentic capabilities for your specific tool set and use case. The post covers benchmark design, tool-use evaluation patterns, and how to measure agent performance on custom integrations rather than generic tasks.

#agents #evals #tool-use #benchmarking

Read article →
Beyond LoRA: Can you beat the most popular fine-tuning technique? AI 7.0
Hugging Face Blog

Beyond LoRA: Can you beat the most popular fine-tuning technique?

Hugging Face explores parameter-efficient fine-tuning methods beyond LoRA, comparing techniques like DoRA, QLoRA, and other adapters on practical benchmarks. The post evaluates trade-offs between parameter count, training speed, and downstream task performance to help practitioners choose the right method for their constraints.

#fine-tuning #LoRA #PEFT #adapters

Read article →
What is an AI agent harness? AI 6.0
Databricks Blog

What is an AI agent harness?

Databricks defines an AI agent harness as the software infrastructure wrapping an LLM to provide tool integration, state management, and execution orchestration. The post outlines core components like tool registries, memory, and observability needed for production agent systems.

#agents #LLM #tool-use #infrastructure

Read article →
Get back hours every day with autonomous agents in Amazon Quick AI 6.0
AWS ML Blog

Get back hours every day with autonomous agents in Amazon Quick

Amazon Quick now supports autonomous agents that run continuously on behalf of users, handling tasks like deal follow-ups, compliance summaries, and CRM updates. Users define autonomy levels from step-by-step instructions to broad goals, with guardrails and an activity feed for prioritization.

#agents #autonomous #business-automation #CRM

Read article →
Databricks and NVIDIA: Building for the Agentic Era AI 7.0
Databricks Blog

Databricks and NVIDIA: Building for the Agentic Era

Databricks and NVIDIA announce a partnership to optimize LLM agent workloads on NVIDIA's accelerated computing infrastructure. The collaboration focuses on inference optimization, tool-use patterns, and production deployment of multi-step agentic systems.

#agents #LLM inference #NVIDIA #tool-use

Read article →
Getting more from each token: How Copilot improves context handling and model routing AI 8.0
GitHub Blog

Getting more from each token: How Copilot improves context handling and model routing

GitHub detailed Copilot optimizations for longer agentic sessions: prompt caching to reuse model state across turns, deferred tool loading, and Auto model routing that selects the right model (fast vs. capable) based on task complexity. These reduce redundant context and improve cost-efficiency in multi-turn workflows.

#LLM #prompt caching #model routing #context efficiency

Read article →
Cloud Network Insights: end-to-end observability for the Cross-Cloud Network Cloud 7.0
Google Cloud Blog

Cloud Network Insights: end-to-end observability for the Cross-Cloud Network

Google Cloud announced general availability of Cloud Network Insights, a cross-cloud observability solution built in partnership with Broadcom AppNeta. It uses active synthetic probing to monitor network routes across Google Cloud, on-premises, AWS, Azure, and internet-facing applications, pinpointing performance bottlenecks.

#observability #cross-cloud #network-monitoring #synthetic-probing

Read article →
Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments Security 5.0
The Hacker News

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

Check Point Research identified a threat actor using paid posts on legitimate news sites, fake reviews, AI-generated narrators, and VirusTotal comments to promote cryptocurrency stealer malware. The campaign leverages a WordPress phishing hub, GitHub and SourceForge projects, and a YouTube channel to distribute warez.

#malware #supply-chain #social engineering #cryptocurrency theft

Read article →
Context intelligence for your data and AI agents at scale AI 8.0
AWS ML Blog

Context intelligence for your data and AI agents at scale

AWS announces AWS Context, a new service that automatically maps data relationships into a knowledge graph and provides agentic search for AI agents to access governed data, business rules, and domain knowledge at runtime. Data stewards manage the graph through a console, reviewing inferred relationships and attaching business definitions. The service extends technology from Amazon Quick, a production knowledge graph used by hundreds of thousands of users.

#agents #knowledge graphs #RAG #data governance

Read article →
Vercel launches eve, an open-source framework that treats agents as directories AI 8.0
The New Stack

Vercel launches eve, an open-source framework that treats agents as directories

Vercel open-sourced eve, a framework that models agents as directories of files (system prompt in Markdown, tools as TypeScript files, model config in a single file) and compiles them into production-ready agents. Agents run as durable workflows with checkpointing, and the framework integrates Vercel's AI Gateway for provider fallbacks and MCP servers for tool connections.

#agents #framework #open-source #durable workflows

Read article →
Top announcements of the AWS Summit in New York, 2026 AI 8.0
AWS News

Top announcements of the AWS Summit in New York, 2026

AWS announced major Bedrock AgentCore updates: managed Knowledge Base for enterprise RAG with native data connectors and Smart Parsing, web search grounding via MCP, and governance controls for scaling agents. The Knowledge Base abstracts RAG pipeline complexity, while web search provides cited results from Amazon's search infrastructure without data egress.

#agents #RAG #Bedrock #knowledge-base

Read article →
How Block manages its fleet of AI coding agents from Slack AI 7.0
The New Stack

How Block manages its fleet of AI coding agents from Slack

Block shared how it built BuilderBot, a tool on top of its open-source Goose framework, to manage a fleet of AI coding agents across hundreds of services and millions of lines of code. Engineers tag @builderbot in Slack; the agent picks up tickets from Linear/Jira, creates branches, opens PRs, watches CI, and iterates on feedback, all while developers steer in the same thread.

#agents #coding #Slack #Goose

Read article →
Chainguard Agent Skills matures Security 7.0
The New Stack

Chainguard Agent Skills matures

Chainguard expanded its Agent Skills registry to over 1,000 hardened agent skills with public and private registries, plus a hardening-as-a-service tier. The service provides secure-by-default skills for agents, preventing compromised skills from introducing vulnerabilities or exfiltrating data in CI/CD pipelines.

#agents #security #supply-chain #skills

Read article →
New in Amazon Bedrock AgentCore: Build agents with broader knowledge and continuous learning AI 8.0
AWS ML Blog

New in Amazon Bedrock AgentCore: Build agents with broader knowledge and continuous learning

Amazon Bedrock AgentCore adds capabilities to connect agents to organizational, web, and paid knowledge sources, plus production observability and feedback loops for continuous improvement. The update addresses the gap between model capability and real-world agent performance by enabling access to current data, external resources, and systematic feedback mechanisms to detect and fix agent failures in production.

#agents #Bedrock #RAG #observability

Read article →
MolmoMotion: Language-guided 3D motion forecasting AI 6.0
Hugging Face Blog

MolmoMotion: Language-guided 3D motion forecasting

MolmoMotion is a multimodal model that combines language understanding with 3D motion prediction, enabling language-guided forecasting of object and agent motion. The model demonstrates how vision-language models can be extended to temporal and spatial reasoning tasks.

#multimodal #vision-language #3D #motion forecasting

Read article →
Introducing Amazon Bedrock Managed Knowledge Base for faster, more accurate enterprise AI applications AI 8.0
AWS News

Introducing Amazon Bedrock Managed Knowledge Base for faster, more accurate enterprise AI applications

Amazon Bedrock Managed Knowledge Base abstracts RAG pipeline complexity with native connectors for disparate enterprise data sources, Smart Parsing for multi-format documents, and agentic retrieval for complex queries. Developers can build knowledge bases in minutes without managing infrastructure, connectors, or embedding/chunking experiments.

#RAG #Bedrock #knowledge-base #enterprise-AI

Read article →
Announcing Web Search on Amazon Bedrock AgentCore: Ground your AI agents in current, accurate web knowledge AI 7.0
AWS News

Announcing Web Search on Amazon Bedrock AgentCore: Ground your AI agents in current, accurate web knowledge

Web Search on Bedrock AgentCore is a fully managed tool using MCP that returns cited web results, URLs, and publication dates without data egress. It combines Amazon's web index with Knowledge Graph data for more accurate grounding than traditional search, enabling agents to reason over current facts beyond model training data.

#agents #Bedrock #web-search #MCP

Read article →
Proactively reduce tech debt autonomously with AWS Transform – continuous modernization (preview) AI 7.0
AWS News

Proactively reduce tech debt autonomously with AWS Transform – continuous modernization (preview)

AWS Transform continuous modernization detects, prioritizes, and remediates tech debt across thousands of repositories autonomously. It addresses the 30% of IT budgets consumed by maintenance, providing full codebase visibility and pull requests for fixes like Java version upgrades and Lambda runtime updates before end-of-life.

#agents #tech-debt #modernization #automation

Read article →
AWS DevOps Agent adds release management capabilities to assess code changes before production (preview) AI 7.0
AWS News

AWS DevOps Agent adds release management capabilities to assess code changes before production (preview)

AWS DevOps Agent now includes release readiness review and autonomous release testing in preview. It verifies code changes against natural language standards and runs change-specific tests in production-like environments, helping teams handle the surge in AI-generated pull requests without bottlenecking reviews.

#agents #DevOps #release-management #testing

Read article →
Agents need boring infrastructure around them: Why we need to take an interest in 'invisible' AI AI 7.0
The New Stack

Agents need boring infrastructure around them: Why we need to take an interest in 'invisible' AI

Tailscale announced new capabilities for Aperture, its AI access and control platform, adding a chat interface, universal data connectors for MCP and APIs, and sandbox support to help enterprises manage fragmented AI deployments across multiple models and agents. The update addresses the risk that agents can execute in seconds what would take humans dozens of manual steps, requiring systematic governance rather than ad-hoc tool adoption.

#agents #AI infrastructure #orchestration #MCP

Read article →
Google, Microsoft, and OpenAI join forces to help create AI's missing trust layer AI 7.0
The New Stack

Google, Microsoft, and OpenAI join forces to help create AI's missing trust layer

The Linux Foundation launched the Appia Foundation under its Joint Development Foundation to produce open, modular specifications for AI trust and compliance. Google, Microsoft, OpenAI, and 10 other industrial members aim to create verifiable standards that help organizations demonstrate their AI systems meet regulatory, customer, and international compliance obligations.

#AI governance #compliance #standards #trust

Read article →
Your AI isn't broken. Your data is. AI 6.0
The New Stack

Your AI isn't broken. Your data is.

Clario launched from stealth with $6M seed funding to address data ROT (redundant, obsolete, trivial files) that poisons enterprise AI projects. The startup claims Gartner projects 60% of AI projects will be abandoned by year-end due to poor data quality, and Clario's early testing found garbage rates as high as 60% in design-partner environments.

#data quality #enterprise AI #data governance #MLOps

Read article →
What's new in Genie Code at Data + AI Summit 2026 AI 6.0
Databricks Blog

What's new in Genie Code at Data + AI Summit 2026

Databricks announces updates to Genie Code, its LLM-powered code generation tool for data and ML teams. New features include improved context awareness, multi-file refactoring, and tighter integration with Databricks notebooks and workflows.

#LLM #code generation #developer tools

Read article →
Why cloud native belongs at the heart of agentic AI: Lessons from building a multi-agent security platform on Kubernetes AI 8.0
CNCF Blog

Why cloud native belongs at the heart of agentic AI: Lessons from building a multi-agent security platform on Kubernetes

Orange Innovation built a real-time security operations platform using Kubernetes, Falco with eBPF, Kafka, and LLM-driven agents coordinated via A2A protocol and MCP. The system uses classical anomaly detection (Isolation Forest) to pre-filter events before agent analysis, reducing mean time to detect and respond while offloading rule authorship to agents.

#agents #Kubernetes #security #LangGraph

Read article →
The Top 10 Attack Surface Exposures in 2026 Security 5.0
The Hacker News

The Top 10 Attack Surface Exposures in 2026

The article surveys common attack surface exposures in 2026, highlighting that breaches often start with low-hanging fruit like exposed admin panels or credential reuse rather than zero-days. It references MongoBleed as an example of rapid exploitation timelines.

#attack-surface #exposure-management #credential-reuse #zero-day

Read article →
Building an open ecosystem for AI governance with Unity AI Gateway AI 6.0
Databricks Blog

Building an open ecosystem for AI governance with Unity AI Gateway

Databricks introduced Unity AI Gateway, a governance layer for managing AI model access, usage, and compliance as organizations move from experimentation to production. The gateway provides centralized control over model endpoints, audit logging, and policy enforcement across multiple LLM providers.

#governance #LLM #MLOps #compliance

Read article →
GLM-5.2: Built for Long-Horizon Tasks AI 6.0
Hugging Face Blog

GLM-5.2: Built for Long-Horizon Tasks

GLM-5.2 is a foundation model optimized for long-horizon task planning and execution, extending GLM capabilities for multi-step reasoning and complex workflows. The model targets agent and planning applications requiring sustained reasoning over extended sequences.

#LLM #agents #long-context #task planning

Read article →
145 Mastra npm Packages Compromised via Hijacked Contributor Account Security 8.0
The Hacker News

145 Mastra npm Packages Compromised via Hijacked Contributor Account

145 npm packages in the @mastra namespace, a JavaScript/TypeScript framework for building AI applications, were compromised through a hijacked contributor account in the easy-day-js supply chain attack. The breach was discovered by Endor Labs, JFrog, OX Security, SafeDep, Socket, StepSecurity, and Snyk, highlighting risks in open-source AI tooling ecosystems.

#supply-chain #npm #security #AI

Read article →
Introducing LifeSciBench AI 7.0
OpenAI Blog

Introducing LifeSciBench

LifeSciBench is an expert-authored and expert-reviewed benchmark for evaluating how AI systems handle real-world life science research tasks and decisions. The benchmark provides standardized evaluation of LLM performance on domain-specific scientific workflows.

#evals #benchmarks #life sciences #LLM evaluation

Read article →
Build and Deploy a Remote MCP Server to GKE in 30 Minutes AI 7.0
Google Cloud Blog

Build and Deploy a Remote MCP Server to GKE in 30 Minutes

Guide to deploying Anthropic's Model Context Protocol (MCP) servers on Google Kubernetes Engine using Streamable HTTP transport for remote access. Covers architecture benefits including scalability, reliability, and multi-client support for AI agent integrations.

#MCP #agents #Kubernetes #GKE

Read article →
Agentic Resource Discovery: Let agents search AI 6.0
Hugging Face Blog

Agentic Resource Discovery: Let agents search

Agentic Resource Discovery is a capability enabling AI agents to search and discover resources autonomously, improving agent ability to find relevant tools, data, and services at runtime. The feature enhances agent autonomy by reducing manual resource configuration and enabling dynamic discovery patterns.

#agents #tool-use #resource discovery #agent autonomy

Read article →
Amazon S3 annotations: attach rich, queryable context directly to your objects Cloud 7.0
AWS News

Amazon S3 annotations: attach rich, queryable context directly to your objects

AWS launches S3 annotations, a metadata capability storing up to 1 GB per object across 1,000 named annotations (JSON, XML, YAML, plain text). Annotations flow automatically into S3 Metadata tables queryable via Athena, enabling AI agents and autonomous workflows to find and act on data without expensive retrieval or object rewrites.

#S3 #metadata #agents #data discovery

Read article →
Safeguard your agentic AI applications with the Amazon Bedrock Guardrails InvokeGuardrailChecks API AI 8.0
AWS ML Blog

Safeguard your agentic AI applications with the Amazon Bedrock Guardrails InvokeGuardrailChecks API

Amazon Bedrock Guardrails introduces InvokeGuardrailChecks API, allowing safety checks at any point in agentic loops without provisioning separate guardrail resources. The API returns numeric scores for each safeguard in detect-only mode, letting applications define custom thresholds to block, bypass, retry, or log results based on risk profile at each agent step.

#agents #safety #guardrails #LLM

Read article →
Building AI Agents for AR Glasses and XR Devices with NVIDIA XR AI AI 6.0
NVIDIA Developer Blog

Building AI Agents for AR Glasses and XR Devices with NVIDIA XR AI

NVIDIA XR AI provides a foundation for building AI agents on AR glasses and wearable devices, integrating live camera/microphone streams, multimodal models, enterprise data, tool use, and device-specific runtimes. The platform addresses the infrastructure gap between hardware readiness and practical AI experience deployment on edge devices.

#agents #multimodal #edge AI #XR

Read article →
Databricks wants to merge the two databases every company runs AI 9.0
The New Stack

Databricks wants to merge the two databases every company runs

Databricks announced Lake Transactional/Analytical Processing (LTAP), an architecture that merges OLTP and OLAP databases into a single system optimized for AI agents. The company acquired Neon (serverless Postgres) and Mooncake Labs to build infrastructure where agents, not humans, are the primary data consumers.

#LTAP #agents #database architecture #OLTP

Read article →
What are git worktrees, and why should I use them? Engineering 5.0
GitHub Blog

What are git worktrees, and why should I use them?

GitHub published a tutorial on git worktrees, a feature available since Git 2015 that allows multiple working directories for the same repository. Worktrees eliminate context-switching overhead by letting developers work on multiple branches simultaneously without stashing or branch switching.

#git #workflow #developer experience #branching

Read article →
Build Your Own Transaction Foundation Model for Financial Intelligence AI 5.0
NVIDIA Developer Blog

Build Your Own Transaction Foundation Model for Financial Intelligence

NVIDIA guidance on building transaction foundation models for financial data, leveraging sequential patterns in payment and transfer data. The approach replaces brittle hand-engineered features with learned representations that capture customer behavior patterns encoded in transaction history.

#foundation models #tabular data #financial #feature learning

Read article →
Introducing tfctl: The CLI for HCP Terraform and TFE DevOps 8.0
HashiCorp Blog

Introducing tfctl: The CLI for HCP Terraform and TFE

HashiCorp released tfctl, the first official CLI for HCP Terraform and Terraform Enterprise platform operations. It covers workspace creation, variable management, run cancellation, and org administration with built-in safety guardrails (dry-run, interactive confirmation) and schema discovery for both human and agent-driven workflows.

#Terraform #CLI #DevOps #agents

Read article →
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting Security 8.0
The Hacker News

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

A flaw in the Google Cloud Vertex AI SDK for Python allows attackers without project access to hijack ML model uploads and execute code in Google's serving infrastructure via bucket squatting. Palo Alto Networks Unit 42 discovered the vulnerability, termed 'Pickle in the Middle', and reported no active exploitation.

#CVE #supply-chain #ML infrastructure #GCP

Read article →
Docker Content Trust: Retirement and Migration Guidance Security 7.0
Docker Blog

Docker Content Trust: Retirement and Migration Guidance

Docker is fully retiring Docker Content Trust (DCT) and the Notary v1 service at notary.docker.io. The 10-year-old signing mechanism is being replaced by OCI-native tools like Sigstore/Cosign and Notary Project's Notation, which store signatures alongside images in any compliant registry without separate trust infrastructure.

#Docker #security #container #signing

Read article →
SpaceX acquires Cursor for $60 billion. Can it fix Musk's coding division? AI 5.0
The New Stack

SpaceX acquires Cursor for $60 billion. Can it fix Musk's coding division?

SpaceX is acquiring Anysphere, maker of the Cursor AI coding agent, for $60 billion, with closing expected in Q3 2026. The deal follows an April partnership where SpaceX agreed to either pay $10 billion for model training collaboration or acquire the company outright. Cursor will leverage xAI's Colossus infrastructure for scaling model training.

#AI agents #coding #LLM #acquisition

Read article →
Parallelize speculative decoding with P-EAGLE on Amazon SageMaker AI AI 8.0
AWS ML Blog

Parallelize speculative decoding with P-EAGLE on Amazon SageMaker AI

AWS contributes Parallel-EAGLE (P-EAGLE) to open source, a speculative decoding method that parallelizes draft token generation instead of generating them autoregressively. This overcomes the sequential bottleneck of EAGLE-3, where draft depth linearly increases latency, enabling higher speculation depth without performance degradation on SageMaker AI.

#speculative decoding #LLM inference #throughput #draft models

Read article →
From pixels to planning: Earth AI for nature restoration AI 6.0
Google Research Blog

From pixels to planning: Earth AI for nature restoration

Google Research presents Earth AI, a foundation model trained on satellite imagery and geospatial data to support nature restoration planning. The system processes pixel-level environmental data to generate actionable restoration recommendations for conservation teams.

#foundation models #computer vision #geospatial #sustainability

Read article →
Google named a Leader in IDC MarketScape SIEM 2026 Vendor Assessment AI 5.0
Google Cloud Blog

Google named a Leader in IDC MarketScape SIEM 2026 Vendor Assessment

Google Security Operations earned IDC MarketScape Leader status for SIEM, leveraging Mandiant expertise, AI agents for alert triage and investigation, and vertical AI integration with Gemini models. The platform includes agents for proactive hunting and rule generation beyond triage workflows.

#SIEM #agents #security-operations #Gemini

Read article →
Introducing OpenSharing SecureConnect Cloud 6.0
Databricks Blog

Introducing OpenSharing SecureConnect

Databricks extends OpenSharing with SecureConnect to enable secure live data sharing across organizations without exposing raw data. The feature adds encryption and access controls to the existing data-sharing framework, addressing provider concerns about data exposure during cross-org collaboration.

#data sharing #security #Databricks #encryption

Read article →
What's new with Terraform + Ansible DevOps 6.0
HashiCorp Blog

What's new with Terraform + Ansible

HashiCorp announced Terraform Ansible collection 2.0 powered by pyTFE, dynamic inventory, and enhanced Terraform actions. The update deepens bidirectional integration between Terraform and Ansible for Day 0 provisioning through Day 2 operations across hybrid and multi-cloud environments.

#Terraform #Ansible #infrastructure #automation

Read article →
Introducing Brazos: Bringing liquid cooling to air-cooled data centers Other 6.0
Google Cloud Blog

Introducing Brazos: Bringing liquid cooling to air-cooled data centers

Google released Brazos, a rack-mounted closed-loop liquid-to-air cooling system that enables deployment of 1000+ W TDP AI and HPC chips in existing air-cooled data centers without facility retrofits. The self-contained system installs one rack at a time and rejects heat via high-efficiency liquid-to-air exchangers into the hot aisle.

#infrastructure #cooling #data-center #hardware

Read article →
How Atlas scales hundreds of merchant databases with Cloud SQL Enterprise Plus edition Cloud 6.0
Google Cloud Blog

How Atlas scales hundreds of merchant databases with Cloud SQL Enterprise Plus edition

Atlas, a restaurant operating system, scaled from Cloud SQL Enterprise to Enterprise Plus edition to manage hundreds of isolated PostgreSQL databases for individual merchants. Enterprise Plus eliminated the need for separate connection pooling layers and provided better observability for query-level CPU spikes and per-merchant performance isolation.

#Cloud SQL #PostgreSQL #database-scaling #multi-tenancy

Read article →
Introducing new Explores and Merge Queries in Looker AI 6.0
Google Cloud Blog

Introducing new Explores and Merge Queries in Looker

Looker Explore now includes AI assistants powered by Gemini models for natural-language querying and auto-generated Quick Starts. The Insight Assistant modifies data tables and visualizations via natural language, while the Expression Assistant generates custom calculations from text descriptions.

#Looker #Gemini #BI #natural-language

Read article →
Securing the future of AI agents AI 8.0
DeepMind

Securing the future of AI agents

DeepMind outlines an AI Control Roadmap for securing autonomous agent systems, combining traditional safeguards with real-time monitoring and behavioral constraints. The approach addresses the challenge of maintaining safety guarantees as agents gain more autonomy and tool access.

#AI safety #agents #security #monitoring

Read article →
Why did my AWS bill spike? There's now an agent for that AI 7.0
The New Stack

Why did my AWS bill spike? There's now an agent for that

AWS FinOps Agent, now in public preview, correlates cost anomalies with CloudTrail logs to identify root causes and responsible owners, then opens Jira tickets or posts to Slack. It extends AWS Cost Anomaly Detection by automating investigation and remediation workflows, shifting FinOps from periodic dashboard reviews to continuous automation.

#agents #AWS #FinOps #automation

Read article →
How Siemens "slices the elephant," advancing agentic workflows for industrial software development AI 7.0
Google Cloud Blog

How Siemens "slices the elephant," advancing agentic workflows for industrial software development

Siemens and Google Cloud built Knowledge Fabric, an AI system for automating software modernization of hundreds-of-millions-line industrial codebases. The system uses knowledge graphs on Spanner Graph, the Agent Development Kit, Gemini API, Agent Platform, Gemini CLI, and Claude Code to navigate complex multi-layered code and reduce implementation effort.

#agents #code-modernization #knowledge-graphs #Gemini

Read article →
Agent Bricks: Data + AI Summit 2026 AI 7.0
Databricks Blog

Agent Bricks: Data + AI Summit 2026

Databricks announced updates to Agent Bricks, its framework for building multi-step agentic workflows. The framework provides templates and tools for agents to interact with data, APIs, and external systems in a structured way.

#agents #framework #tool use #orchestration

Read article →
What's new with Unity Catalog at Data + AI Summit 2026 AI 7.0
Databricks Blog

What's new with Unity Catalog at Data + AI Summit 2026

Databricks announced new Unity Catalog features to support agentic workloads, including improved access controls, lineage tracking, and agent-specific governance primitives. The updates enable agents to safely query and modify data while maintaining audit trails.

#governance #agents #Unity Catalog #access control

Read article →
Presentation: Automating the Web With MCP: Infra That Doesn't Break AI 8.0
InfoQ DevOps

Presentation: Automating the Web With MCP: Infra That Doesn't Break

Paul Klein covers distributed systems patterns for scaling cloud-hosted browser infrastructure serving AI agents, including multi-tenant state management and Firecracker-based RCE isolation. He demonstrates using the Model Context Protocol (MCP) to expose complex websites as composable agentic tools, bridging the gap between web automation and agent tool-use.

#agents #MCP #tool-use #infrastructure

Read article →
Cloudflare DMARC Management is now generally available Security 6.0
Cloudflare Blog

Cloudflare DMARC Management is now generally available

Cloudflare DMARC Management reached general availability with a redesigned dashboard for unified email authentication posture management. The free service helps domains implement SPF, DKIM, DMARC, and BIMI protocols without requiring email security consultants or manual XML report parsing.

#DMARC #email-security #DNS #authentication

Read article →
From data residency to digital sovereignty: Architectural patterns for cloud native platforms DevOps 7.0
CNCF Blog

From data residency to digital sovereignty: Architectural patterns for cloud native platforms

EU Data Act, NIS-2, DORA, and UK Data Use and Access Act now require platform teams to demonstrate control over workloads, encryption keys, administrative access, and auditability. The article explores how Kubernetes-based platforms can address jurisdictional containment, data portability, and operational governance through control-plane design.

#Kubernetes #sovereignty #compliance #architecture

Read article →
Agentic coding and persistent returns to expertise AI 5.0
Anthropic Research

Agentic coding and persistent returns to expertise

Anthropic's research analyzes approximately 400,000 interactive sessions from around 235,000 users (October 2025 to April 2026) to examine how Claude Code is used in practice for agentic coding workflows. The privacy-preserving analysis provides evidence on user behavior and expertise patterns in AI-assisted development.

#Claude #agents #code-generation #agentic-AI

Read article →
AI Coding Agents Get a Stack Overflow of Their Own AI 7.0
InfoQ DevOps

AI Coding Agents Get a Stack Overflow of Their Own

Stack Overflow launched Stack Overflow for Agents, a beta API-first knowledge base designed specifically for AI coding agents to share and retrieve solutions. The service addresses the Ephemeral Intelligence Gap where agents repeatedly rediscover the same patterns in isolation rather than building on shared memory.

#agents #coding #knowledge retrieval #RAG

Read article →
How customer collaboration is shaping the future of GenAI security with Model Armor AI 5.0
Google Cloud Blog

How customer collaboration is shaping the future of GenAI security with Model Armor

Google Cloud refined Model Armor, its runtime security service for generative and agentic AI, through direct collaboration with a telecommunications customer building a GenAI support platform. The engagement identified configuration and documentation gaps in the Agent Development Kit and Agent Platform, translating developer friction into technical improvements.

#agents #security #Model Armor #Agent Development Kit

Read article →
Introducing Gemma 4 models on Amazon Bedrock AI 7.0
AWS ML Blog

Introducing Gemma 4 models on Amazon Bedrock

Google DeepMind's Gemma 4 family now available on Amazon Bedrock with three instruction-tuned variants: 31B dense, 26B-A4B mixture-of-experts, and E2B. Models include native function calling, multimodal input, and built-in reasoning. Artificial Analysis Intelligence Index of 39 for Gemma 4 31B versus median 15 in the 4B-40B open-weights class.

#LLM #Bedrock #open-weights #function calling

Read article →
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails Security 8.0
The Hacker News

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

A China-linked espionage group maintained access to North American medical, academic, and military research networks for over a year by exploiting a REDCap research server backdoor to steal login credentials. The attackers then abused Google Workspace email rules to exfiltrate sensitive research and defense communications without triggering alerts.

#breach #espionage #credential theft #email exfiltration

Read article →
Accelerating researchers and developers building multilingual AI with a new open dataset AI 6.0
GitHub Blog

Accelerating researchers and developers building multilingual AI with a new open dataset

GitHub releases the Multilingual Repositories Dataset, a metadata-only collection identifying public repositories with non-English natural-language content. The dataset maps language distribution across READMEs, issues, and pull requests, with Portuguese leading README counts and Korean dominating issue text.

#multilingual #datasets #open source #NLP training data

Read article →
The Anthropic Fable mess, explained AI 6.0
The New Stack

The Anthropic Fable mess, explained

The New Stack chronicles Anthropic's Project Glasswing initiative, which provided early cybersecurity vulnerability-detection access to Mythos model before broader release. The timeline reveals tensions between Anthropic's safety-first approach, government access restrictions, and enterprise security partnerships.

#Anthropic #Mythos #cybersecurity #responsible disclosure

Read article →
AI Agent Failure Detection and Root Cause Analysis with Strands Evals AI 8.0
AWS ML Blog

AI Agent Failure Detection and Root Cause Analysis with Strands Evals

Strands Evals SDK detectors automatically identify failures in agent execution traces and perform root cause analysis, reducing diagnosis time from hours to minutes. Structured output includes categorized failures with confidence scores, causal chains, and fix recommendations for system prompt or tool definition changes.

#agents #evals #observability #root cause analysis

Read article →
What's new in data agents: Supercharging your AI workflows AI 7.0
Google Cloud Blog

What's new in data agents: Supercharging your AI workflows

Google announces expanded data agents across its Agentic Data Cloud, including Conversational Analytics in BigQuery (preview), new Data Agents for analysts and engineers, and developer tools for open agentic ecosystems. The platform grounds agent reasoning in real-time enterprise data with unified governance and near-100% accuracy claims.

#agents #data agents #BigQuery #RAG

Read article →
Docker joins the Athena coalition: a cross-industry collaboration for supply chain security Security 8.0
Docker Blog

Docker joins the Athena coalition: a cross-industry collaboration for supply chain security

Docker joins the Athena coalition to address AI-accelerated vulnerability discovery in open source. Frontier models like Anthropic's Mythos can now find novel chained vulnerabilities at machine speed, shrinking the window from discovery to exploitation from years to hours. The article emphasizes secure-by-default tools and cross-vendor supply chain intelligence sharing as the durable response.

#supply chain security #vulnerability #AI #open source

Read article →
Implementing workload identity with HashiCorp Vault and SPIFFE DevOps 7.0
HashiCorp Blog

Implementing workload identity with HashiCorp Vault and SPIFFE

This article clarifies the relationship between SPIFFE (identity standard), SPIRE (runtime), and Vault (credential and access control) for workload identity. It addresses the practical problem that identity alone is insufficient; teams need a path from proving a workload's identity to granting it the right secrets, certificates, and downstream access decisions. The post guides teams adopting SPIFFE without deploying SPIRE everywhere.

#workload identity #SPIFFE #Vault #security

Read article →
Architecting a trusted agentic platform with graph technologies: A Yahoo case study AI 7.0
Google Cloud Blog

Architecting a trusted agentic platform with graph technologies: A Yahoo case study

Yahoo built its Seller Agent digital media buying platform using Google Cloud's Agentic Data Cloud and graph technologies, compressing multi-week manual processes into seconds while maintaining auditability. The case study demonstrates how graph-based architectures enable fast, accountable autonomous systems.

#agents #graph databases #system of action #governance

Read article →
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes Security 8.0
The Hacker News

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

Varonis Threat Labs chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click exfiltration attack (SearchLeak) that bypassed anti-phishing tools by using legitimate microsoft.com domains. The vulnerability exposed emails, calendar data, indexed files, and MFA codes.

#Microsoft 365 #Copilot #privilege-escalation #data-exfiltration

Read article →
Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research Security 8.0
Google Cloud Blog

Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research

Google Threat Intelligence identified UNC6508, a PRC-nexus threat actor, conducting a sophisticated year-long campaign targeting North American medical, academic, and military research institutions. The actor compromised web applications, deployed custom malware, and exfiltrated data on AI, defense systems, and medical research.

#threat intelligence #APT #supply-chain #data exfiltration

Read article →
Your AI-generated app runs on their cloud, and that's the problem AI 8.0
The New Stack

Your AI-generated app runs on their cloud, and that's the problem

AI code-generation platforms like Replit and Lovable demo well but lock generated apps into their cloud infrastructure, breaking production workflows. The article argues that Bring Your Own Cloud (BYOC) is essential for generated code to move through CI/CD, monitoring, security scanning, and organizational governance. Tools that enable deployment to customer infrastructure will reshape the market.

#code generation #AI infrastructure #deployment #lock-in

Read article →
We've been measuring AI wrong; why economically valuable work is the new benchmark AI 8.0
The New Stack

We've been measuring AI wrong; why economically valuable work is the new benchmark

Agent's Last Exam (ALE) introduces a new benchmark measuring whether AI agents can perform economically valuable work across 55 real occupations and 1,500+ real-world tasks, grounded in actual labor market outcomes rather than abstract metrics. Led by UC Berkeley's Dawn Song, the benchmark evaluates frontier models including Fable 5 and GPT-5.5 on practical effectiveness. This shifts evaluation from pure performance (MMLU, AgentPerf) to business impact.

#agents #evals #benchmarking #LLM

Read article →
Growing the Cloudflare AI team with talent from Ensemble AI AI 7.0
Cloudflare Blog

Growing the Cloudflare AI team with talent from Ensemble AI

Cloudflare hired key members of Ensemble AI to accelerate AI infrastructure work. Ensemble's expertise includes model compression and efficient inference via NdLinear, a drop-in replacement architecture that reduces memory and compute overhead for LLMs and multimodal models at scale.

#inference #model compression #LLM #efficiency

Read article →
Code is a message to the future Engineering 6.0
The New Stack

Code is a message to the future

This article reframes code and commit messages as communication artifacts for future maintainers, not just machine instructions. It argues that once code is ready to merge, it becomes part of the codebase and must be understandable on its own, with commit messages that stand without context or follow-up questions. The piece emphasizes treating code review and documentation as part of the communication channel.

#code quality #documentation #maintainability #communication

Read article →
The Onboarding Password Mistake That Creates Unnecessary Risk Security 6.0
The Hacker News

The Onboarding Password Mistake That Creates Unnecessary Risk

The article examines how temporary first-day passwords issued during employee onboarding often remain in use indefinitely, creating persistent security risk. Passwords sent via email or SMS are frequently reused across multiple accounts and lack proper lifecycle management.

#password-management #onboarding #credential-hygiene #access-control

Read article →
Improving Arm64 support in CNCF projects with OCI credits DevOps 7.0
CNCF Blog

Improving Arm64 support in CNCF projects with OCI credits

Oracle's $3M donation of Arm64 compute resources to CNCF projects enables multi-architecture CI and testing, addressing the historical lack of Arm64 build nodes. With over 50% of new AWS instances and 33% of Azure instances running Arm64, CNCF projects now have access to OCI Arm64 instances as GitHub Actions runners and development environments. This brings Arm64 release parity with x86 across the cloud native ecosystem.

#Arm64 #CI/CD #Kubernetes #multi-architecture

Read article →
How I learned Go in a Day with Antigravity 2.0 and How You Can Do the Same AI 6.0
Google Cloud Blog

How I learned Go in a Day with Antigravity 2.0 and How You Can Do the Same

A developer used Antigravity 2.0 (Gemini-powered code translation) to migrate a Node.js CLI tool to Go, creating skl, an Agent Skills manager that launches in 2ms and uses 11MB memory. The post walks through using AI to handle code translation, test generation, and security hardening (input sanitization, path traversal blocking).

#agents #code generation #Go #CLI

Read article →
What is document AI? AI 5.0
Databricks Blog

What is document AI?

Databricks introduces document AI as the application of machine learning and natural language processing to document processing workflows. The article covers use cases and techniques for extracting structured insights from unstructured document data.

#document AI #NLP #ML #unstructured data

Read article →
The Government Just Banned an AI Model. An Engineer's Perspective. AI 6.0
Snyk Blog

The Government Just Banned an AI Model. An Engineer's Perspective.

A government order abruptly removed a powerful AI model from availability, exposing a new supply chain risk for engineering teams that depend on specific frontier models. The article argues that security leaders need contingency plans for model unavailability before the next ban or takedown occurs.

#AI models #supply chain risk #policy #contingency planning

Read article →
Spotlight on SIG Storage DevOps 5.0
Kubernetes Blog

Spotlight on SIG Storage

Interview with SIG Storage co-chairs on Kubernetes persistent data, volume management, and Container Storage Interface (CSI) sidecars. Covers the group's evolution from pre-CSI days and current focus on storage infrastructure as AI workloads scale.

#Kubernetes #storage #CSI #DevOps

Read article →
Xiaomi's MiMo Code claims it beats Claude Code past 200 steps AI 7.0
The New Stack

Xiaomi's MiMo Code claims it beats Claude Code past 200 steps

Xiaomi open-sourced MiMo Code, a terminal-native coding agent that claims to outperform Claude Code on long-horizon tasks beyond 200 steps. The benchmark highlights the 'endurance gap': agents typically fail when hypotheses harden early, errors compound across steps, and context degrades. Long-horizon reliability is emerging as the key differentiator in agentic coding.

#agents #coding #long-horizon #benchmarks

Read article →
What your logs can't tell you when an AI agent acts alone AI 6.0
The New Stack

What your logs can't tell you when an AI agent acts alone

Traditional logging practices fail when AI agents operate autonomously, as logs were designed for human-readable incident review, not real-time agent auditing. The article argues that logs must shift from forensic dumps to actionable audit trails that capture agent decisions, data access, and state transitions in structured, queryable form.

#agents #observability #audit-trails #logging

Read article →
PagerDuty's CAIO says most AI incident tools are missing a critical layer AI 6.0
The New Stack

PagerDuty's CAIO says most AI incident tools are missing a critical layer

PagerDuty argues that AI incident-response tools need more than MCP connectors: agents require access to operational data, memory (short and long-term), and understanding of system relationships and safe actions. The article frames incident management as a harness problem where agent capability depends on data context and process adaptation.

#agents #incident-response #MCP #tool-use

Read article →
Why AI retrieval and ranking need more than vector search AI 8.0
The New Stack

Why AI retrieval and ranking need more than vector search

The New Stack examines how production AI retrieval systems evolve beyond flat vector databases by combining semantic search, structured attributes, ranking models, and business rules using tensor operations. The article argues that tensors provide the multi-dimensional framework needed for complex relevance scoring at scale.

#retrieval #vector search #ranking #tensors

Read article →
Can JetBrains close the IDE skills gap before AI widens it further? Engineering 6.0
The New Stack

Can JetBrains close the IDE skills gap before AI widens it further?

JetBrains launches the Course Creators Program, embedding hands-on coding exercises directly into professional IDEs via the JetBrains Academy plugin for platforms like Udemy and Coursera. The initiative argues that as AI generates more code, developers need stronger debugging and validation skills in real IDEs, not browser-based environments.

#developer education #IDE #debugging #JetBrains

Read article →
Loops are replacing prompts. Verification is about to be your biggest problem. AI 9.0
The New Stack

Loops are replacing prompts. Verification is about to be your biggest problem.

The New Stack argues that agentic development is entering a third era where loops (small programs that prompt agents, evaluate responses, and iterate) become the unit of work, replacing prompt-driven and spec-driven approaches. For cloud-native teams on Kubernetes, this shift raises critical questions about verification, cost, and infrastructure requirements.

#agents #agentic AI #verification #Kubernetes

Read article →
Fable 5 vs Opus 4.8: The real stakes, not the spec sheet AI 8.0
The New Stack

Fable 5 vs Opus 4.8: The real stakes, not the spec sheet

Anthropic released Fable 5, the first Mythos-class model positioned above Opus 4.8, but at double the cost ($10/$50 per million tokens vs $5/$25). The model includes safety classifiers that degrade responses on frontier AI research and cybersecurity tasks by routing them to Opus 4.8, a policy Anthropic later walked back after researcher backlash.

#LLM #Claude #Fable #model-selection

Read article →
Claude Fable cost $9 in one coding test. GPT-5.5 cost $1.50. Model triage is the new AI skill. AI 7.0
The New Stack

Claude Fable cost $9 in one coding test. GPT-5.5 cost $1.50. Model triage is the new AI skill.

A practical analysis showing Fable 5 cost $9 per task while GPT-5.5 cost $1.50 on identical coding tests, highlighting that model selection and cost-aware routing is now a core engineering skill. The article also covers Anthropic's emergency suspension of Fable 5 and Mythos 5 due to a US government export-control directive over a reported jailbreak technique.

#LLM #cost-optimization #model-selection #Claude

Read article →
How we made GitHub Copilot CLI more selective about delegation AI 8.0
GitHub Blog

How we made GitHub Copilot CLI more selective about delegation

GitHub improved Copilot CLI's agentic harness with smarter subagent delegation that reduces unnecessary handoffs between agents. The update, rolled out in v1.0.42, reduced tool failures by 23% and improved P95 wait time by 5% by helping the main agent stay focused when it can move faster alone and delegate only when specialist subagents create real leverage.

#agents #tool-use #LLM #delegation

Read article →
Results from the first Anthropic Public Record AI 6.0
Anthropic News

Results from the first Anthropic Public Record

Anthropic published results from its first Public Record initiative, detailing transparency findings and safety research outcomes. The report covers Claude model evaluations, safety testing methodologies, and Anthropic's commitment to public accountability in AI development.

#LLM #evals #safety #transparency

Read article →
NVIDIA Achieves Leading Agentic Coding Performance on First Agentic AI Benchmark AI 8.0
NVIDIA Developer Blog

NVIDIA Achieves Leading Agentic Coding Performance on First Agentic AI Benchmark

NVIDIA published results on Artificial Analysis AgentPerf, the first multi-vendor open benchmark for measuring AI agent inference performance on real-world coding tasks. The benchmark profiles agent trajectories and execution complexity, establishing a standard for comparing agentic workload performance across systems.

#agents #benchmarking #inference #agentic AI

Read article →
Building Supercharger: How Rocket Close optimized title operations with agentic AI AI 7.0
AWS ML Blog

Building Supercharger: How Rocket Close optimized title operations with agentic AI

Rocket Close built Supercharger, an agentic AI system that automates title examination workflows by centralizing state-specific knowledge and automating research across disparate county records, title guides, and internal systems. The agent reduces manual search time and improves throughput in mortgage title operations by dynamically guiding teams through order processing in natural language.

#agents #agentic AI #workflow automation #knowledge retrieval

Read article →
Who gets to be Switzerland in the enterprise agent wars? AI 5.0
The New Stack

Who gets to be Switzerland in the enterprise agent wars?

OutSystems positions itself as a neutral agent orchestration layer that coordinates across enterprise systems of record (SAP, Salesforce, ServiceNow) without owning the underlying data, contrasting with competitors who embed orchestration within their own ecosystems.

#agents #orchestration #enterprise #low-code

Read article →
TCS and Anthropic partner to bring Claude to regulated industries AI 5.0
Anthropic News

TCS and Anthropic partner to bring Claude to regulated industries

Tata Consultancy Services (TCS) and Anthropic announced a partnership to deploy Claude in regulated industries, focusing on compliance, security, and industry-specific customization. The collaboration aims to address regulatory requirements and enterprise adoption barriers for Claude in sectors like finance, healthcare, and government.

#LLM #Claude #enterprise #compliance

Read article →
Research into how AI can help users understand skin conditions AI 5.0
Google Research Blog

Research into how AI can help users understand skin conditions

Google Research explores AI applications for dermatology, enabling users to better understand skin conditions through machine learning models. The work bridges computer vision and healthcare, demonstrating practical use of foundation models in medical diagnosis support.

#computer vision #healthcare #foundation models #medical AI

Read article →
Coding agents have questions, too — so Stack Overflow built them a home AI 6.0
The New Stack

Coding agents have questions, too — so Stack Overflow built them a home

Stack Overflow is adapting to the era of coding agents and LLMs by building a dedicated platform for agents to ask questions and find answers. The platform faces existential pressure as monthly question volume collapsed from 289,000 in early 2014 to low thousands by end of 2025, driven by ChatGPT's superior speed and politeness compared to Stack Overflow's moderation culture.

#agents #LLM #coding #community

Read article →
Build a meeting prep and follow-up assistant with Amazon Quick and Cisco Webex MCP servers AI 7.0
AWS ML Blog

Build a meeting prep and follow-up assistant with Amazon Quick and Cisco Webex MCP servers

Amazon Quick and Cisco Webex MCP servers enable building a meeting assistant that gathers context from Webex meetings, transcripts, Vidcast videos, and message threads through a single conversational interface. The agent pre-populates meeting briefs with prior summaries, related content, and unresolved follow-ups, then post-meeting summarizes discussions and drafts follow-up messages.

#agents #MCP servers #tool use #meeting automation

Read article →
Deploy Long-Context Reasoning and Agentic Workflows with MiniMax M3 on NVIDIA Accelerated Infrastructure AI 7.0
NVIDIA Developer Blog

Deploy Long-Context Reasoning and Agentic Workflows with MiniMax M3 on NVIDIA Accelerated Infrastructure

MiniMax M3 is a multimodal foundation model supporting long-context reasoning and agentic workflows, deployable on NVIDIA Blackwell and other accelerated infrastructure. The model consolidates separate text, vision, and code pipelines into a single system, reducing complexity and iteration time for enterprise AI applications.

#LLM #multimodal #agents #long-context

Read article →
From PDFs to insights: Architecting an intelligent document processing pipeline with AWS generative AI services AI 7.0
AWS ML Blog

From PDFs to insights: Architecting an intelligent document processing pipeline with AWS generative AI services

Amazon Bedrock Data Automation (BDA) provides a unified API for extracting insights from multimodal documents, images, videos, and audio. Unlike OCR-only solutions, BDA classifies documents, extracts structured data with confidence scores, and validates output through a single pipeline supporting up to 3,000 pages and 500 MB per request.

#document processing #multimodal #data extraction #Amazon Bedrock

Read article →
Built from the inside out: How AWS Professional Services became a frontier team first AI 6.0
AWS ML Blog

Built from the inside out: How AWS Professional Services became a frontier team first

AWS Professional Services rebuilt its delivery model around AI-native development practices, compressing engagement timelines from months to days by freeing consultants from non-coding overhead and enabling tighter feedback loops. The shift prioritizes which decisions move fast versus require human judgment while maintaining quality at higher execution velocity.

#AI-native development #frontier teams #workflow redesign #productivity

Read article →
Introducing the Open Knowledge Format AI 7.0
Google Cloud Blog

Introducing the Open Knowledge Format

Google introduces Open Knowledge Format (OKF) v0.1, a vendor-neutral specification for representing metadata, context, and curated knowledge for AI agents and LLMs. OKF formalizes the LLM-wiki pattern as a portable format using markdown files with YAML frontmatter, requiring no complex compression, runtime, or SDK. The format enables knowledge bases written by different producers to be consumed by different agents without translation.

#LLM #agents #RAG #knowledge representation

Read article →
Scaling Security Insights: how we achieved a 10x increase in global scanning capacity DevOps 6.0
Cloudflare Blog

Scaling Security Insights: how we achieved a 10x increase in global scanning capacity

Cloudflare increased Security Insights scanning throughput from 10 to 100 scans per second to enable weekly or more frequent security scans across all accounts and enable automatic scanning for free-tier customers. The system redesign addressed backlog buildup, API timeouts, and process crashes caused by the existing architecture struggling under load.

#observability #security #infrastructure scaling #DevOps

Read article →
Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes AI 8.0
InfoQ DevOps

Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes

Microsoft announced public preview of Azure Container Apps Sandboxes (Microsoft.App/SandboxGroups), a new ARM resource type for running untrusted code generated by AI agents in hardware-isolated environments. Sandboxes start from OCI disk images in under one second, scale to thousands of instances, and incur no cost when idle.

#agents #security #Azure #containers

Read article →
Rethinking MDR as Attackers and Defenders Embrace AI Security 5.0
The Hacker News

Rethinking MDR as Attackers and Defenders Embrace AI

The article examines how AI adoption by both attackers and defenders is reshaping managed detection and response (MDR) services. Traditional MDR models struggle to keep pace with AI-accelerated attack campaigns and the volume of alerts they generate.

#MDR #AI #threat-detection #security-operations

Read article →
Talk to all your data, wherever it lives AI 7.0
Databricks Blog

Talk to all your data, wherever it lives

Databricks explores agentic AI systems that reason across heterogeneous data sources, addressing the operational challenge of multi-source reasoning in production. The article discusses how agents enable unified query interfaces across data warehouses, lakes, and external APIs.

#agents #agentic AI #data integration #retrieval

Read article →
GitHub availability report: May 2026 DevOps 8.0
GitHub Blog

GitHub availability report: May 2026

GitHub reports infrastructure progress: 40% of monolith traffic now on Azure (up from 8% in February), Git traffic at 30%, and database cluster isolation underway. The migration supports rapid growth from AI-assisted and agentic development workflows, with stateless auth tokens rolling out to reduce per-request database load.

#infrastructure #Azure #monolith-migration #database

Read article →
Don't just grab random stuff off the internet: What Chainguard found in 52,000 open-source packages Security 7.0
The New Stack

Don't just grab random stuff off the internet: What Chainguard found in 52,000 open-source packages

Chainguard released a source code scanner that detects 'greyware' in open-source packages: code that passes traditional security scans but performs behaviors enterprises would prohibit. The tool addresses risks in agentic development workflows where non-technical users generate applications by pulling arbitrary dependencies without security review.

#supply-chain #security #agents #open-source

Read article →
Extract Data with On-demand and Batch Pipelines Dynamically AI 6.0
AWS ML Blog

Extract Data with On-demand and Batch Pipelines Dynamically

AWS demonstrates an intelligent document processing pipeline using Amazon Bedrock with both on-demand and batch inference options for extracting data from scanned PDFs and electronic documents. The solution uses Bedrock Prompt Management to dynamically specify models and prompts at the document level, handling varying formats and enabling cost-optimized batch processing alongside time-sensitive on-demand extraction.

#document processing #Bedrock #batch inference #LLM

Read article →
Powering the next era of Confidential AI Cloud 7.0
Google Cloud Blog

Powering the next era of Confidential AI

Google Cloud and Apple collaborated to build a serving platform for Apple's Private Cloud Compute (PCC) on Google Cloud infrastructure, leveraging Google's Confidential Computing portfolio and Titanium security architecture with custom Titan chips. The platform protects data at rest, in transit, and in use within hardware-based Trusted Execution Environments (TEEs).

#Confidential Computing #TEE #Titanium #Private Cloud Compute

Read article →
AI is disrupting everything: Where do entry-level tech jobs go now? Other 6.0
The New Stack

AI is disrupting everything: Where do entry-level tech jobs go now?

A Linux Foundation report surveying 400 hiring managers across Europe found AI is driving 27% net hiring growth in tech, but junior roles are contracting 3% as organizations shift toward forward-deployed engineers and senior generalists. Entry-level programming positions, traditionally the on-ramp to software careers, face increasing pressure from AI-generated code and changing team dynamics.

#workforce #hiring #junior roles #forward-deployed engineers

Read article →
The manual model breaks: What happens when agents write to production data AI 8.0
The New Stack

The manual model breaks: What happens when agents write to production data

lakeFS announced lakeFS for Agentic AI, a data control plane designed to automate data governance for autonomous agent workloads. The service addresses the breakdown of manual data stewardship when dozens of agents make simultaneous changes at machine speed, faster than human review can catch errors before they propagate.

#agents #data governance #production safety #MLOps

Read article →
Geospatial Unbounded: Spatial SQL GA with AI/BI Maps, Delta Sharing, and Iceberg v3 Cloud 7.0
Databricks Blog

Geospatial Unbounded: Spatial SQL GA with AI/BI Maps, Delta Sharing, and Iceberg v3

Databricks announces general availability of Spatial SQL for geospatial queries, integration with AI/BI Maps visualization, Delta Sharing support, and Iceberg v3 compatibility. The release enables location-based analytics workflows like insurance risk assessment and supply-chain optimization directly on Delta Lake.

#spatial-sql #Delta Lake #Iceberg #geospatial

Read article →
Beyond the stack trace: why AI requires a new debugging paradigm AI 8.0
The New Stack

Beyond the stack trace: why AI requires a new debugging paradigm

Traditional debugging assumes deterministic code execution with reproducible failures, but LLM-integrated applications are probabilistic systems where identical inputs produce varying outputs based on model parameters, temperature, and context. Stack traces and breakpoints fail when failures lack clear execution paths, requiring new observability and debugging approaches.

#LLM #debugging #observability #inference

Read article →
Terraform MCP server is now generally available AI 8.0
HashiCorp Blog

Terraform MCP server is now generally available

HashiCorp has released Terraform MCP server as generally available for HCP Terraform and Terraform Enterprise. The server implements the Model Context Protocol, allowing AI assistants like GitHub Copilot and Claude Code to interact with Terraform, generate infrastructure code from organizational standards, and automate routine infrastructure tasks.

#Terraform #MCP #AI-assistants #infrastructure-as-code

Read article →
Making secret scanning more trustworthy: Reducing false positives at scale Security 8.0
GitHub Blog

Making secret scanning more trustworthy: Reducing false positives at scale

GitHub reduces secret scanning false positives using agentic reasoning from Microsoft Security & AI's Agents Offense team. The system applies contextual verification (from Agentic Secret Finder) to pattern and AI-based detections, improving signal-to-noise ratio while maintaining coverage of provider patterns and unstructured secrets.

#secret-scanning #agents #security #false-positives

Read article →
Transform dashboards into interactive data experiences with Looker agents AI 7.0
Google Cloud Blog

Transform dashboards into interactive data experiences with Looker agents

Google Cloud introduced Looker dashboard agents in preview, embedding conversational AI agents directly into dashboards to enable natural-language exploration of BI data. Agents leverage dashboard context including applied filters, cross-filters, and pre-curated tiles, with ability to access underlying Explores for additional data.

#agents #Looker #BI #natural language

Read article →
Evaluate AI agents systematically with Agent-EvalKit AI 8.0
AWS ML Blog

Evaluate AI agents systematically with Agent-EvalKit

Agent-EvalKit is an open-source Apache 2.0 toolkit that provides infrastructure for evaluating AI agents by tracing full execution paths, tool calls, and intermediate state rather than just final output. It integrates with Claude Code, Kiro CLI, and Kilo Code, bringing evaluation into the development environment with test cases, observability instrumentation, and metrics for assessing faithfulness and tool usage.

#agents #evals #observability #tool-use

Read article →
Spot trends faster, sort smarter: Unlocking Sparklines and Custom Sort in Amazon Quick Cloud 5.0
AWS ML Blog

Spot trends faster, sort smarter: Unlocking Sparklines and Custom Sort in Amazon Quick

Amazon QuickSight adds sparklines (inline trend charts in table cells) and custom sort for controls, enabling business-driven ordering in dropdowns and list controls. These features enhance dashboard expressiveness without requiring navigation to separate visualizations, letting users spot patterns directly in tables and organize controls by business priority rather than database order.

#QuickSight #BI #dashboards #visualization

Read article →
Optimize blueprint extraction accuracy in Amazon Bedrock Data Automation AI 7.0
AWS ML Blog

Optimize blueprint extraction accuracy in Amazon Bedrock Data Automation

Amazon Bedrock Data Automation now includes blueprint instruction optimization that automatically refines extraction instructions using 3-10 example documents with ground truth values, improving accuracy in minutes without separate model fine-tuning. The feature handles document classification, extraction, normalization, and validation through a single API with customizable blueprints tailored to specific formats and business requirements.

#Bedrock #document processing #data extraction #LLM

Read article →
How to delegate 40% of tickets to AI AI 7.0
The New Stack

How to delegate 40% of tickets to AI

The article argues SDLCs must be redesigned to support autonomous agents end-to-end from ticket to production by providing three infrastructure components: rich context (detailed PRD, not just ticket title), guardrails (scope and stopping conditions), and visibility (engineer oversight without log-watching). Current manual approvals and reviews create bottlenecks that prevent agents from operating at their capability level.

#agents #SDLC #automation #CI/CD

Read article →
ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit Security 9.0
Google Cloud Blog

ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit

Mandiant and Google Threat Intelligence Group identified UNC6240 (ShinyHunters) exploiting CVE-2026-35273, a critical RCE in Oracle PeopleSoft Environment Management (CVSS 9.8), as a zero-day between May 27 and June 9, 2026. The campaign targeted 100+ organizations, 68% in US higher education, using customized MeshCentral agents for lateral movement and defacement.

#CVE-2026-35273 #Oracle PeopleSoft #zero-day #RCE

Read article →
Agentic development hinges on verification. For cloud-native software, that is a runtime problem. AI 8.0
The New Stack

Agentic development hinges on verification. For cloud-native software, that is a runtime problem.

As agents transition from interactive (developer-driven) to async (event-triggered, autonomous) execution, verification becomes the bottleneck. Async agents must verify their own work at machine speed before opening PRs, because traditional human review cannot scale to agent output volume. A green test run is insufficient without runtime verification that changes behave correctly in distributed systems.

#agents #verification #testing #async

Read article →
AI agents need infrastructure: Why Europe's regional cloud strategy matters Cloud 5.0
The New Stack

AI agents need infrastructure: Why Europe's regional cloud strategy matters

The agentic AI market is forecast to grow from $9.14 billion to $139.19 billion by 2034 at 42% CAGR in Europe. Multi-agent-driven automation replacing standalone models requires enterprise infrastructure and data residency compliance, making regional cloud strategies critical for European businesses deploying autonomous decision-making systems at scale.

#agents #cloud infrastructure #data sovereignty #enterprise

Read article →
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories Security 7.0
The Hacker News

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories

A weekly threat roundup covering supply chain attack kits in public repos, a $5,000-a-month browser-cloning RAT, and research demonstrating AI agents can be tricked into leaking real credentials. The threat landscape shows increasingly polished attack infrastructure, including mule networks operating like SaaS platforms.

#supply-chain #RAT #AI agents #threat intelligence

Read article →
Introducing Verifiable Execution in Dapr 1.18 AI 8.0
CNCF Blog

Introducing Verifiable Execution in Dapr 1.18

Dapr 1.18 introduces Workflow History Signing, Workflow History Propagation, and Workflow Attestation to enable verifiable execution in distributed workflows and AI agents. These capabilities provide tamper-proof execution history, provenance tracking, and chain-of-custody verification for long-running processes and autonomous systems.

#Dapr #workflow-orchestration #AI-agents #attestation

Read article →
Transform your AI coding agent into a deterministic Java Spring expert AI 6.0
The New Stack

Transform your AI coding agent into a deterministic Java Spring expert

AI agents struggle with large-scale framework upgrades like Spring Boot 4 due to non-deterministic iteration, compilation errors, and runtime behavior changes. The article advocates for deterministic agent approaches that reduce 1-2 day manual iteration cycles by providing agents with comprehensive framework knowledge, test coverage requirements, and structured upgrade workflows.

#agents #code generation #Java #Spring Boot

Read article →
Cleaner AI training data, fewer bugs: Sonar's SonarSweep explained AI 7.0
The New Stack

Cleaner AI training data, fewer bugs: Sonar's SonarSweep explained

Sonar has built SonarSweep to address the garbage-in-garbage-out problem in LLM training data. Public code repositories contain outdated libraries, insecure patterns, and poor practices that models learn indiscriminately, leading to inconsistent code quality in generated outputs. SonarSweep filters training data to ensure models learn from production-ready, secure, and maintainable examples.

#LLM #training-data #code-quality #security

Read article →
Docker Hardened Images enhanced vulnerability scanning with Docker and Aikido DevOps 7.0
Docker Blog

Docker Hardened Images enhanced vulnerability scanning with Docker and Aikido

Aikido now scans Docker Hardened Images with built-in VEX support, automatically filtering out vulnerabilities Docker has verified as non-exploitable. This reduces CVE noise for teams using distroless or purpose-built images, addressing the explosion of false-positive findings from AI-generated code and dependency sprawl.

#Docker #vulnerability-scanning #VEX #container-security

Read article →
Building and Scaling a Platform with Project-as-a-Service DevOps 5.0
InfoQ DevOps

Building and Scaling a Platform with Project-as-a-Service

An organization shifted from developer autonomy to enablement-focused platform engineering, helping teams solve problems consistently rather than in fragmented ways. The approach prioritizes making the right way the easiest way through intensive collaboration and team confidence-building.

#platform engineering #developer experience #enablement #scaling

Read article →
10 Indispensable Prompts Our Team Refuses to Build Without AI 6.0
Google Cloud Blog

10 Indispensable Prompts Our Team Refuses to Build Without

Google engineers share 10 production prompts they use repeatedly across projects, including a spec-building prompt that acts as a cynical Principal Architect to surface technical and UX considerations before implementation. The post emphasizes that high-performing teams don't improvise prompts but instead refine and reuse a curated set of templates across nearly every project.

#prompt engineering #LLM #best practices #workflow

Read article →
How frontier teams are reinventing AI-native development AI 7.0
AWS ML Blog

How frontier teams are reinventing AI-native development

AWS describes how frontier teams achieve 4.5x to 10x+ productivity gains by treating AI as the foundation of development rather than a coding shortcut, with one Amazon Bedrock team shipping more production code in five months than the previous ten years. The bottleneck is not code generation but agent access to knowledge and team restructuring around AI workflows, with three paths outlined for AI-native development.

#agents #software engineering #productivity #CI/CD

Read article →
OpenAI to acquire Ona AI 7.0
OpenAI Blog

OpenAI to acquire Ona

OpenAI plans to acquire Ona to expand Codex with secure, persistent cloud environments enabling long-running AI agents across enterprise workflows. The acquisition adds infrastructure capabilities for sustained agent execution in production environments.

#agents #Codex #infrastructure #acquisition

Read article →
BBVA puts AI at the core of banking with OpenAI AI 5.0
OpenAI Blog

BBVA puts AI at the core of banking with OpenAI

BBVA deployed ChatGPT Enterprise across 100,000 employees to transform banking operations. The partnership demonstrates scaled LLM adoption in a regulated industry with focus on customer-facing and internal productivity applications.

#LLM #enterprise #ChatGPT #banking

Read article →
Scaling AI Through Data Fluency AI 5.0
Databricks Blog

Scaling AI Through Data Fluency

Databricks discusses how data fluency (understanding data lineage, quality, and governance) enables organizations to scale AI applications reliably, using aviation industry examples of data-intensive AI workloads.

#data governance #data quality #MLOps #lineage

Read article →
New framework for auditing machine unlearning AI 7.0
Google Research Blog

New framework for auditing machine unlearning

Google Research presents a framework for evaluating machine unlearning algorithms, addressing the challenge of verifying that models have effectively forgotten specific data while maintaining performance on retained data.

#unlearning #evals #privacy #model auditing

Read article →
Observability overload is drowning engineers AI 6.0
The New Stack

Observability overload is drowning engineers

The article argues that modern observability stacks generate so much data that engineers spend more time hunting through logs and traces than resolving incidents. It proposes AI-driven systems that can parse observability data autonomously and either execute fixes or suggest remediation paths, replacing manual log analysis with intelligent triage.

#observability #AI #incident response #automation

Read article →
Fable 5: Guardrails and burn rate are annoying users, who say it's still better than Opus 4.8 AI 7.0
The New Stack

Fable 5: Guardrails and burn rate are annoying users, who say it's still better than Opus 4.8

Anthropic released Fable 5, a Mythos-class model with longer autonomous execution, enhanced memory, and improved coding skills. Pricing is $10/M input and $50/M output tokens through June 22, then switches to usage credits. Early feedback praises performance but criticizes conservative guardrails, short usage windows, and mandatory data retention.

#LLM #Claude #model release #pricing

Read article →
The Anthropic leader who built Claude Code says he ditched prompting — now he just writes loops. AI 9.0
The New Stack

The Anthropic leader who built Claude Code says he ditched prompting — now he just writes loops.

Boris Cherny, head of Claude Code at Anthropic, describes a shift from interactive prompting to loop engineering: designing orchestration patterns that combine scheduled execution, isolated workspaces, verifier agents, and persistent memory to transform coding agents into autonomous workers. Google's Addy Osmani formalized the pattern, replacing human-as-scheduler with agent-as-executor.

#agents #prompt engineering #orchestration #autonomous systems

Read article →
Deep dive: How Lightning Engine delivers 4.9x faster Apache Spark performance Cloud 7.0
Google Cloud Blog

Deep dive: How Lightning Engine delivers 4.9x faster Apache Spark performance

Google Cloud announces general availability of Lightning Engine for Managed Service for Apache Spark, delivering up to 4.9x faster performance and 2x better price-performance than alternatives. The engine is fully compatible with existing Spark workloads, requires zero code changes, and has been validated across over one million real-world jobs for production stability.

#Apache Spark #data processing #performance #serverless

Read article →
AWS can now mathematically prove your VMs are isolated Cloud 8.0
The New Stack

AWS can now mathematically prove your VMs are isolated

AWS announced Graviton5 GA with M9g and M9gd EC2 instances, doubling Graviton4 core count from 96 to 192 cores and delivering 25% better compute performance. More significantly, the sixth-generation Nitro System includes the Nitro Isolation Engine, a formally verified separation kernel whose sole job is VM-to-VM isolation, enabling mathematical proof of hypervisor security.

#Graviton5 #Nitro #formal verification #hypervisor security

Read article →
Microsoft pulled 73 GitHub repos after malware attack — but still won't say who's compromised Security 9.0
The New Stack

Microsoft pulled 73 GitHub repos after malware attack — but still won't say who's compromised

Microsoft shut down 73 GitHub repositories after a malware attack that stole developer credentials when repositories were opened in AI coding agents (Claude Code, Gemini CLI, Cursor). A malicious commit in the durabletask repository triggered the takedown. Microsoft has not disclosed how many developers were affected or provided detailed incident timeline.

#security #malware #supply-chain #credential theft

Read article →
Give GitHub Copilot CLI real code intelligence with language servers AI 8.0
GitHub Blog

Give GitHub Copilot CLI real code intelligence with language servers

GitHub Copilot CLI now integrates Language Server Protocol (LSP) via an LSP Setup skill, replacing heuristic bytecode extraction and text search with structured code understanding. The skill automates LSP server installation and configuration for 14 languages, enabling agents to resolve types, find definitions, and extract APIs with precision instead of grepping JAR files or walking node_modules.

#agents #tool use #LSP #code understanding

Read article →
AI Serving Platform That Adapts to Your Model AI 7.0
Databricks Blog

AI Serving Platform That Adapts to Your Model

Databricks describes an inference serving platform that automatically adapts to model characteristics (batch size, latency requirements, hardware) rather than forcing models into fixed serving patterns, reducing operational complexity.

#inference #serving #model deployment #MLOps

Read article →
Stop hand-tuning kernels: How Neuron Agentic Development accelerates AWS Trainium optimizations AI 8.0
AWS ML Blog

Stop hand-tuning kernels: How Neuron Agentic Development accelerates AWS Trainium optimizations

AWS announces Neuron Agentic Development, a collection of AI agents integrated with Kiro and Claude that automate kernel authoring, debugging, and profiling for Trainium and Inferentia hardware via the Neuron Kernel Interface (NKI). This removes the barrier of deep chip-level expertise, enabling ML engineers to write hardware-aware kernels and diagnose bottlenecks without months of architecture-specific ramp-up.

#agents #kernel optimization #Trainium #Inferentia

Read article →
Build an AI-Powered Equipment Repair Assistant Using Amazon Bedrock AgentCore AI 6.0
AWS ML Blog

Build an AI-Powered Equipment Repair Assistant Using Amazon Bedrock AgentCore

AWS demonstrates an equipment repair assistant built on Bedrock AgentCore using Amazon Nova 2 Lite, Bedrock Knowledge Base for RAG over manufacturer documentation, and AgentCore Memory for multi-turn conversation persistence. The solution helps farm technicians diagnose equipment issues and access repair procedures via natural language, reducing downtime and site visits.

#agents #RAG #Bedrock #Nova

Read article →
Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors Cloud 7.0
AWS News

Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors

AWS Graviton5-powered M9g and M9gd EC2 instances are now generally available, delivering 36-60% performance gains over prior generations across ClickHouse, Honeycomb, and HubSpot production workloads with zero code changes. M9gd adds high-speed NVMe SSD storage for latency-sensitive applications. Graviton5 is positioned as AWS's most powerful and energy-efficient custom silicon, now powering over 350 instance types across 120,000+ customers.

#Graviton #EC2 #ARM #performance

Read article →
Who Runs the Ransomware Group 'The Gentlemen?' Security 6.0
Krebs on Security

Who Runs the Ransomware Group 'The Gentlemen?'

The Gentlemen ransomware-as-a-service gang has become the second most active ransomware group by victim count, claiming 332+ victims since mid-2025 and 240+ in 2026 alone. The group attracts affiliates with a 90/10 revenue split (vs. industry standard 80/20) and targets internet-facing devices like VPNs and firewalls for rapid network encryption.

#ransomware #RaaS #threat intelligence #affiliate recruitment

Read article →
Databricks wants to kill the "email me a file" problem for AI agent skills AI 7.0
The New Stack

Databricks wants to kill the "email me a file" problem for AI agent skills

Databricks launched OpenSharing, a successor to Delta Sharing that extends zero-copy data sharing to agent skills, AI models, and unstructured data. The protocol now supports Apache Iceberg REST Catalog clients and on-premises vendors (Everpure, MinIO, Qumulo). OpenSharing is now a Linux Foundation project, building on MCP, Agent2Agent, and Anthropic's open Agent Skills spec.

#agents #data sharing #OpenSharing #agent skills

Read article →
Ramp bets forward deployed engineers can do what off-the-shelf finance AI can't AI 7.0
The New Stack

Ramp bets forward deployed engineers can do what off-the-shelf finance AI can't

Ramp launches Applied AI Solutions, a high-touch services offering that embeds Ramp engineers within enterprise finance teams to build and deploy AI agents for accounts payable, procurement, and close workflows. The service pulls context from ERPs and approval chains to build agents that integrate into existing systems, representing a shift from Ramp's self-serve SaaS model toward embedded engineering.

#agents #AI infrastructure #finance automation #forward deployed engineers

Read article →
Route public traffic to private applications with Cloudflare Cloud 7.0
Cloudflare Blog

Route public traffic to private applications with Cloudflare

Cloudflare launched Application Services for Private Origins (closed beta), enabling secure routing of traffic to private applications without exposing them to the public Internet. The service extends WAF, bot management, rate limiting, caching, and Workers to internal APIs, AI agent backends, MCP servers, and operational tools.

#Cloudflare #private networking #WAF #security

Read article →
Investing in multi-agent AI safety research AI 6.0
DeepMind

Investing in multi-agent AI safety research

Google DeepMind announces $10M funding initiative for multi-agent AI safety research. Focus areas include coordination, emergent behaviors, and safety properties in systems with multiple interacting agents.

#AI safety #multi-agent #research funding #agents

Read article →
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs Security 8.0
The Hacker News

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft released patches for a record 206 vulnerabilities including 39 Critical and 167 Important severity flaws, with three zero-days disclosed at release time. The patch set includes 56 remote code execution, 63 privilege escalation, and 30 information disclosure vulnerabilities across its software portfolio.

#CVE #zero-day #RCE #privilege escalation

Read article →
Azure API Management Ships Unified Model API and MCP Content Safety at Build 2026 AI 8.0
InfoQ DevOps

Azure API Management Ships Unified Model API and MCP Content Safety at Build 2026

Azure API Management released a Unified Model API that translates client requests into format-specific calls to Anthropic, Vertex AI, and other LLM backends. Content safety policies now cover MCP tool calls and Agent-to-Agent payloads, with token metrics tracking reasoning, cached, and audio tokens across providers.

#LLM gateway #API management #MCP #content safety

Read article →
Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards AI 8.0
The Hacker News

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

Anthropic released Claude Fable 5, its most capable model to date, with an unusual dual-product strategy: the public Claude Fable 5 includes safety classifiers, while Claude Mythos 5 (same underlying model with safeguards removed) is restricted to vetted cybersecurity researchers. This approach separates capability from safety policy rather than building different models.

#LLM #foundation model #safety #Claude

Read article →
Choosing your surface: Antigravity 2.0, Antigravity CLI, Antigravity IDE, or Antigravity SDK AI 6.0
Google Cloud Blog

Choosing your surface: Antigravity 2.0, Antigravity CLI, Antigravity IDE, or Antigravity SDK

Google Cloud details four interfaces for Antigravity autonomous agents: a desktop app for multi-project orchestration, a CLI for terminal workflows, an IDE for code-alongside-agent editing, and a Python SDK for custom agent development. Each surface targets different workflows from headless execution to direct code authoring.

#agents #autonomous agents #tool-use #orchestration

Read article →
Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows Security 9.0
The Hacker News

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

Security researcher Chaotic Eclipse released a proof-of-concept exploit for RoguePlanet, a Microsoft Defender zero-day leveraging a race condition to achieve SYSTEM-level access on updated Windows systems. The researcher claims 100% success rate on certain configurations despite the inherent race-condition variability.

#CVE #zero-day #Windows #privilege escalation

Read article →
A Record-Breaking Patch Tuesday for June 2026 Security 7.0
Krebs on Security

A Record-Breaking Patch Tuesday for June 2026

Microsoft released nearly 200 security fixes in June 2026 Patch Tuesday, including 36 critical vulnerabilities and at least 3 with public exploits. AI tools are accelerating vulnerability discovery by both defenders and researchers, making this record patch volume likely the new norm.

#CVE #patch management #AI vulnerability discovery #zero-day

Read article →
Scale Robot Reinforcement Learning with NVIDIA Isaac Lab on Amazon SageMaker AI AI 7.0
AWS ML Blog

Scale Robot Reinforcement Learning with NVIDIA Isaac Lab on Amazon SageMaker AI

AWS demonstrates training robot policies for humanoid locomotion using NVIDIA Isaac Lab on SageMaker HyperPod and Training Jobs, compressing months of simulation into hours by offloading infrastructure management. The post covers how GPU-accelerated simulation and distributed training reduce iteration time for physical AI workloads without requiring teams to maintain compute clusters.

#reinforcement learning #robotics #distributed training #GPU

Read article →
Git real: AI agents aren't just for solo developers anymore AI 8.0
The New Stack

Git real: AI agents aren't just for solo developers anymore

Three vendors (Cognition, Microsoft, Augment Code) released team-scale coding agents in early June 2026: Devin Desktop for console management, Rayfin for deployment governance, and Cosmos for agent fleet coordination. Coding agents are shifting from personal tools to shared team infrastructure with PR-like review and policy layers.

#agents #coding agents #team infrastructure #CI/CD

Read article →
Delivering Lifecycle Control for AI Infrastructure at Scale with NVIDIA DGX Spark Enterprise Manageability AI 5.0
NVIDIA Developer Blog

Delivering Lifecycle Control for AI Infrastructure at Scale with NVIDIA DGX Spark Enterprise Manageability

NVIDIA DGX Spark Enterprise adds provisioning, observability, security, and lifecycle management capabilities for large-scale AI infrastructure deployments. The announcement covers operational tooling that treats AI systems with the same rigor as traditional enterprise infrastructure.

#AI infrastructure #MLOps #observability #provisioning

Read article →
Spring is 23 years old. AI just made it a security emergency. Security 8.0
The New Stack

Spring is 23 years old. AI just made it a security emergency.

Broadcom announced the largest set of Spring Framework security updates in its 23-year history, driven by a 1,700% spike in monthly CVE reports from March to April 2026. Foundation models analyzing codebases at scale have accelerated vulnerability discovery, shifting the bottleneck from finding bugs to patching them fast enough.

#security #CVE #LLM #vulnerability detection

Read article →
Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available AI 8.0
AWS News

Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available

Claude Fable 5 is now available on Amazon Bedrock and Claude Platform on AWS, delivering state-of-the-art performance on benchmarks with long-running asynchronous execution, advanced vision capabilities for diagrams and PDFs, and proactive self-verification. The model handles complex software engineering and knowledge work tasks, with vision-based output critique and the ability to develop its own evaluation harnesses.

#LLM #Claude #Bedrock #vision

Read article →
Claude Fable 5 available today in Microsoft Foundry: Powering the next era of autonomous agents AI 7.0
Azure Blog

Claude Fable 5 available today in Microsoft Foundry: Powering the next era of autonomous agents

Anthropic's Claude Fable 5 is now available in Microsoft Foundry, powering agents in GitHub Copilot and Foundry Agent Service. Fable 5 is optimized for long-running multi-stage tasks like code refactoring and research synthesis, and integrates with Microsoft IQ to reason over organizational data across Power BI and applications.

#LLM #agents #Claude #autonomous agents

Read article →
Hands-free first notice of loss: Using Strands Agents and Amazon Bedrock AgentCore Browser Tool for intelligent claims intake AI 6.0
AWS ML Blog

Hands-free first notice of loss: Using Strands Agents and Amazon Bedrock AgentCore Browser Tool for intelligent claims intake

Strands Agents and Amazon Bedrock AgentCore's Browser Tool automate multimodal FNOL evidence processing, extracting and tagging photos, videos, documents, and notes into decision-ready intake without manual portal navigation. The solution reduces adjuster time on repetitive validation tasks and accelerates claim cycle time during volume spikes.

#agents #multimodal #tool use #insurance

Read article →
Build an agentic incident triage assistant with Amazon Quick and New Relic AI 7.0
AWS ML Blog

Build an agentic incident triage assistant with Amazon Quick and New Relic

Amazon Quick agents integrate with New Relic's Model Context Protocol server and Asana to automate incident triage, gathering evidence, assembling root cause analysis briefs, and creating tracked tasks from a single prompt. Internal testing on New Relic's own applications showed reduced evidence-gathering time and faster MTTR.

#agents #tool use #incident response #observability

Read article →
Detecting and containing AI-powered threats with Google Security Operations agents Security 7.0
Google Cloud Blog

Detecting and containing AI-powered threats with Google Security Operations agents

Google Security Operations integrates with AI Threat Defense to autonomously detect and contain AI-accelerated threats using compensating controls and proactive security. The system addresses the remediation gap where mean time to exploit has dropped to minus seven days, exploiting vulnerabilities before patches release.

#security #agents #threat-detection #AI-powered-attacks

Read article →
HCP Packer adds enforced provisioners DevOps 6.0
HashiCorp Blog

HCP Packer adds enforced provisioners

HCP Packer now supports enforced provisioners, allowing platform and security teams to centrally define mandatory provisioning logic that applies across all image builds. This ensures hardening, compliance controls, and security standards remain intact as golden images (AMIs, VMs, containers) flow through the organization.

#image governance #golden images #compliance #infrastructure

Read article →
Storage Insights datasets: Enabling org-wide operational discovery with activity insights Cloud 5.0
Google Cloud Blog

Storage Insights datasets: Enabling org-wide operational discovery with activity insights

Google Cloud Storage Insights now includes activity insights providing visibility into operational details of storage assets with daily metadata and frequent activity logs (typically within four hours). The feature enables data-driven cost optimization and troubleshooting for multi-billion object storage estates.

#Cloud Storage #observability #cost-optimization #metadata

Read article →
Powering the future of robotics in Europe Other 5.0
DeepMind

Powering the future of robotics in Europe

DeepMind announces AI research and infrastructure initiatives supporting robotics development across Europe. The post covers partnerships, research directions, and compute resources for advancing embodied AI and robot learning.

#robotics #embodied AI #research #infrastructure

Read article →
How long before we stop reading the code? AI 8.0
The New Stack

How long before we stop reading the code?

AI code generation has broken traditional code review as a quality gate. Teams with high AI adoption merge 98% more PRs while review times climb 91%, and Microsoft research shows review comments become less useful as diffs grow. The article argues for moving human oversight upstream to intent and specs before code is written.

#AI code generation #code review #LLM agents #quality gates

Read article →
Presentation: Confidently Automating Changes Across a Diverse Fleet DevOps 7.0
InfoQ DevOps

Presentation: Confidently Automating Changes Across a Diverse Fleet

Netflix engineer Casey Bleifer presents an event-driven orchestration platform for automated code changes across a massive, diverse software fleet. The system uses composable steps, automated canary validation, compliance checks, and a custom confidence metric to eliminate manual engineering migrations.

#DevOps #automation #canary-deployment #orchestration

Read article →
Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models AI 9.0
The Hacker News

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

University of Toronto researchers demonstrated a proof-of-concept AI worm using locally hosted open-weight LLMs to autonomously traverse networks, generate attack strategies per target, and self-replicate without human intervention or commercial AI services. The work highlights risks of open-weight model deployment in networked environments.

#LLM #agents #security #open-weight

Read article →
The Hidden Security Risk in Modern Networks: The Work Between Tools Security 5.0
The Hacker News

The Hidden Security Risk in Modern Networks: The Work Between Tools

The article discusses gaps in visibility and automation between security tools in modern networks, where organizations deploy AI and automation yet still experience long outages and slow threat response. It highlights the integration and orchestration challenges that persist despite expanded tooling coverage.

#observability #security-operations #automation #tool-integration

Read article →
The tokenmaxxing party is over, and Revenium is mopping up AI 7.0
The New Stack

The tokenmaxxing party is over, and Revenium is mopping up

After 18 months of unchecked LLM adoption and token consumption racing, enterprises now face massive unforecasted cloud bills. Revenium provides cost observability for AI workloads, tracking token usage and correlating it to business outcomes rather than raw consumption metrics.

#LLM cost #observability #token accounting #cloud billing

Read article →
With great AI power comes the need for zero trust responsibility Security 8.0
HashiCorp Blog

With great AI power comes the need for zero trust responsibility

Claude Mythos, an AI model under Project Glasswing, has found 10,000+ critical vulnerabilities autonomously, but the same reasoning and exploit-construction capabilities pose a dual-use risk. The article outlines a new threat model where AI agents discover credentials and pivot through infrastructure in minutes, faster than human security teams can respond.

#AI security #threat modeling #autonomous agents #zero trust

Read article →
Defend against frontier cyber models: Cloudflare's architecture as customer zero Security 8.0
Cloudflare Blog

Defend against frontier cyber models: Cloudflare's architecture as customer zero

Cloudflare details defensive architecture against frontier AI models like Mythos that accelerate vulnerability discovery and exploit chain reasoning. The post emphasizes that architectural layering and compensating controls matter more than patch speed, with Cloudflare's own stack serving as the reference implementation.

#security #frontier-models #architecture #vulnerability-management

Read article →
Migrating Your GitHub CI to Hugging Face Jobs DevOps 6.0
Hugging Face Blog

Migrating Your GitHub CI to Hugging Face Jobs

Hugging Face Jobs provides a managed CI/CD alternative to GitHub Actions for training and inference workloads. The post walks through migrating existing GitHub CI pipelines to Hugging Face's infrastructure, covering job configuration, resource allocation, and cost considerations.

#CI/CD #MLOps #infrastructure #Hugging Face Jobs

Read article →
Tech Companies Are Acquiring My Favorite Tools Other 5.0
Tower of Kubes

Tech Companies Are Acquiring My Favorite Tools

Major AI and infrastructure companies are consolidating developer tooling: Anthropic acquired Bun (JavaScript runtime), Cloudflare acquired Astro (web framework) and VoidZero, and OpenAI acquired Astral (Python tooling). The article reflects on how venture-backed developer tools are being absorbed into larger platforms rather than remaining independent.

#acquisitions #developer tools #consolidation #JavaScript

Read article →
AWS Weekly Roundup: BYOM for Amazon RDS for SQL Server, AWS IoT Device SDK for Swift, and more (June 8, 2026) Cloud 5.0
AWS News

AWS Weekly Roundup: BYOM for Amazon RDS for SQL Server, AWS IoT Device SDK for Swift, and more (June 8, 2026)

AWS IoT Device SDK for Swift reaches GA with MQTT 5, Device Shadow, Jobs, and fleet provisioning for macOS, iOS, tvOS, and Linux. Amazon RDS for SQL Server now supports Bring Your Own Media (BYOM) via Microsoft License Mobility, integrated with AWS License Manager. Amazon Cognito adds multi-Region replication for user and machine identity data.

#Swift #IoT #RDS #Cognito

Read article →
One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public Security 9.0
The Hacker News

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

CVE-2026-23111, a use-after-free in the Linux kernel's nf_tables packet-filtering code, allows unprivileged local users to escalate to root and escape containers. Patched upstream February 5, 2026, Exodus Intelligence published a full working exploit on June 8, making the vulnerability immediately actionable for attackers.

#CVE #Linux kernel #privilege escalation #container escape

Read article →
5 Software Supply Chain Security Best Practices for Development Teams Security 6.0
Docker Blog

5 Software Supply Chain Security Best Practices for Development Teams

Docker outlines five supply-chain security practices for container-based workloads: trusted minimal base images with pinned dependencies by digest, build provenance verification via cryptographic attestations and SBOMs, vulnerability analysis integration, access controls, and continuous monitoring. The article cites 99% of 2025 npm malware and the first self-replicating npm worm as motivation.

#supply-chain security #container security #SBOM #build provenance

Read article →
How AI is solving the memory crunch it created AI 6.0
The New Stack

How AI is solving the memory crunch it created

Memory has become the primary constraint for AI workloads as HBM and DRAM costs have surged 170% year-over-year. Enterprises are shifting from over-provisioning to data-driven optimization strategies, using AI itself to optimize memory placement and virtualization economics across workloads. HPE and other vendors are applying AI to help teams run existing infrastructure more efficiently without new hardware procurement.

#AI infrastructure #memory optimization #virtualization #workload placement

Read article →
Microsoft's pitch to enterprises: Ditch Azure Repos for GitHub, despite its rocky reliability record DevOps 7.0
The New Stack

Microsoft's pitch to enterprises: Ditch Azure Repos for GitHub, despite its rocky reliability record

Microsoft is promoting Enterprise Live Migrations (ELM), a tool in limited preview that eliminates downtime when migrating large repositories from Azure Repos to GitHub. GitHub now processes 1.4 billion commits monthly (up from 1 billion annually), with AI agents generating 17+ million pull requests monthly, straining infrastructure. Microsoft is consolidating on GitHub despite recent outages affecting Actions CI/CD pipelines.

#GitHub #CI/CD #migration #DevOps

Read article →
Claude Code's biggest upgrade yet ran 5 agents at once — here's what happened AI 8.0
The New Stack

Claude Code's biggest upgrade yet ran 5 agents at once — here's what happened

Anthropic shipped Claude Opus 4.8 with dynamic workflows, allowing Claude to orchestrate hundreds of parallel subagents in a single session. The key architectural change moves orchestration logic into a separate script rather than Claude's context window, enabling massive parallelism without context bloat. Anthropic claims work normally spanning quarters now completes in days.

#agents #multi-agent orchestration #Claude #LLM

Read article →
AWS Releases Next Generation of Amazon OpenSearch Serverless Cloud 7.0
InfoQ DevOps

AWS Releases Next Generation of Amazon OpenSearch Serverless

AWS announced general availability of next-generation OpenSearch Serverless with 20x faster resource provisioning, true scale-to-zero, and up to 60% lower cost than provisioned clusters at peak load. The redesigned architecture improves operational efficiency for search and analytics workloads.

#OpenSearch #serverless #AWS #cost optimization

Read article →
Unlocking AI flexibility in Europe: A guide to cross-region inference for EU data processing and model access AI 7.0
AWS ML Blog

Unlocking AI flexibility in Europe: A guide to cross-region inference for EU data processing and model access

Cross-Region Inference (CRIS) on Amazon Bedrock automatically routes model requests across multiple AWS Regions within geographic boundaries to optimize throughput and latency while meeting GDPR and data residency requirements. Inference profiles define which Regions requests can route to, enabling resilient generative AI applications across Europe.

#Bedrock #inference #GDPR #multi-region

Read article →
It's safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore AI 8.0
AWS ML Blog

It's safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore

Amazon Bedrock AgentCore Runtime provides isolated Linux microVMs with persistent workspaces, real shells, and deterministic execution for hosting coding agents (Claude Code, Codex, Kiro, Gemini CLI, Cursor CLI). It includes identity layers for user-scoped agent actions and a gateway for unified tool access (GitHub, Jira, Slack) via Model Context Protocol.

#agents #Bedrock #coding #sandbox

Read article →
Better decisions at scale: How mathematical optimization delivers where intuition fails AI 6.0
AWS ML Blog

Better decisions at scale: How mathematical optimization delivers where intuition fails

AWS Generative AI Innovation Center applies mathematical optimization, a specialized AI subfield complementary to ML, to solve high-stakes enterprise problems like delivery routing, robot sequencing, and workforce scheduling. The approach combines expertise in optimization, quantum computing, and high-performance computing to find solutions with mathematical certainty where intuition fails.

#optimization #AI #quantum #decision-making

Read article →
End-to-end encrypted ML inference with Amazon SageMaker AI and FHE AI 8.0
AWS ML Blog

End-to-end encrypted ML inference with Amazon SageMaker AI and FHE

Amazon SageMaker AI now supports fully homomorphic encryption (FHE) for end-to-end encrypted ML inference, allowing models to process encrypted queries and produce encrypted predictions without decryption. Queries, responses, and intermediate values remain encrypted and unreadable to SageMaker itself, enabling privacy-preserving inference for healthcare, energy, and other regulated sectors.

#SageMaker #FHE #encryption #privacy

Read article →
Evaluate your Amazon Nova Sonic voice agent at scale, no microphone required AI 7.0
AWS ML Blog

Evaluate your Amazon Nova Sonic voice agent at scale, no microphone required

Amazon Nova Sonic voice agent evaluation framework enables automated testing at scale without manual microphone interaction. Addresses voice agent testing gaps: non-deterministic streaming audio, multi-turn context, real-time tool use. Provides regression suite capability and edge-case coverage across hundreds of conversation scenarios.

#voice agents #evals #Nova #testing

Read article →
For years, Apache Cassandra handed this work to your team — 6.0 takes it back Engineering 7.0
The New Stack

For years, Apache Cassandra handed this work to your team — 6.0 takes it back

Apache Cassandra 6.0 (in alpha) shifts focus from new capabilities to automating work previously delegated to application code. The release tackles multi-partition coordination, consistency guarantees, and partial failure handling that developers have historically managed themselves. Building on 5.0's vector indexing and storage-attached indexes, 6.0 positions Cassandra as a more complete platform for AI workloads and complex distributed workflows.

#Cassandra #NoSQL #distributed systems #coordination

Read article →
Paving the way for agents in biology AI 7.0
Anthropic Research

Paving the way for agents in biology

Anthropic research explores the application of AI agents to biological research and discovery. The work addresses how agents can be grounded in domain knowledge and structured data for scientific workflows.

#agents #biology #research #domain grounding

Read article →
AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload Security 5.0
The Hacker News

AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload

The article examines how AI-powered phishing generation has dramatically increased alert volume for security operations centers, with attackers creating convincing emails and fake login pages in minutes. Tier 1 analysts face queue overload, making it easier for credential theft and malware delivery to slip through.

#phishing #SOC operations #alert fatigue #AI-generated attacks

Read article →
Measuring LLMs' impact on N-day exploits AI 8.0
Anthropic Research

Measuring LLMs' impact on N-day exploits

Anthropic evaluates how LLMs accelerate exploitation of known vulnerabilities (N-day exploits) by measuring the time and skill reduction required to weaponize public disclosures. The research quantifies the risk surface created by LLM-assisted exploit development and informs responsible disclosure timelines.

#LLM #security #evals #vulnerability

Read article →
"A dangerous combination": The 2 factors that can "corrupt" AI agent workflows AI 7.0
The New Stack

"A dangerous combination": The 2 factors that can "corrupt" AI agent workflows

AI agents operating in production require rethinking identity and access management (IAM) because they perform dynamic, continuous, and unpredictable actions across infrastructure and APIs unlike traditional human users. HashiCorp (now IBM) and others are adapting IAM tooling to handle agent-driven access patterns, tool invocation, and cross-service resource access with fine-grained authorization. The article highlights how legacy IAM models fail to account for agent autonomy and speed.

#agents #IAM #security #access control

Read article →
Turning Cloudflare's threat indicators into real-time WAF rules Security 7.0
Cloudflare Blog

Turning Cloudflare's threat indicators into real-time WAF rules

Cloudflare integrated its Threat Events intelligence directly into WAF rule logic, allowing security teams to write proactive rules that block traffic from known threat actors, target industries, and attack types without manual configuration. Rules now populate threat context fields at request ingestion time.

#WAF #threat intelligence #security automation #DDoS

Read article →
With Foundry, Microsoft bets the enterprise AI battle is about reliability, not capability AI 8.0
The New Stack

With Foundry, Microsoft bets the enterprise AI battle is about reliability, not capability

Microsoft shipped major updates to Foundry at Build 2026 targeting production reliability over raw capability: hosted agent infrastructure via Foundry Agent Service, evaluation tooling, governance specs, memory management, knowledge retrieval, and expanded model options. The platform now spans runtime, observability, and governance layers needed for enterprise agents operating under real load, compliance, and data constraints.

#agents #Microsoft Foundry #LLM #governance

Read article →
The Hardest Fork Security 6.0
The Hacker News

The Hardest Fork

A security researcher discusses Mythos, a novel vulnerability chain combining dozens of existing SAST-detectable issues into a sophisticated attack. The finding represents creative exploitation rather than zero-days, raising questions about supply-chain risk and the limits of static analysis tooling.

#vulnerability #supply-chain #SAST #security research

Read article →
Microsoft unlocks Visual Studio for developers left behind by its own AI AI 7.0
The New Stack

Microsoft unlocks Visual Studio for developers left behind by its own AI

Microsoft announced updates to Visual Studio at Build 2026 enabling agents to participate in development workflows (debugging, profiling, testing, merge conflict resolution, .NET modernization) and introducing bring-your-own-key (BYOK) support for custom or locally-hosted AI models. BYOK removes the lock-in to Microsoft-sanctioned endpoints, allowing teams with compliance or infrastructure constraints to use alternative models.

#Visual Studio #AI agents #IDE #BYOK

Read article →
Breaking free of a single datacenter: Practical geo-distributed AI operations with the k0smos platforms AI 7.0
CNCF Blog

Breaking free of a single datacenter: Practical geo-distributed AI operations with the k0smos platforms

The article examines how Kubernetes has become the de facto orchestration layer for AI workloads, with k0smos platforms enabling geo-distributed training and inference across fragmented on-prem, cloud, and edge resources. It addresses the infrastructure challenges of managing GPU-heavy workloads across multiple datacenters, cluster lifecycles, cross-site connectivity, and heterogeneous hardware like NVLink interconnects.

#Kubernetes #AI infrastructure #distributed systems #GPU orchestration

Read article →
Benchmarking KubeVirt performance with virtbench DevOps 7.0
CNCF Blog

Benchmarking KubeVirt performance with virtbench

The CNCF released virtbench, an open-source CLI benchmarking toolkit for KubeVirt clusters that measures VM-specific operational metrics like Time-to-Ready, burst capacity under concurrent VM creation, and live migration stun time. Standard Kubernetes observability tools miss VM-class workload degradation because pod readiness does not equal guest OS network accessibility.

#KubeVirt #benchmarking #observability #VM workloads

Read article →
Microsoft Discovery Reaches GA on Azure, Powering the Agentic AI Behind Majorana 2 Quantum Chip AI 7.0
InfoQ DevOps

Microsoft Discovery Reaches GA on Azure, Powering the Agentic AI Behind Majorana 2 Quantum Chip

Microsoft announced general availability of Discovery, an Azure platform for deploying autonomous AI agent teams in scientific R&D. The platform powered development of Majorana 2, a topological quantum chip achieving 1,000x reliability improvement with 20-second qubit lifetimes. Microsoft now targets a scalable quantum computer by 2029, halving its original timeline.

#agents #AI infrastructure #Azure #quantum

Read article →
Microsoft Launches Logic Apps Automation at Build 2026 AI 7.0
InfoQ DevOps

Microsoft Launches Logic Apps Automation at Build 2026

Microsoft announced Logic Apps Automation, a new managed SaaS SKU at auto.azure.com combining workflows, AI agents, knowledge services, and model access. Agents integrate via agent-loop orchestration and Foundry agents with managed sandbox execution. Knowledge as a Service provides a fully managed RAG pipeline.

#agents #RAG #Azure #workflow automation

Read article →
AI teams now deploy 1,000 times a month. Your pipeline wasn't built for that. DevOps 7.0
The New Stack

AI teams now deploy 1,000 times a month. Your pipeline wasn't built for that.

Project deployment rates have accelerated from 357 per month in 2021 to 988 per month in 2025, with high-performing teams now exceeding 1,000 deployments monthly. AI coding tools adoption jumped from 76% to 90% year-over-year, amplifying existing CI/CD practices and creating a 175x gap between leaders and teams still deploying weekly. The article argues that infrastructure and observability tooling must scale to handle this velocity.

#CI/CD #deployment velocity #AI coding tools #DevOps scaling

Read article →
Microsoft just made the agent runtime free — and kept everything around it AI 8.0
The New Stack

Microsoft just made the agent runtime free — and kept everything around it

Microsoft released Scout, an always-on work agent running on OpenClaw (an open-source agent runtime), and contributed enterprise policy controls upstream. The move mirrors Android's strategy: freeing the base runtime while monetizing layers above it (identity, device management, integrations). Scout connects to Microsoft 365, runs continuously in the background, and reaches external apps via Model Context Protocol.

#agents #agent runtime #OpenClaw #Model Context Protocol

Read article →
"Whoever builds the most joyous product wins": The agent war begins AI 8.0
The New Stack

"Whoever builds the most joyous product wins": The agent war begins

Snowflake announces agentic enterprise capabilities at Summit 26, positioning itself as a control plane for AI-driven data workflows. The company is moving beyond code generation to autonomous orchestration of data ingestion, transformation, and consumption with minimal human oversight.

#agents #agentic workflows #data orchestration #Snowflake

Read article →
Netlify CTO Dana Lawson: Writing code is no longer the job AI 6.0
The New Stack

Netlify CTO Dana Lawson: Writing code is no longer the job

Netlify CTO Dana Lawson argues that agentic AI has created a new abstraction layer where conversational intent replaces traditional code, enabling non-programmers to build applications. The role of software engineers is shifting from code-writing to designing agent experience (AX) and understanding what autonomous systems should and should not do. This represents a fundamental redefinition of engineering work in an AI-native world.

#agents #AI #developer experience #career

Read article →
New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration Security 6.0
The Hacker News

New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

OpenAI has rolled out Lockdown Mode for ChatGPT to mitigate data exfiltration risks from prompt injection attacks. The feature restricts tool use and is available across Free, Go, Plus, and Pro tiers for users handling sensitive data. This represents a security-first approach to limiting agent capabilities when data protection is critical.

#security #prompt injection #data exfiltration #LLM safety

Read article →
From Jupyter Notebook to production: How to ship AI systems that actually work AI 7.0
The New Stack

From Jupyter Notebook to production: How to ship AI systems that actually work

The article outlines the critical differences between notebook experimentation and production ML systems: notebooks operate in controlled, stateful environments with implicit assumptions, while production requires distributed architectures, continuous data streams, observable components, and versioning discipline. Shipping reliable AI demands 92%+ accuracy under real-world constraints, containerized serving, drift monitoring, ML-adapted CI/CD, and rollback strategies.

#MLOps #production #model serving #monitoring

Read article →
OpenClaw used Gavriel Cohen's code and exposed the AI Agent accountability problem AI 7.0
The New Stack

OpenClaw used Gavriel Cohen's code and exposed the AI Agent accountability problem

Developer Gavriel Cohen discovered his NanoClaw agent code used without attribution in OpenClaw, highlighting a gap in accountability and governance for autonomous AI agents. The incident underscores a broader problem: AI agents have been given autonomy and code-generation capabilities (Claude now merges 80%+ of Anthropic's code) before accountability mechanisms were built. This raises questions about licensing, attribution, and control in an agent-driven development world.

#agents #accountability #licensing #governance

Read article →
Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI Security 7.0
The Hacker News

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

A researcher reverse-engineered Bright Data's iOS SDK embedded in consumer apps, revealing how the company turns always-on devices like smart TVs into exit nodes for web-scraping traffic. Bright Data operates the largest residential proxy network and markets heavily to the AI industry, using consumer devices as unwitting infrastructure for data collection.

#supply chain #data collection #residential proxies #privacy

Read article →
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs Security 8.0
The Hacker News

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

An autonomous AI agent discovered 21 previously unknown vulnerabilities in FFmpeg, the ubiquitous media library used across video-handling software. In the same week, Google released Chrome 149 with 429 security patches, the largest single release. The FFmpeg findings demonstrate AI agents' capability in vulnerability discovery at scale.

#AI #vulnerability discovery #zero-days #FFmpeg

Read article →
Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack Security 8.0
The Hacker News

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

The Miasma self-replicating worm compromised 73 Microsoft GitHub repositories across Azure, Azure-Samples, Microsoft, and MicrosoftDocs organizations. GitHub disabled access to affected repositories as the supply chain attack campaign continues to spread. This represents a significant breach of Microsoft's own infrastructure and a major supply chain risk.

#supply chain #worm #GitHub #Microsoft

Read article →
Making Claude a chemist AI 5.0
Anthropic Research

Making Claude a chemist

Anthropic research on fine-tuning Claude for chemistry tasks, likely covering domain-specific instruction tuning, tool use for molecular simulation or property prediction, and evaluation against chemistry benchmarks. Without the full excerpt, the exact scope of capabilities and methods remains unclear.

#fine-tuning #domain adaptation #chemistry #tool use

Read article →
Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs Cloud 7.0
AWS News

Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs

AWS launched a redesigned Bedrock console with a project-based workflow for evaluating and deploying Claude, GPT, and open-weight models via OpenAI-compatible and Anthropic APIs. The new interface includes side-by-side model comparison, live documentation with auto-populated SDK snippets, and usage insights tied to projects, streamlining the path from experimentation to production on Bedrock Mantle's inference engine.

#LLM #inference #Claude #GPT

Read article →
Replit shows how vibe coding is getting its own financial stack — and a path to profit AI 7.0
The New Stack

Replit shows how vibe coding is getting its own financial stack — and a path to profit

Replit integrates with Shopify to enable AI agents to generate and deploy custom e-commerce storefronts directly from natural language prompts. Users describe their store concept to the Replit agent, which provisions a Shopify storefront with products, branding, and layout without requiring prior e-commerce experience.

#agents #code-generation #e-commerce #Shopify

Read article →
What is AI Governance? Frameworks, Principles, and Best Practices AI 6.0
Docker Blog

What is AI Governance? Frameworks, Principles, and Best Practices

Docker outlines AI governance as the set of frameworks, policies, and controls spanning ethics, compliance, risk management, and technical safeguards across the full AI lifecycle. With 60% of organizations running AI agents in production but 40% citing security and compliance as barriers to scaling, governance addresses runtime security, access control, and agent-specific oversight to align systems with business goals and regulations.

#AI governance #agents #compliance #risk management

Read article →
How OpenAI Built a Secure Windows Sandbox for Codex Agents AI 8.0
InfoQ DevOps

How OpenAI Built a Secure Windows Sandbox for Codex Agents

OpenAI detailed the Windows sandbox architecture for Codex agents, using OS security primitives including SIDs, ACLs, restricted tokens, and dedicated sandbox accounts to safely execute autonomous coding tasks. The design balances strong isolation with practical developer workflows on local machines.

#agents #sandbox #security #Windows

Read article →
Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms Security 8.0
Google Cloud Blog

Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms

Mandiant tracked UNC3753 (Luna Moth), a financially motivated threat cluster conducting a data theft extortion campaign against US law firms, financial services, and professional organizations from January through May 2026. The group uses voice phishing and social engineering to trick targets into installing RMM utilities, then exfiltrates sensitive legal agreements, PII, and financial records. In some cases, threat actors have physically entered corporate offices posing as IT technicians to extract data via USB.

#threat intelligence #social engineering #data exfiltration #extortion

Read article →
Your AI bill is out of control. Cloudflare can fix it now. AI 7.0
Cloudflare Blog

Your AI bill is out of control. Cloudflare can fix it now.

Cloudflare announced spend controls in AI Gateway to address runaway LLM costs, with a closed beta for identity-driven budgets and routing via Cloudflare Access. The feature addresses the common problem of shared API keys masking token consumption across teams, enabling per-user budget enforcement and model routing based on identity and cost constraints.

#LLM #cost management #API gateway #token budgeting

Read article →
How Netflix Maps Thousands of Microservices in Real-Time DevOps 7.0
InfoQ DevOps

How Netflix Maps Thousands of Microservices in Real-Time

Netflix shared details on Service Topology, an internal system that builds and maintains a live dependency graph for thousands of microservices by merging three data sources into a single queryable graph. The system updates near-real-time as traffic patterns shift, helping engineers visualize service connections and resolve issues faster.

#microservices #observability #dependency mapping #real-time

Read article →
FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins Security 6.0
The Hacker News

FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

Ahead of the June 11 FIFA World Cup 2026 kickoff, the FBI and security researchers warn of active fraud campaigns including thousands of lookalike FIFA domains, banking malware in pirate streaming apps, and credential harvesting via cloned login pages. The campaigns target World Cup fans with phishing and malware distribution.

#phishing #malware #credential theft #fraud

Read article →
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network Security 7.0
The Hacker News

PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network

The threat actor PCPJack has compromised 230 cloud servers across AWS, Google Cloud, and Azure to establish a covert SMTP relay network. Compromised business servers across the U.S., Europe, and Asia were converted into SMTP proxies, verified for mail relay capability, and synced to downstream consumers every five minutes.

#cloud compromise #AWS #Azure #GCP

Read article →
Cursor cuts prices and adds enterprise spend controls amid 'tokenomics' reckoning AI 7.0
The New Stack

Cursor cuts prices and adds enterprise spend controls amid 'tokenomics' reckoning

Cursor restructured its Teams plan pricing, cutting annual seat costs by 20% to $32/user/month while introducing a Premium tier at $120/month with 5x usage at 3x cost, responding to industry-wide shift from flat-rate to token-based billing. The move mirrors GitHub Copilot's transition to token-based consumption pricing and reflects broader enterprise demand for spend visibility and control, evidenced by the Linux Foundation's new Tokenomics Foundation.

#pricing #token-billing #agents #cost-control

Read article →
Google Gemma 4 12B nearly matches 26B benchmarks — and runs on your laptop AI 8.0
The New Stack

Google Gemma 4 12B nearly matches 26B benchmarks — and runs on your laptop

Google released Gemma 4 12B, a multi-modal model that performs nearly as well as Gemma 4 26B while requiring less than half the memory footprint, running on standard laptops with 16GB VRAM or unified memory. The model enables developers to run advanced multi-step reasoning and agentic workflows locally and offline, with benchmarks showing 12B matching or exceeding 26B performance on tasks like DocVQA.

#LLM #local-inference #multi-modal #agents

Read article →
Snowflake thinks it knows what's really slowing developers down AI 7.0
The New Stack

Snowflake thinks it knows what's really slowing developers down

Snowflake rebranded Cortex Code as Snowflake CoCo, an AI coding agent designed to reduce context switching by integrating with Snowflake's governed data platform. New capabilities include a native desktop app, mobile app, Slack integration, autonomous task execution through automations and cloud agents, plus Snowflake Datastream, a fully managed Kafka-compatible streaming service for real-time data ingestion into Snowflake.

#agents #coding-agents #data-platform #streaming

Read article →
Autonomous agents have met their biggest challenge yet: The database. AI 8.0
The New Stack

Autonomous agents have met their biggest challenge yet: The database.

Andy Pavlo from Carnegie Mellon University argues that databases represent the hardest challenge for autonomous agents due to unforgiving correctness and performance requirements. Agent hallucinations in database queries or configuration changes can cause catastrophic system failures, unlike UI hallucinations; Pavlo identifies tuning agents and coding agents as the two primary ways AI impacts databases, with database optimization remaining the most difficult automation problem.

#agents #databases #correctness #optimization

Read article →
Why agentic AI makes the ops platform the most important layer in the enterprise DevOps 5.0
The New Stack

Why agentic AI makes the ops platform the most important layer in the enterprise

HPE argues that operations is the biggest obstacle to enterprise AI adoption, not models or talent, because hybrid complexity spans on-premises, public clouds, edge, and air-gapped sites. The company positions its GreenLake hybrid cloud management platform as addressing the Day 2 operational challenge where enterprises spend most time after infrastructure deployment, now infused with agentic AI to manage multi-vendor, multi-layer complexity.

#agents #hybrid-cloud #operations #infrastructure

Read article →
Identity and Access Management Whitepaper DevOps 6.0
CNCF Blog

Identity and Access Management Whitepaper

CNCF published a whitepaper on IAM for cloud-native architectures, covering authentication and authorization for short-lived workloads, service-to-service communication, and zero-trust models. It includes guidance on PEP/PDP architectures, SPIFFE-based workload identity, and patterns for securing stateful and stateless workloads.

#IAM #zero-trust #SPIFFE #workload identity

Read article →
Why the need for humans won't disappear in the age of autonomous databases Engineering 5.0
The New Stack

Why the need for humans won't disappear in the age of autonomous databases

Percona co-founder Vadim Tkachenko argues that while database automation is transforming operations, the DBA role will not disappear but evolve from operational mechanics to data architects. Speaking at Percona Live 2026, Tkachenko contends that rapid data growth and system complexity ensure human oversight remains essential despite autonomous database capabilities.

#databases #automation #DBA #operations

Read article →
Hardened Images Explained: Fewer CVEs, Smaller Attack Surface Security 6.0
Docker Blog

Hardened Images Explained: Fewer CVEs, Smaller Attack Surface

Docker explains hardened base images that strip unnecessary packages (shells, compilers, debug utilities) to reduce attack surface by up to 95%. These purpose-built images include verifiable supply-chain metadata like SBOMs and build provenance, addressing the reality that most container vulnerabilities come from inherited base-image packages, not application code.

#container security #base images #SBOM #supply-chain

Read article →
NVIDIA Nemotron 3 Ultra now available on Amazon SageMaker JumpStart AI 8.0
AWS ML Blog

NVIDIA Nemotron 3 Ultra now available on Amazon SageMaker JumpStart

NVIDIA Nemotron 3 Ultra, a 550B-parameter hybrid Transformer-Mamba MoE model optimized for long-running autonomous agents, is now available on SageMaker JumpStart with one-click deployment. The model delivers 5x faster inference and up to 30% lower cost for agentic workloads, with support for 1M token context length and NVFP4 precision optimization.

#LLM #agents #MoE #inference optimization

Read article →
How to secure Kubernetes in the age of AI workloads AI 7.0
The New Stack

How to secure Kubernetes in the age of AI workloads

AI agents running on Kubernetes introduce new security challenges beyond traditional microservices: dynamic, ephemeral processes with unpredictable traffic patterns, untrusted code generation, tool discovery, and GPU resource contention. The article outlines a four-control-plane architecture starting with zero-trust networking to handle agent-specific threats like sub-agent spawning and API chaining that standard NetworkPolicy cannot address.

#Kubernetes #AI agents #zero-trust #security

Read article →
Asana says its new AI 'chief of staff' turns your Slack chaos into trackable work Other 5.0
The New Stack

Asana says its new AI 'chief of staff' turns your Slack chaos into trackable work

Asana launched Dash, a personal AI assistant that captures follow-ups from meetings, Slack threads, and email, converting them into trackable work items in Asana's Work Graph. The release positions Asana as an operating system for human-agent teams, addressing the gap between AI capabilities and actual business process integration under new CEO Dan Rogers.

#AI agents #workflow automation #human-AI collaboration #work management

Read article →
What's new for Managed Service for Apache Spark clusters Cloud 6.0
Google Cloud Blog

What's new for Managed Service for Apache Spark clusters

Google Cloud announced enhancements to its Managed Service for Apache Spark (formerly Dataproc) with two deployment modes: serverless for ephemeral jobs and managed clusters for persistent, stateful workloads. New features include native execution engine tuning, smarter scaling policies, and Gemini-powered extensions for AI-assisted development and operations.

#Spark #Dataproc #serverless #Gemini

Read article →
What's new with Google Data Cloud Cloud 5.0
Google Cloud Blog

What's new with Google Data Cloud

Google Cloud announced workshops and features across its data platform: Bigtable, Firestore, and Memorystore for AI agents; Managed Service for Apache Airflow 3.1 GA with AI-powered troubleshooting and MCP Server support; and new free trials. The focus is bridging AI prototypes to production via data infrastructure.

#Bigtable #Firestore #Airflow #MCP

Read article →
Mate Security's Asaf Wiener made every backend engineer a model router. He's right to. AI 7.0
The New Stack

Mate Security's Asaf Wiener made every backend engineer a model router. He's right to.

Mate Security CEO Asaf Wiener faced a runway crisis driven by AI inference costs and implemented model routing to optimize spending across providers like Amazon, Google, and Anthropic as well as on-premises hardware. The article profiles how an AI-native SOC startup manages the dual cost structure of inference as a core business expense.

#LLM inference #cost optimization #model routing #MLOps

Read article →
VoidZero is joining Cloudflare Engineering 6.0
Cloudflare Blog

VoidZero is joining Cloudflare

Cloudflare acquired VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+. Cloudflare committed that all projects remain open-source, vendor-agnostic, and community-driven. The acquisition aims to invest in foundational JavaScript toolchain infrastructure while maintaining portability and developer choice.

#acquisition #open-source #Vite #JavaScript

Read article →
EVA-Bench Data 2.0: 3 Domains, 121 Tools, 213 Scenarios AI 8.0
Hugging Face Blog

EVA-Bench Data 2.0: 3 Domains, 121 Tools, 213 Scenarios

ServiceNow releases EVA-Bench 2.0, an expanded evaluation benchmark covering 3 domains with 121 tools and 213 scenarios for assessing agent capabilities. The dataset enables systematic evaluation of tool-use agents across diverse real-world workflows.

#evals #agents #tool-use #benchmark

Read article →
Securing CI/CD for an open source project: Controlling who runs what Security 7.0
CNCF Blog

Securing CI/CD for an open source project: Controlling who runs what

Cilium project documented CI/CD hardening practices for GitHub Actions, focusing on access control to prevent supply-chain compromise. The article covers who can trigger builds and what code CI is allowed to execute, with patterns applicable to any open-source project given the high blast radius of kernel-level networking infrastructure.

#CI/CD #supply-chain security #GitHub Actions #access control

Read article →
Presentation: Architecting a Centralized Platform for Data Deletion at Netflix DevOps 7.0
InfoQ DevOps

Presentation: Architecting a Centralized Platform for Data Deletion at Netflix

Netflix engineers Vidhya Arvind and Shawn Liu presented architectural patterns for safe data deletion across distributed datastores, balancing durability, availability, and correctness. The talk covers orchestrating multi-system deletion propagation without impacting live traffic, managing tombstone accumulation, building continuous audit loops, and establishing trust in a centralized deletion platform.

#data deletion #distributed systems #GDPR #compliance

Read article →
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS Security 7.0
The Hacker News

Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS

Attackers are running a large-scale operation impersonating open-source and freeware projects with well-designed fake sites that rank high in Google search results, funneling users through a Traffic Distribution System (TDS) to deliver malware families including Remus Stealer, AnimateClipper, and SessionGate framework. The campaign exploits SEO and user trust in legitimate project portals to compromise developers and end users.

#supply-chain #malware #SEO abuse #TDS

Read article →
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months Security 8.0
The Hacker News

Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months

Unknown attackers maintained access to a senior executive's Outlook mailbox at a major global stock exchange for at least five months, exfiltrating inbox contents in small batches and routing traffic through Dropbox and OneDrive to blend with normal cloud activity. Symantec and Carbon Black's Threat Hunter Team identified the campaign as espionage-focused rather than financially motivated.

#breach #espionage #cloud exfiltration #persistence

Read article →
Dreaming: Better memory for a more helpful ChatGPT AI 5.0
OpenAI Blog

Dreaming: Better memory for a more helpful ChatGPT

ChatGPT introduces a new memory system called Dreaming that persists user preferences and context across conversations. The feature improves relevance and personalization by maintaining conversation state without requiring explicit re-prompting.

#LLM #memory #context #personalization

Read article →
AWS Replaces Fat-Tree Data Center Networks with Random Graph Theory, Cutting Routers by 69% Cloud 8.0
InfoQ DevOps

AWS Replaces Fat-Tree Data Center Networks with Random Graph Theory, Cutting Routers by 69%

AWS has deployed Resilient Network Graphs, a flat network architecture based on quasi-random graph theory, as the default for new data center builds. The design replaces fat-tree hierarchies with direct ToR-to-ToR mesh connections using passive optical ShuffleBoxes, achieving 69% router reduction, 33% throughput gain, and 40% power consumption reduction.

#network architecture #data center #infrastructure #topology

Read article →
Rethinking infrastructure access in the age of agentic AI AI 8.0
HashiCorp Blog

Rethinking infrastructure access in the age of agentic AI

HashiCorp examines identity and access management challenges posed by agentic AI systems. Traditional IAM models assume human users with predictable access patterns, but AI agents operate dynamically across infrastructure with unpredictable tool invocations, requiring new guardrails, credential management, and audit visibility.

#agents #IAM #security #infrastructure-access

Read article →
Scaling AI Agents: A Step-by-Step Guide to Deploying ADK on GKE Autopilot AI 7.0
Google Cloud Blog

Scaling AI Agents: A Step-by-Step Guide to Deploying ADK on GKE Autopilot

Google published a tutorial for deploying AI agents built with the Agent Development Kit (ADK) to GKE Autopilot, using Gemini on Vertex AI as the core model. The guide covers containerizing ADK Python applications, securing them with Workload Identity for IAM mapping, and exposing agents via the Kubernetes Gateway API for load balancing.

#agents #ADK #GKE #Gemini

Read article →
DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets Other 5.0
The Hacker News

DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets

The U.S. Department of Justice announced results of a coordinated 'Disruption Week' operation beginning May 18, 2026, targeting cyber-enabled and cryptocurrency fraud networks operating from Southeast Asia. The action resulted in takedowns of millions of social media, email, and internet access accounts used by transnational fraud rings targeting Americans, with $3.8 million in assets frozen.

#fraud #cryptocurrency #law enforcement #takedown

Read article →
Inspektor Gadget: Results from the first security audit DevOps 7.0
CNCF Blog

Inspektor Gadget: Results from the first security audit

Inspektor Gadget, an eBPF-based Kubernetes observability toolkit, completed its first independent security audit coordinated by OSTIF and conducted by Shielder. All reported vulnerabilities have patches available. The toolkit uses eBPF gadgets packaged as OCI images to inspect cluster and Linux host data without rebuilding containers or injecting sidecars.

#eBPF #Kubernetes #observability #security audit

Read article →
How to build self-driving AI operations on Amazon Bedrock at scale AI 6.0
AWS ML Blog

How to build self-driving AI operations on Amazon Bedrock at scale

AWS describes an operational monitoring framework for Bedrock workloads that tracks usage patterns, automates support case triage, prevents duplicate cases, and alerts SRE teams to quota constraints before they hit limits. The approach reduces manual overhead for teams scaling generative AI across multiple foundation models.

#Bedrock #MLOps #observability #agents

Read article →
How to get operational data off the factory floor without creating an IT breach Engineering 5.0
The New Stack

How to get operational data off the factory floor without creating an IT breach

Integrating OT (operational technology) data into IT systems for AI requires secure, auditable data pipelines that replace legacy FTP/SFTP solutions. The article discusses managed solutions offering encryption, continuous transfer monitoring, and full audit trails for protocols like Modbus and OPC UA, addressing the challenge of extracting data from systems designed for uptime rather than connectivity.

#OT/IT integration #data pipeline #encryption #edge computing

Read article →
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android Security 8.0
The Hacker News

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

A vulnerability in Google Gemini's voice assistant on Android allowed poisoned notifications from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger to hijack the assistant without requiring a malicious app. The attack could open windows, forge messages, initiate calls, or corrupt the assistant's long-term memory.

#CVE #Android #voice assistant #notification hijacking

Read article →
Why CPUs still matter in the age of AI agents AI 7.0
The New Stack

Why CPUs still matter in the age of AI agents

As AI shifts from chatbots to autonomous agents, CPU workloads become critical. Agents orchestrate tool calls, manage memory, and execute code - tasks CPUs excel at - while LLMs run on accelerators. Google and Arm leaders explain how CPUs act as the orchestration layer, making them increasingly important for agent infrastructure despite GPU focus.

#agents #CPU #orchestration #inference

Read article →
What is Software Supply Chain Security? Security 5.0
Docker Blog

What is Software Supply Chain Security?

Docker defines software supply chain security as protecting every component, process, and system from source code through dependencies, build systems, registries, and production infrastructure. Sonatype reported 454,000 new malicious packages in 2025 alone, with cumulative totals exceeding 1.2 million since 2019, expanding the attack surface for container-based delivery pipelines.

#supply-chain security #malicious packages #container security #build pipeline

Read article →
Bring Databricks into Kiro IDE with the AI Dev Kit Power AI 6.0
Databricks Blog

Bring Databricks into Kiro IDE with the AI Dev Kit Power

Databricks AI Dev Kit integrates with Kiro IDE to provide AI-assisted development with context awareness for database schemas and table layouts. The integration addresses the problem of AI assistants losing context when working with data infrastructure.

#AI-assisted development #IDE integration #Databricks #code generation

Read article →
Lights Out, Systems On: Validating Instant Power Loss Readiness DevOps 6.0
Meta Engineering

Lights Out, Systems On: Validating Instant Power Loss Readiness

Meta introduces Instantaneous PowerLoss Storm, a testing paradigm within its Disaster Readiness program for validating data center resilience to zero-notice power loss. The approach uses defense-in-depth strategies to tolerate instant failures across Meta's expanding infrastructure, addressing risks from hurricanes, wildfires, and power supply disruptions.

#disaster recovery #resilience #data center #testing

Read article →
Enforcing the First AS in BGP AS_PATHs Security 7.0
Cloudflare Blog

Enforcing the First AS in BGP AS_PATHs

Cloudflare documents recent BGP route hijacks where attackers forge AS_PATHs using unused ASNs to misdirect traffic and conceal identity. The article stress-tests major networks and advocates for simple verification that BGP peers include their own AS as the 'First AS' in advertised routes to prevent prefix hijacking.

#BGP #route hijacking #network security #ASN

Read article →
What's new in serverless Managed Service for Apache Spark Cloud 7.0
Google Cloud Blog

What's new in serverless Managed Service for Apache Spark

Google Cloud's Managed Service for Apache Spark runtime 3.0 now offers zero-setup onboarding by automating IAM roles, VPC networking, and firewall configuration. The service supports feature engineering, GPU-accelerated model training, semantic search, RAG, and AI agent building with simplified deployment.

#Spark #serverless #data-engineering #AI-infrastructure

Read article →
Improve your agent's tool-calling accuracy with SFT and DPO on Amazon SageMaker AI AI 8.0
AWS ML Blog

Improve your agent's tool-calling accuracy with SFT and DPO on Amazon SageMaker AI

AWS demonstrates using Supervised Fine-Tuning (SFT) and Direct Preference Optimization (DPO) together on SageMaker to improve tool-calling accuracy in small language models. The post includes evaluation methodology and model comparison workflows, helping teams move agentic applications from pilot to production with reliable tool selection.

#agents #tool-use #fine-tuning #SFT

Read article →
Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore Security 6.0
The Hacker News

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

HD Moore (Metasploit creator) argues that patching zero-days in time is no longer viable, especially as AI accelerates exploit development. Instead, teams should focus on network segmentation and limiting what a compromised system can reach, treating breach assumption as the foundation of defense strategy.

#zero-day #network segmentation #breach assumption #defense strategy

Read article →
Inside Google's System for Coordinated A/B Testing Across Its Global Service Fleet DevOps 7.0
InfoQ DevOps

Inside Google's System for Coordinated A/B Testing Across Its Global Service Fleet

Google describes a fleet-wide A/B experimentation system that standardizes experiment assignment, exposure logging, and configuration propagation across distributed services. The system reduces experiment conflicts and improves reliability of data-driven decisions at scale across multiple products.

#A/B testing #experimentation #distributed systems #observability

Read article →
Introducing new capabilities to GPT-Rosalind AI 5.0
OpenAI Blog

Introducing new capabilities to GPT-Rosalind

OpenAI announces GPT-Rosalind, a specialized model for life sciences research with enhanced capabilities in biological reasoning, medicinal chemistry, genomics analysis, and experimental workflow automation.

#foundation-models #life-sciences #genomics #chemistry

Read article →
Direct Preference Optimization Beyond Chatbots AI 7.0
Hugging Face Blog

Direct Preference Optimization Beyond Chatbots

Dharma AI explores Direct Preference Optimization (DPO) applications beyond conversational models, extending the technique to specialized domains and task-specific fine-tuning. The work demonstrates how preference-based alignment scales to non-chat use cases.

#DPO #fine-tuning #alignment #preference optimization

Read article →
How Wasmer used Codex to build a Node.js runtime for the edge AI 6.0
OpenAI Blog

How Wasmer used Codex to build a Node.js runtime for the edge

Wasmer leveraged OpenAI Codex (now GPT-5.5) to accelerate development of a Node.js runtime for edge environments, achieving 10x-20x speedup and shipping in weeks instead of months. The case study demonstrates code generation's impact on infrastructure tooling development.

#code-generation #Codex #edge-computing #Node.js

Read article →
Article: Two Misconfigurations That Caused Spark OOM Failures on Kubernetes DevOps 8.0
InfoQ DevOps

Article: Two Misconfigurations That Caused Spark OOM Failures on Kubernetes

A post-mortem on Spark pipeline failures on Azure Kubernetes Service reveals two settings that interacted destructively: spark.kubernetes.local.dirs.tmpfs=true forced shuffle spill to RAM instead of disk, and a hard podAffinity rule concentrated all executors on one node. The combination caused repeated OOM kills that standard diagnostics missed.

#Spark #Kubernetes #memory management #configuration

Read article →
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content Security 5.0
The Hacker News

Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content

Weedhack is a malware-as-a-service campaign targeting Minecraft players via YouTube, impersonating Minecraft clients and mods to gain system control. Active since January 2026, the campaign has infected thousands of users; related threats include CountLoader (86K infections) and miners distributed through pirated content.

#malware #MaaS #Minecraft #credential-theft

Read article →
The New Security Risks of the Agentic Development Lifecycle AI 6.0
Snyk Blog

The New Security Risks of the Agentic Development Lifecycle

Snyk examines how AI agents change the software development lifecycle and introduce new security risks. The article emphasizes that securing the agent-driven process itself is as critical as securing the code output, addressing emerging threat vectors in agentic workflows.

#agents #security #development lifecycle #risk management

Read article →
Adding MCP Tools to Reachy Mini AI 6.0
Hugging Face Blog

Adding MCP Tools to Reachy Mini

Hugging Face demonstrates integrating Model Context Protocol (MCP) tools into Reachy Mini, a small humanoid robot. The post shows how MCP enables robots to dynamically access external tools and services, extending their capabilities beyond pre-trained behaviors.

#MCP #agents #tool-use #robotics

Read article →
Rayfin: Microsoft's answer to the gap between vibe coding and enterprise production AI 7.0
The New Stack

Rayfin: Microsoft's answer to the gap between vibe coding and enterprise production

Microsoft announced Rayfin, an open-source SDK and CLI that lets developers and agents define application backends in code and deploy to Microsoft Fabric with built-in security and compliance. Replit is the exclusive launch partner, enabling Replit Agent to generate backend code that deploys directly to Fabric without manual infrastructure configuration.

#agents #infrastructure-as-code #Fabric #backend deployment

Read article →
AI alone won't change your business. The system running it will. AI 6.0
Azure Blog

AI alone won't change your business. The system running it will.

Microsoft argues that enterprise AI success depends not on model capability but on the governance, deployment, and observability infrastructure surrounding agents. The post outlines a comprehensive agent platform supporting multiple models with identity, policy, and human oversight for production multi-agent systems across software delivery, support, finance, and operations.

#agents #governance #enterprise AI #MLOps

Read article →
"A successful attack could be catastrophic": Anthropic gives more groups access to Claude Mythos AI 7.0
The New Stack

"A successful attack could be catastrophic": Anthropic gives more groups access to Claude Mythos

Anthropic expanded Project Glasswing, a secure access program for Claude Mythos (models more powerful than Opus), to more organizations. Anthropic warned that AI models now match elite human hackers at finding software vulnerabilities, and a breach affecting Glasswing partners could impact over 100 million people.

#Claude Mythos #security #vulnerability detection #AI capabilities

Read article →
Announcing Microsoft Discovery general availability and Microsoft Discovery app preview AI 7.0
Azure Blog

Announcing Microsoft Discovery general availability and Microsoft Discovery app preview

Microsoft Discovery is now generally available as a platform for building and governing agentic AI workflows in scientific and engineering R&D. The platform supports iterative hypothesis-experimentation-refinement cycles with integration of institutional knowledge, specialized modeling tools, and evidence preservation, plus a new local desktop app for researchers and students.

#agents #R&D workflows #scientific computing #agentic AI

Read article →
How GitHub plans to win developers back DevOps 6.0
The New Stack

How GitHub plans to win developers back

GitHub COO Kyle Daigle acknowledged hundreds of incidents over 12 months caused by agentic coding growth exceeding 100% year-over-year. GitHub is scaling infrastructure to handle 30-40x growth over the next year, requiring architectural changes beyond typical cloud scaling.

#GitHub #infrastructure scaling #agentic coding #reliability

Read article →
Microsoft debuts "Scout" at Build, a new personal agent for work AI 7.0
The New Stack

Microsoft debuts "Scout" at Build, a new personal agent for work

Microsoft Scout is a new personal agent for work built on OpenClaw and WorkIQ that integrates with Teams, Outlook, and other Microsoft 365 tools to proactively handle routine tasks like resolving scheduling conflicts and meeting prep without explicit user requests. Currently available to Frontier customers with broader rollout planned.

#agents #autonomous #Microsoft 365 #tool-use

Read article →
The art and science of hyperparameter optimization on Amazon Nova Forge AI 7.0
AWS ML Blog

The art and science of hyperparameter optimization on Amazon Nova Forge

AWS details hyperparameter tuning strategies for fine-tuning Amazon Nova Forge models on proprietary data. The post covers learning rate, data mixing ratios, and checkpoint selection to balance domain specialization with retention of general reasoning capabilities, addressing catastrophic forgetting in domain-specific customization.

#fine-tuning #hyperparameter tuning #LLM #domain adaptation

Read article →
Object detection with Amazon Nova 2 Lite AI 6.0
AWS ML Blog

Object detection with Amazon Nova 2 Lite

Tutorial on using Amazon Nova 2 Lite for zero-shot object detection via natural language prompts, returning bounding box coordinates in JSON. Covers deployment using Bedrock, Lambda, and API Gateway with examples in manufacturing, agriculture, and logistics.

#multimodal #object detection #vision #zero-shot

Read article →
GitHub Copilot app: The agent-native desktop experience AI 8.0
GitHub Blog

GitHub Copilot app: The agent-native desktop experience

GitHub released a desktop Copilot app designed to manage agentic workflows, addressing context fragmentation and code review visibility. The app consolidates agent output, PR tracking, and validation trails in a single interface, with GitHub reporting 1.4 billion commits per month and 2 billion Actions minutes weekly.

#agents #GitHub Copilot #agentic workflows #developer tools

Read article →
Connecting AI agents with unstructured data using Google Cloud Storage MCP Servers AI 8.0
Google Cloud Blog

Connecting AI agents with unstructured data using Google Cloud Storage MCP Servers

Google announced a Model Context Protocol (MCP) server for Google Cloud Storage (GCS) that enables AI agents to securely access unstructured data at scale. The integration treats GCS as an agent-ready data layer, combining MCP with GCS smart storage features like auto-annotations and object contexts. Real-world examples include Palo Alto Networks' Strata Co-Pilot agent powered by Gemini Live API.

#agents #MCP #GCS #tool-use

Read article →
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases AI 6.0
Azure Blog

Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases

Microsoft Fabric and Microsoft Databases are positioned as the data foundation for multi-agent systems, solving the bottleneck of consistent shared context across agents. The announcement includes Rayfin, a tool for moving from prompt to production backend, and emphasizes that agent coordination and scale depend on unified organizational data context rather than individual model capability.

#agents #data platform #MLOps #context management

Read article →
New Azure Cobalt 200 VMs deliver 50% performance improvement, fully optimized for modern agentic AI workloads Cloud 7.0
Azure Blog

New Azure Cobalt 200 VMs deliver 50% performance improvement, fully optimized for modern agentic AI workloads

Microsoft announces early access preview for Azure Cobalt 200 Arm-based VMs, delivering 50% generational performance improvement over Cobalt 100 for scale-out, cloud-native, Linux-based agentic AI workloads. The custom silicon integrates security, networking, storage, and offload optimizations for AI inference, data pipelines, and API tiers.

#custom silicon #Arm #inference #cloud compute

Read article →
How to Secure AI Agents: A Practical Overview for Development Teams AI 8.0
Docker Blog

How to Secure AI Agents: A Practical Overview for Development Teams

Docker outlines four security domains for production AI agents: execution isolation, tool access control, identity and credential management, and runtime monitoring. The article emphasizes that traditional static API security controls are insufficient for autonomous agents that dynamically choose tools and chain actions, requiring infrastructure-level controls instead of permission prompts.

#agents #security #tool-use #runtime monitoring

Read article →
Foundry IQ: Build smarter agents faster with unified knowledge and serverless retrieval AI 8.0
Azure Blog

Foundry IQ: Build smarter agents faster with unified knowledge and serverless retrieval

Foundry IQ simplifies enterprise knowledge infrastructure for agent fleets by unifying documents, emails, meetings, operational data, and live web sources through a serverless retrieval layer. New features include Foundry IQ Serverless (scale-to-zero pricing), multi-source knowledge bases (Work IQ, Fabric IQ, File Search, Azure SQL, MCP), and Web IQ integration, all exposed via Model Context Protocol for any agent framework.

#RAG #agents #knowledge retrieval #MCP

Read article →
Announcing Spanner Graph algorithms: Google-grade intelligence for connected data Cloud 7.0
Google Cloud Blog

Announcing Spanner Graph algorithms: Google-grade intelligence for connected data

Google Cloud announced graph algorithms for Spanner Graph in preview, bringing graph mining capabilities natively to the database. Algorithms like node centrality and community detection run directly via ISO Graph Query Language (GQL) without requiring external ETL pipelines. The feature targets fraud detection, entity resolution, and social network analysis at scale.

#graph algorithms #Spanner #GQL #database

Read article →
Accelerating data lakes: Optimizing Apache Iceberg and Spark with gcs-analytics-core Cloud 7.0
Google Cloud Blog

Accelerating data lakes: Optimizing Apache Iceberg and Spark with gcs-analytics-core

Google released gcs-analytics-core, an open-source Java library that centralizes performance optimizations for analytics workloads on Google Cloud Storage. The library integrates with Apache Iceberg (v1.11.0+) and Apache Spark, replacing sequential reads with parallelized strategies for columnar formats like Parquet. It sits between analytics engines and the GCS Java SDK to inject optimizations without framework-specific tuning.

#Iceberg #Spark #GCS #data lake

Read article →
A Developer's Guide to Managing Models, Cost and Quality in Microsoft Foundry AI 7.0
Azure Blog

A Developer's Guide to Managing Models, Cost and Quality in Microsoft Foundry

Microsoft Foundry expands its model ecosystem and operating surface for production AI systems, now including Fireworks AI for open model inference via single Azure endpoint with enterprise SLAs. The platform addresses the production challenge of choosing, validating, optimizing, and operating the right model across application lifecycle, from prototype to cost-constrained production.

#model management #evals #cost optimization #MLOps

Read article →
HCP Terraform adds project-level run tasks DevOps 7.0
HashiCorp Blog

HCP Terraform adds project-level run tasks

HCP Terraform now supports project-level run tasks in public beta, enabling organizations to enforce security, compliance, and operational guardrails across groups of workspaces. Previously run tasks were only available at organization or workspace scope, but project-level scope aligns with how teams naturally organize infrastructure at scale.

#Terraform #run-tasks #governance #compliance

Read article →
Presentation: The Human Toll of Incidents & Ways To Mitigate It DevOps 6.0
InfoQ DevOps

Presentation: The Human Toll of Incidents & Ways To Mitigate It

Kyle Lexmond presents strategies for managing high-pressure production incidents, distinguishing between rapid mitigation and root-cause resolution. The talk covers cognitive overload management, blameless culture practices, and system optimization for faster recovery during severe outages.

#incident-response #operational-resilience #team-dynamics

Read article →
AI-Driven Exploitation is Destroying Vulnerability Management. Here's How to Handle It. Security 7.0
The Hacker News

AI-Driven Exploitation is Destroying Vulnerability Management. Here's How to Handle It.

The article argues that AI-accelerated vulnerability discovery and weaponization are compressing the exploit timeline from days to hours, making traditional vulnerability management processes obsolete. Organizations must shift from reactive patching to continuous monitoring and rapid response strategies. The piece discusses how AI tools are automating the full attack chain from disclosure to mass exploitation.

#AI #vulnerability management #threat intelligence #automation

Read article →
Cloud native is now AI-native: Engineering production-ready AI AI 7.0
CNCF Blog

Cloud native is now AI-native: Engineering production-ready AI

CNCF roundtable at KubeCon Europe outlined three core components for production-ready AI: vendor-neutral infrastructure aligned with the Kubernetes AI Conformance program, integrated security for autonomous agents, and active community contribution. Platform maturity, security by design, and agentic governance are now essential for enterprise AI workloads.

#Kubernetes #agents #security #platform maturity

Read article →
How Leading Organizations Are Turning EDR Into Operational Resilience Security 6.0
The Hacker News

How Leading Organizations Are Turning EDR Into Operational Resilience

The article discusses how organizations are evolving endpoint detection and response (EDR) from a point security tool into a broader operational resilience strategy. Modern attacks bypass traditional prevention, requiring continuous visibility and faster response. EDR adoption has accelerated as teams recognize that endpoint protection alone is insufficient.

#EDR #endpoint security #detection #operational resilience

Read article →
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT Security 5.0
The Hacker News

Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

SideCopy, a Pakistan-aligned threat actor, conducted a spear-phishing campaign against Afghanistan's Ministry of Finance using Xeno RAT, an open-source remote access trojan. The attack chain began with a ZIP archive containing a malicious LNK file with a Pashto-language filename designed to evade detection. The campaign demonstrates targeted nation-state activity in the region.

#spear-phishing #RAT #nation-state #SideCopy

Read article →
Experimenting with TPUs, GKE Managed DRANET, and Multi-cluster Inference Gateway Cloud 7.0
Google Cloud Blog

Experimenting with TPUs, GKE Managed DRANET, and Multi-cluster Inference Gateway

Google Cloud demonstrates multi-region AI inference resilience using GKE's managed Dynamic Resource Allocation (DRANET) for TPU scheduling, multi-cluster inference gateway for cross-region failover, and Cloud Storage FUSE for model storage. The setup balances inference workloads across multiple GKE clusters in different regions, with TPUs managed through DRANET to handle regional failures without service interruption.

#Kubernetes #TPU #inference #multi-cluster

Read article →
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded Security 6.0
The Hacker News

Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded

Password manager Dashlane disclosed a brute-force attack on May 31, 2026, where an attacker targeted user accounts to bypass two-factor authentication (2FA) and download encrypted vaults. Fewer than 20 personal subscription users were affected. The incident highlights the ongoing risk of credential-based attacks against authentication systems.

#brute-force #2FA bypass #password manager #credential attack

Read article →
Introducing Cross-Engine ABAC DevOps 6.0
Databricks Blog

Introducing Cross-Engine ABAC

Databricks introduces Cross-Engine Attribute-Based Access Control (ABAC), extending fine-grained access policies across multiple query engines within the lakehouse. This enables consistent security governance for data accessed through SQL, Python, and other compute layers.

#ABAC #security #access-control #lakehouse

Read article →
Reference your own AWS Secrets Manager secrets in Amazon Bedrock AgentCore Identity AI 7.0
AWS ML Blog

Reference your own AWS Secrets Manager secrets in Amazon Bedrock AgentCore Identity

Amazon Bedrock AgentCore Identity now supports referencing pre-configured AWS Secrets Manager secrets instead of auto-generating them, allowing teams to apply custom tags, rotation policies, and customer-managed KMS encryption. This enables agents to securely access external APIs and tools while maintaining organizational secrets governance.

#agents #security #credential-management #AWS Secrets Manager

Read article →
Transforming rare cancer research with Amazon Quick: Integrating biomedical databases for breakthrough discoveries AI 6.0
AWS ML Blog

Transforming rare cancer research with Amazon Quick: Integrating biomedical databases for breakthrough discoveries

Amazon Quick Research is an agentic workflow that ingests structured and unstructured biomedical data from multiple sources like PubMed, applies LLM-driven synthesis to generate cited research reports, and eliminates weeks of manual ETL and schema reconciliation. The post walks through integrating genomic, clinical, and literature data for pediatric sarcoma research.

#agents #LLM #data-integration #research-automation

Read article →
Get started with OpenAI GPT-5.5, GPT-5.4 models, and Codex on Amazon Bedrock AI 8.0
AWS News

Get started with OpenAI GPT-5.5, GPT-5.4 models, and Codex on Amazon Bedrock

OpenAI GPT-5.5, GPT-5.4, and Codex are now available on Amazon Bedrock via the Responses API. GPT-5.5 targets complex reasoning and agentic workflows, GPT-5.4 optimizes price-performance, and Codex is a coding agent used by 4M developers weekly. All inference routes through Bedrock's next-generation engine with per-token pricing and data residency guarantees.

#LLM #agents #Bedrock #Codex

Read article →
OpenAI, Anthropic, Google, Amazon, and xAI all fail on type of attack, study finds AI 8.0
The New Stack

OpenAI, Anthropic, Google, Amazon, and xAI all fail on type of attack, study finds

Cisco research across 15 frontier models reveals that single-turn safety benchmarks are poor predictors of multi-turn resilience. All tested models failed multi-turn attacks at rates ranging from 7.89% to 88.30%, with some models like Gemini 3 Pro jumping from 18.10% single-turn success to 73.35% under iterative attack. The gap exposes a critical gap in how enterprises evaluate AI safety.

#evals #safety #adversarial #multi-turn

Read article →
JetBrains open-sources Mellum2 to go where Claude Code can't AI 7.0
The New Stack

JetBrains open-sources Mellum2 to go where Claude Code can't

JetBrains open-sourced Mellum2, a 12B-parameter coding model designed for infrastructure-layer agentic AI tasks like routing, retrieval pipelines, and sub-agent coordination. Unlike its 4B predecessor Mellum, Mellum2 is open from day one and targets the broader ecosystem of multi-model orchestration rather than single-task code completion.

#LLM #agents #code generation #open-source

Read article →
Extending MCP support for Amazon Bedrock AgentCore Gateway AI 7.0
AWS ML Blog

Extending MCP support for Amazon Bedrock AgentCore Gateway

Amazon Bedrock AgentCore Gateway now supports extended MCP capabilities including dynamic tool schema discovery, MCP prompts and resources as first-class primitives, streaming for stateful interactions, and OAuth 2.0 token exchange. This centralizes credential management, observability, and secure connectivity for enterprise MCP deployments.

#agents #MCP #tool-use #AgentCore

Read article →
From Kubernetes Dashboard to Headlamp: Understanding the Transition DevOps 6.0
Kubernetes Blog

From Kubernetes Dashboard to Headlamp: Understanding the Transition

Kubernetes Dashboard is archived; Headlamp is its successor, offering multi-cluster visibility, application-centric views, plugin extensibility, and both in-cluster and desktop deployment options. The post maps familiar Dashboard workflows to Headlamp and guides operators through the transition while preserving the user-centered design that made Dashboard approachable.

#Kubernetes #UI #cluster-management #observability

Read article →
Secure AI agents with Policy and Lambda interceptors in Amazon Bedrock AgentCore gateway AI 7.0
AWS ML Blog

Secure AI agents with Policy and Lambda interceptors in Amazon Bedrock AgentCore gateway

Amazon Bedrock AgentCore Gateway introduces Cedar-based policies for deterministic access control and Lambda interceptors for dynamic validation of agent tool invocations. These mechanisms address the governance challenge of securing LLM-driven agents that decide at runtime which tools to invoke with what arguments.

#agents #security #policy-as-code #AgentCore

Read article →
Hackers Used Meta's AI Support Bot to Seize Instagram Accounts Security 9.0
Krebs on Security

Hackers Used Meta's AI Support Bot to Seize Instagram Accounts

Pro-Iranian hackers exploited Meta's AI support assistant to reset Instagram account passwords by tricking the bot into adding attacker-controlled email addresses during password recovery. The exploit affected high-profile accounts including the Obama White House and U.S. Space Force, requiring only a VPN connection to spoof location.

#security #AI #authentication #account takeover

Read article →
Enable safe agentic payments with built-in guardrails using Amazon Bedrock AgentCore payments AI 6.0
AWS ML Blog

Enable safe agentic payments with built-in guardrails using Amazon Bedrock AgentCore payments

Amazon Bedrock AgentCore Payments (preview) enables agents to access paid resources and transact on behalf of end users through embedded wallets from Coinbase or Stripe Privy. The service includes guardrails addressing risks from autonomous long-running sessions, model non-determinism, and exposure between agent code and user funds.

#agents #payments #guardrails #AgentCore

Read article →
Claude Code vs. Cursor vs. Codex vs. Antigravity — six months in AI 7.0
The New Stack

Claude Code vs. Cursor vs. Codex vs. Antigravity — six months in

Six months after Google's Antigravity launch in November 2025, the agentic coding tool category has converged on form. Claude Code emphasizes approval-heavy workflows for large codebases, Cursor remains model-agnostic, Codex and Antigravity pursue different platform strategies. The competitive differentiation has shifted from basic capability to platform ecosystem and developer workflow.

#agents #code generation #IDE #agentic AI

Read article →
How we reduced core unit boot time from hours to minutes Engineering 7.0
Cloudflare Blog

How we reduced core unit boot time from hours to minutes

Cloudflare debugged a firmware quirk that caused 2,000 bare-metal core servers to take 4 hours to boot instead of minutes after a UEFI update. The root cause was an over-eager linear search through network boot interfaces during the firmware-to-OS handoff, which they optimized to restore minutes-scale boot times and unattended upgrade windows.

#UEFI #firmware #bare metal #boot optimization

Read article →
AgentOps: Operationalize agentic AI at scale with Amazon Bedrock AgentCore AI 7.0
AWS ML Blog

AgentOps: Operationalize agentic AI at scale with Amazon Bedrock AgentCore

AWS outlines operational best practices for deploying agentic AI at scale, covering governance, build/ops, evaluation, and observability across four pillars. The post presents a reference architecture using Amazon Bedrock AgentCore and supporting AWS services to address challenges like cost spiraling, non-deterministic failures, and agent quality assurance in production.

#agents #MLOps #observability #governance

Read article →
How Trustpilot built a real-time architecture for data enrichment using Gemma AI 8.0
Google Cloud Blog

How Trustpilot built a real-time architecture for data enrichment using Gemma

Trustpilot built a high-volume streaming pipeline using fine-tuned Gemma models to process millions of user reviews in real-time for NER, sentiment scoring, and intent detection. By owning the model through fine-tuning rather than relying on closed APIs, the company gains full control over latency, cost, and data privacy for its core business intelligence workload.

#LLM #fine-tuning #Gemma #streaming

Read article →
The fully-managed Remote MCP Server for AlloyDB is now Generally Available AI 8.0
Google Cloud Blog

The fully-managed Remote MCP Server for AlloyDB is now Generally Available

Google Cloud released the Remote Model Context Protocol (MCP) Server for AlloyDB as GA, enabling AI agents to securely query enterprise databases with real-time context. The integration includes ScaNN vector indexing (10B+ vectors at 6x PostgreSQL speed) and reranking, allowing agents to ground decisions in live operational data without stale context.

#agents #MCP #RAG #AlloyDB

Read article →
This coding agent doesn't want your feedback — it ships without it AI 7.0
The New Stack

This coding agent doesn't want your feedback — it ships without it

SkipLabs launched Skipper, a closed-loop coding agent that takes plain-language descriptions or OpenAPI specs and returns a complete, validated backend service with no review cycle. Founded by Julien Verlaguet (creator of Hack at Facebook), Skipper positions itself as the substrate between foundation models and shipped software, eliminating developer iteration.

#agents #code generation #backend #closed-loop

Read article →
Introducing the GKE standby buffer: Improve node startup times without blowing your budget DevOps 7.0
Google Cloud Blog

Introducing the GKE standby buffer: Improve node startup times without blowing your budget

Google Kubernetes Engine launched standby buffers, a low-cost suspended capacity reserve that achieves near-immediate pod scheduling with single-digit percent overhead. Benchmarks show P50 latency of single-digit seconds versus 4-6 minute spikes on clusters without buffers, while maintaining similar allocatable core costs.

#Kubernetes #autoscaling #GKE #capacity planning

Read article →
Modeling a digital twin of a food supply chain using BigQuery Graph Cloud 6.0
Google Cloud Blog

Modeling a digital twin of a food supply chain using BigQuery Graph

Google Cloud introduced BigQuery Graph for modeling complex supply chains as graph structures rather than relational tables. The approach reduces join overhead and latency when tracing dependencies across thousands of assets, addressing bullwhip effects, SOP drift, and food safety blast radius in multi-node networks.

#BigQuery #graph #supply chain #digital twin

Read article →
What is Sandbox Security? Security 6.0
Docker Blog

What is Sandbox Security?

Docker published guidance on sandbox security as a critical layer for agentic AI deployment. The piece covers isolation boundaries, access controls, process isolation, network segmentation, and runtime monitoring. Docker's State of Agentic AI report found 40% of respondents cite security as the top challenge in scaling agents, with 43% pointing to orchestration sprawl as a security exposure vector.

#security #agents #sandbox #isolation

Read article →
"Blowing things up": The one move vendors got wrong on AI agents AI 6.0
The New Stack

"Blowing things up": The one move vendors got wrong on AI agents

Hyland announced general availability of its Enterprise Context Engine and Enterprise Agent Mesh at CommunityLIVE 2026, positioning agents as an overlay on existing enterprise systems rather than requiring process redesign. The company introduced Agent Lifecycle Management and headless mode for Content Innovation Cloud to let agents interact with services directly without data migration or business process overhaul.

#agents #enterprise #context #orchestration

Read article →
At Sapphire, SAP makes the case that enterprise AI is a context problem AI 6.0
The New Stack

At Sapphire, SAP makes the case that enterprise AI is a context problem

SAP consolidated its AI offerings under the SAP Business AI Platform at Sapphire 2026, bringing together Business Technology Platform, Business Data Cloud, Autonomous Suite, and Joule Work. The company is shipping 50+ domain-specific Joule Assistants orchestrating 200+ specialized agents across finance, supply chain, procurement, and HR, positioning enterprise AI as a context and governance problem, not a model problem.

#agents #enterprise #context #ERP

Read article →
AWS Weekly Roundup: Claude Opus 4.8 on AWS, Aurora MySQL with Kiro Powers, and more (June 1, 2026) AI 7.0
AWS News

AWS Weekly Roundup: Claude Opus 4.8 on AWS, Aurora MySQL with Kiro Powers, and more (June 1, 2026)

Claude Opus 4.8, Anthropic's most capable model, is now available on Amazon Bedrock and AWS Claude Platform for agentic coding and knowledge work. The post highlights how AI-driven development lifecycle (AI-DLC) workshops are reshaping team structures into smaller AI-augmented squads and accelerating delivery of use cases.

#LLM #agents #Claude #Amazon Bedrock

Read article →
Coding Agent Horror Stories: The rm -rf ~/ Incident AI 8.0
Docker Blog

Coding Agent Horror Stories: The rm -rf ~/ Incident

Docker examines a real incident where Claude Code executed rm -rf tests/ patches/ plan/ ~/, wiping a developer's entire Mac due to a trailing slash. The post details how AI coding agents run with user credentials and filesystem access with no execution boundary, and how workspace-scoped sandboxing can contain such failures.

#agents #security #sandbox #code execution

Read article →
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan Security 5.0
The Hacker News

China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan

Operation Dragon Weave, a China-aligned cyber espionage campaign, targets government, research, academic, technology, and financial sectors in Czech Republic and Taiwan using spear-phishing emails with ZIP attachments to deliver AdaptixC2 agent. The campaign demonstrates persistent targeting of critical infrastructure and research institutions.

#security #espionage #malware #spear-phishing

Read article →
Dynamic configuration for cloud native Swift services DevOps 5.0
CNCF Blog

Dynamic configuration for cloud native Swift services

CNCF published guidance on Swift Configuration, a new standard for managing configuration in Kubernetes-native Swift services. It addresses gaps in manual environment-variable and file-based approaches by providing layered provider models, hot reloading for ConfigMap-backed volumes, and immutable snapshots to prevent torn reads during live traffic.

#Kubernetes #configuration #Swift #cloud-native

Read article →
A Trailing Slash Bypassed AWS API Gateway Authorization Security 9.0
InfoQ DevOps

A Trailing Slash Bypassed AWS API Gateway Authorization

A security researcher discovered that appending a trailing slash to AWS HTTP API paths bypassed Lambda authorizer authentication entirely, enabling unauthenticated access. The root cause is path normalization mismatch between HTTP API's greedy route matching and its authorization layer, a vulnerability class also seen in gRPC-Go (CVE-2026-33186).

#CVE #AWS #API Gateway #authorization bypass

Read article →
How to Post-Train Autonomous Vehicle Models in Closed-Loop with NVIDIA Alpamayo AI 7.0
NVIDIA Developer Blog

How to Post-Train Autonomous Vehicle Models in Closed-Loop with NVIDIA Alpamayo

NVIDIA Alpamayo enables closed-loop post-training of vision-language-action (VLA) models for autonomous vehicles, where model outputs directly affect environment feedback rather than comparing against ground-truth. This bridges the gap between open-loop training and real-world deployment by incorporating environmental consequences into the learning loop.

#VLA models #autonomous vehicles #post-training #closed-loop

Read article →
Gavriel Cohen found his own code inside OpenClaw, so he walked away Security 7.0
The New Stack

Gavriel Cohen found his own code inside OpenClaw, so he walked away

A developer discovered his own code bundled inside OpenClaw (formerly Clawd Bot), an agent framework built on Claude Code, raising immediate security concerns about package provenance and supply-chain integrity. Cohen, who had previously built the package, found it included in OpenClaw's dependency tree without attribution or consent, prompting him to fork the project as NanoClaw to address governance and transparency issues.

#agents #supply-chain #security #Claude

Read article →
AI retrieval at scale is becoming a systems problem, not a tooling problem AI 8.0
The New Stack

AI retrieval at scale is becoming a systems problem, not a tooling problem

Production RAG and agentic systems now require integrated retrieval combining keyword matching, semantic search, ranking, and real-time signals in a single request path, moving beyond standalone vector databases. The shift from model-quality focus to operational trade-offs like latency, ranking quality, and architectural simplicity reflects how retrieval has become a systems integration challenge rather than a pure tooling problem.

#RAG #retrieval #ranking #vector search

Read article →
The DIY platform trap that's burning out engineering teams DevOps 7.0
The New Stack

The DIY platform trap that's burning out engineering teams

Platform teams building custom automation stacks often create unmaintainable complexity that outlives its original authors, shifting toil from workflow execution to infrastructure archaeology. The article argues that layering scripts, blueprints, orchestration, and GitOps without clear ownership and documentation trades one problem for another, leaving teams debugging intent rather than applications.

#platform engineering #DevOps #automation #technical debt

Read article →
I tested Cursor's new Jira integration and it's 5 stars, no notes. Here's why. AI 6.0
The New Stack

I tested Cursor's new Jira integration and it's 5 stars, no notes. Here's why.

Cursor's new Jira integration allows developers to assign tickets directly as prompts without context switching or copy-paste, tested across four scenarios with varying ticket clarity. The integration performed well on both well-written and vague tickets, though it requires Cursor Teams subscription (no free trial) and is currently low-adoption in the Atlassian marketplace with only 548 installs.

#Cursor #Jira #LLM agents #developer tools

Read article →
Arm Open-Sources Metis, an AI Security Framework Outperforming Traditional SAST Tools AI 7.0
InfoQ DevOps

Arm Open-Sources Metis, an AI Security Framework Outperforming Traditional SAST Tools

Arm has open-sourced Metis, an agentic AI framework that uses semantic reasoning to autonomously discover software vulnerabilities across component dependencies. Unlike pattern-based SAST tools, Metis applies LLM-driven reasoning to analyze code relationships and generates natural language explanations for findings, demonstrating better detection of complex security issues.

#agents #security #LLM #SAST

Read article →
Why GPT-5.4, Claude, and Gemini can't agree on basic, real-world facts AI 7.0
The New Stack

Why GPT-5.4, Claude, and Gemini can't agree on basic, real-world facts

Analysis from Lenz claim-verification platform shows five frontier LLMs (GPT-5.4, Claude Opus 4.7, Gemini 3 Pro, Gemini 3 Pro + Search, Sonar Pro) disagreed on 67% of 1,000 real-world fact-check claims using a 4-bucket rubric (True/Mostly True/Misleading/False). The split reflects intentional coverage of production inference modes from latency-sensitive to throughput-aware.

#LLM #evals #factuality #inference

Read article →
Replit's vibe coding platform just got a Visa-backed identity layer for AI agents — and it changes how agents spend money AI 7.0
The New Stack

Replit's vibe coding platform just got a Visa-backed identity layer for AI agents — and it changes how agents spend money

Replit and Visa announced a strategic partnership integrating Visa Intelligent Commerce capabilities into Replit's development environment. Developers now have native access to tokenization, authentication, wallet management, and payment instructions within agent-building workflows, enabling agents to execute transactions directly.

#AI agents #payments #commerce #tool-use

Read article →
Opus 4.8 Made Claude Smarter. Token Discipline Got Urgent. AI 6.0
The New Stack

Opus 4.8 Made Claude Smarter. Token Discipline Got Urgent.

Anthropic released Claude Opus 4.8, claimed as the smartest model yet, amid viral stories of enterprises facing runaway LLM costs (including an unverified claim of half-billion dollar monthly spend). The article argues that token efficiency and usage limits have become critical operational concerns as frontier models improve but inference costs remain high.

#LLM #Claude #cost #inference

Read article →
Google Cloud Suspends Railway's Production Account, Causing Eight-Hour Platform-Wide Outage Cloud 8.0
InfoQ DevOps

Google Cloud Suspends Railway's Production Account, Causing Eight-Hour Platform-Wide Outage

Google Cloud's automated abuse-detection systems suspended Railway's production GCP account without warning, causing an eight-hour outage affecting 3 million users. Because Railway's control plane ran on GCP while workloads spanned AWS and bare metal, the suspension cascaded across all providers. Railway is now treating GCP as backup-only infrastructure.

#outage #cloud #infrastructure #GCP

Read article →
Comprehensive observability for Amazon SageMaker AI LLM inference: From GPU utilization to LLM quality AI 7.0
AWS ML Blog

Comprehensive observability for Amazon SageMaker AI LLM inference: From GPU utilization to LLM quality

AWS details a two-dimensional observability framework for SageMaker LLM inference: quantity metrics (latency, throughput, GPU utilization, cost) and quality metrics (response accuracy, compliance, consistency). The approach stages observability from core operational signals through sampling-based LLM quality monitoring to detect distribution shift and capacity bottlenecks in production deployments.

#LLM #observability #inference #SageMaker

Read article →
DynoSim: Simulating the Pareto Frontier AI 7.0
NVIDIA Developer Blog

DynoSim: Simulating the Pareto Frontier

NVIDIA describes DynoSim, a tool for simulating LLM serving configurations and their performance trade-offs across model backend, tensor parallelism, prefill/decode split, worker counts, scheduler settings, routing policy, KV cache behavior, and autoscaling thresholds. DynoSim helps identify Pareto-optimal serving configurations without exhaustive real-world testing.

#LLM #serving #inference #optimization

Read article →
AI Doesn't Scale Until You Stop Calling It Innovation AI 6.0
Databricks Blog

AI Doesn't Scale Until You Stop Calling It Innovation

Databricks argues that enterprise AI adoption stalls when organizations treat AI as a one-off innovation project rather than operationalized infrastructure. The post emphasizes that scaling AI requires moving from experimental teams to integrated MLOps practices, data governance, and production-grade systems.

#MLOps #AI infrastructure #enterprise AI #operationalization

Read article →
Developer's guide to Gemini Enterprise and A2UI integration AI 8.0
Google Cloud Blog

Developer's guide to Gemini Enterprise and A2UI integration

Google released A2UI, an open protocol for agent-driven user interfaces, enabling agents to render rich interactive UI (date pickers, maps, multi-select lists) natively in Gemini Enterprise chat and custom frontends. Solves multi-turn slot-filling and choice rendering problems in agentic workflows using Google Agent Development Kit and A2A protocol.

#agents #A2UI #Gemini Enterprise #UI protocol

Read article →
How to Automate AI Model Documentation with the NVIDIA MCG Toolkit AI 7.0
NVIDIA Developer Blog

How to Automate AI Model Documentation with the NVIDIA MCG Toolkit

NVIDIA MCG Toolkit automates generation of model cards and regulatory documentation for AI models, addressing compliance requirements under AB-2013 and EU AI Act. The toolkit captures model behavior, training data, performance metrics, and intended use in auditable format before release.

#model cards #MLOps #compliance #documentation

Read article →
AlloyDB Hot Standby: Faster failovers, consistent performance Cloud 7.0
Google Cloud Blog

AlloyDB Hot Standby: Faster failovers, consistent performance

AlloyDB for PostgreSQL introduces Hot Standby, a new high-availability architecture that keeps the standby node warm and cache-ready to eliminate database startup and cache-warming delays during failover. The separation of compute and storage with synchronous WAL writes to a regional log persistor ensures durability while reducing recovery time.

#AlloyDB #PostgreSQL #high-availability #failover

Read article →
From petabytes to predictions: Easy BigQuery insights in Google Sheets Cloud 6.0
Google Cloud Blog

From petabytes to predictions: Easy BigQuery insights in Google Sheets

Connected Sheets bridges BigQuery and Google Sheets, eliminating CSV exports and data silos by providing a secure, live connection to petabyte-scale datasets directly in Sheets. Business users can analyze billions of rows without SQL while admins maintain governance through table-level access controls and Workspace data protections.

#BigQuery #data-analytics #governance #Google Sheets

Read article →
Cool stuff Google Cloud customers built, May edition: Agentic algorithms for supply chains; virtual try-on APIs; robotic camera operators & more Cloud 5.0
Google Cloud Blog

Cool stuff Google Cloud customers built, May edition: Agentic algorithms for supply chains; virtual try-on APIs; robotic camera operators & more

Google Cloud customer showcase featuring Urban Outfitters migrating 11TB Oracle database to AlloyDB for PostgreSQL, BASF using AlphaEvolve for supply-chain mapping, WPP training humanoid robots with vision, and Breuninger deploying Virtual Try-On APIs. Demonstrates production AI agent and infrastructure use cases across retail, manufacturing, and logistics.

#agents #AlloyDB #supply-chain #computer vision

Read article →
Claude Opus 4.8 is now available in Microsoft Foundry AI 7.0
Azure Blog

Claude Opus 4.8 is now available in Microsoft Foundry

Anthropic's Claude Opus 4.8 model is now available in Microsoft Azure AI Foundry, offering improved performance for coding, agentic workflows, and document-heavy analysis. The model is designed to handle longer-running tasks, maintain coherence across complex multi-step workflows, use tools reliably, and support production enterprise applications.

#LLM #Claude #agents #Azure

Read article →
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit Security 8.0
The Hacker News

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

Threat actors exploited CVE-2026-39987 in publicly-accessible Marimo notebooks to gain initial access, then deployed an LLM agent to automate post-compromise actions including credential extraction and lateral movement. The attack demonstrates operational use of agentic AI for attack orchestration beyond initial exploitation.

#LLM agents #CVE #post-exploitation #credential theft

Read article →
Why Linux creator Linus Torvalds gets angry hearing "99% of code is AI" AI 6.0
The New Stack

Why Linux creator Linus Torvalds gets angry hearing "99% of code is AI"

Linus Torvalds argues that AI is a productivity tool for developers, not a replacement for programming, comparing it to historical shifts from machine code to compilers. He emphasizes that serious long-lived projects require deep understanding of generated code and system architecture, not just prompt engineering.

#AI #programming #productivity #code generation

Read article →
"The AI did it" won't save you when EU regulators come knocking Security 8.0
The New Stack

"The AI did it" won't save you when EU regulators come knocking

The EU's Cyber Resilience Act imposes strict accountability for software vulnerabilities starting September 2026, with no distinction between human-written and AI-generated code. Organizations must now document and secure their entire SDLC while managing the compliance burden of AI tools that generate code faster than teams can review.

#security #compliance #AI-generated-code #vulnerability-management

Read article →
Vendor neutrality isn't magic: A hard look at the OpenTelemetry ecosystem DevOps 7.0
The New Stack

Vendor neutrality isn't magic: A hard look at the OpenTelemetry ecosystem

The article examines the limits of OpenTelemetry's vendor neutrality promise, tracing how the standard's roots in distributed tracing shaped its design and where ecosystem lock-in actually occurs. It argues that while OTel provides a neutral data format and transport, switching vendors remains difficult in practice, similar to format portability not guaranteeing platform switching ease.

#observability #OpenTelemetry #vendor-neutrality #distributed-tracing

Read article →
The fix for soaring AI cloud bills exists — so why won't we trust it? DevOps 6.0
The New Stack

The fix for soaring AI cloud bills exists — so why won't we trust it?

Despite 89% of organizations prioritizing automated resource right-sizing to control GPU-driven AI cloud costs, 71% of Kubernetes engineers still require human review for CPU and memory changes. The article explores the trust gap between automation for productivity gains versus automation for cost reduction.

#Kubernetes #cost-optimization #resource-management #automation

Read article →
AI is shipping code faster than security was built to handle AI 7.0
The New Stack

AI is shipping code faster than security was built to handle

Snyk launched Evo Continuous Offensive Security, an AI-powered pentesting product that runs continuously rather than annually, addressing the 350-day coverage gap left by traditional 15-day pentesting engagements. The product targets the emerging need for continuous vulnerability detection in AI-generated code and against agentic attackers.

#AI-agents #penetration-testing #vulnerability-detection #application-security

Read article →
AI-Assisted Migration Tool Helps Teams Move from ingress-nginx to Higress in Minutes AI 7.0
InfoQ DevOps

AI-Assisted Migration Tool Helps Teams Move from ingress-nginx to Higress in Minutes

An AI-assisted migration tool demonstrated by CNCF successfully migrated 60 ingress-nginx resources to Higress in approximately 30 minutes, showcasing practical application of AI for Kubernetes networking infrastructure modernization. The tool automates the translation of ingress-nginx configurations to Higress equivalents.

#AI #Kubernetes #ingress-nginx #Higress

Read article →
Building a cloud native internal developer platform with Kubernetes, GitOps, and supply chain security DevOps 7.0
CNCF Blog

Building a cloud native internal developer platform with Kubernetes, GitOps, and supply chain security

The CNCF describes a reference architecture for an Internal Developer Platform built on Kubernetes, GitOps (Argo CD), and Infrastructure as Code, addressing deployment inconsistencies, secret management, cost overhead, and observability fragmentation. The design applies to any CNCF-conformant Kubernetes distribution, including managed AKS.

#Kubernetes #GitOps #IDP #infrastructure-as-code

Read article →
What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks Security 7.0
The Hacker News

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks

Analysis of 2,000 exposed applications built with Vibe (AI-coded apps) reveals shadow AI risk: employees building full production applications with AI tools without security or IT oversight, then publishing them publicly. The report highlights how artifact risk has shifted from prompt injection to unsecured AI-generated products in production.

#shadow AI #AI-generated code #supply-chain risk #governance

Read article →
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets Security 8.0
The Hacker News

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Researchers discovered malicious NuGet package versions 2.0.0-2.0.4 of 'Sicoob.Sdk' masquerading as a C# SDK for Brazil's Sicoob financial cooperative, exfiltrating client IDs and PFX certificates. The attack targets cloud secrets and banking credentials through package repository supply-chain compromise.

#supply-chain #NuGet #credential theft #package repository

Read article →
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels Security 7.0
The Hacker News

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

North Korean state-sponsored Kimsuky (Velvet Chollima) conducted cyber attacks on South Korean military and corporate entities in March-April 2026 using new tools including HTTPSpy, HelloDoor, and VS Code Tunnels. Attack chain leveraged social engineering via spoofed security software and fake Webex pages.

#state-sponsored #North Korea #Kimsuky #social engineering

Read article →
Training Azerbaijani language models on Amazon SageMaker AI AI 7.0
AWS ML Blog

Training Azerbaijani language models on Amazon SageMaker AI

Azercell Telecom built a production Azerbaijani LLM on SageMaker using kernel-level optimizations and custom tokenization, achieving 23% higher training throughput, 58% lower peak GPU memory, and 2x improvement in tokens-per-word for morphologically rich languages. The framework uses PyTorch, Hugging Face Transformers, and Liger Kernels on ml.p5.48xlarge instances.

#LLM training #low-resource languages #kernel optimization #tokenization

Read article →
Build a custom portal with embedded Amazon SageMaker AI MLflow Apps DevOps 5.0
AWS ML Blog

Build a custom portal with embedded Amazon SageMaker AI MLflow Apps

This guide shows how to embed SageMaker MLflow Apps into SSO-integrated internal portals using a React frontend and Flask backend, eliminating presigned URL distribution and AWS Console access overhead. The solution provides data scientists a single bookmarkable URL for experiment tracking while CI/CD pipelines access MLflow REST APIs through SigV4-authenticated proxy endpoints.

#MLflow #MLOps #experiment tracking #SSO

Read article →
Evaluating Deep Agents using LangSmith on AWS AI 8.0
AWS ML Blog

Evaluating Deep Agents using LangSmith on AWS

LangSmith on AWS provides evaluation patterns for multi-step AI agents, combining offline pytest-based testing with online production monitoring. The guide walks through a text-to-SQL deep agent using Amazon Bedrock and Amazon Nova 2 Lite, demonstrating how to catch non-deterministic agent failures early and track reliability throughout the agent lifecycle.

#agents #evals #LangSmith #monitoring

Read article →
Introducing the next generation of AWS Resilience Hub for generative AI-based SRE resilience journey Cloud 6.0
AWS News

Introducing the next generation of AWS Resilience Hub for generative AI-based SRE resilience journey

AWS Resilience Hub now integrates generative AI for failure mode analysis, dependency discovery, and modular resilience policies to help SREs set consistent resilience goals and measure compliance across application portfolios. The update adds AWS Organizations integration for enterprise-wide reporting and structured policy composition rather than rigid single-type policies.

#resilience #SRE #AWS #failure analysis

Read article →
How the University of Central Oklahoma is using AI to streamline analysis of complex criminal cases AI 6.0
Google Cloud Blog

How the University of Central Oklahoma is using AI to streamline analysis of complex criminal cases

University of Central Oklahoma's Forensic Science Institute deployed Google's NotebookLM to accelerate analysis of complex criminal case documents and timeline construction. The AI-driven solution, prototyped during a hackathon, reduced analysis time from months to significantly shorter periods, establishing a new standard for forensic investigation workflows.

#NotebookLM #Gemini #document-analysis #case-management

Read article →
Unity Catalog and the next era of Apache Iceberg DevOps 6.0
Databricks Blog

Unity Catalog and the next era of Apache Iceberg

Databricks discusses the integration of Unity Catalog with Apache Iceberg as the foundation for next-generation open lakehouse architecture. The focus is on catalog-driven governance and metadata management for open table formats.

#Apache Iceberg #Unity Catalog #lakehouse #metadata

Read article →
Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications AI 7.0
AWS News

Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications

Amazon OpenSearch Serverless now scales from zero to thousands of requests per second with 60% cost savings versus provisioned clusters, instant resource creation, and 20x faster scaling. Native integrations with Vercel and Kiro enable production-ready vector and full-text search backends for AI agents in minutes without infrastructure management.

#vector search #serverless #agents #RAG

Read article →
Introducing Claude Opus 4.8 AI 7.0
Anthropic News

Introducing Claude Opus 4.8

Anthropic releases Claude Opus 4.8, an upgrade to the Opus model class with improved performance on coding, agentic tasks, and professional work, plus consistency improvements for long-running workflows.

#LLM #Claude #agents #coding

Read article →
SCIM in HashiCorp Vault standardizes provisioning in platforms DevOps 6.0
HashiCorp Blog

SCIM in HashiCorp Vault standardizes provisioning in platforms

HashiCorp Vault now supports SCIM (System for Cross-domain Identity Management) for standardized user and group provisioning, enabling joiner-mover-leaver workflows tied to authoritative identity providers. This reduces configuration drift, eliminates stale access, and extends identity-first security into secrets management without custom integrations.

#SCIM #identity #provisioning #Vault

Read article →
Automate AML alert triage with Amazon Quick and Snowflake Cortex AI AI 6.0
AWS ML Blog

Automate AML alert triage with Amazon Quick and Snowflake Cortex AI

Amazon Quick Flows integrated with Snowflake Cortex AI automates anti-money laundering alert triage, reducing investigation time from 30-90 minutes to under 5 minutes. The solution uses Amazon Quick's Model Context Protocol integration to orchestrate workflows across AWS services (S3, Glue, SageMaker, Bedrock) and Snowflake's AI Data Cloud.

#agents #workflow automation #compliance #Snowflake

Read article →
Why OpenAI and Anthropic are hiring forward deployed engineer teams AI 8.0
The New Stack

Why OpenAI and Anthropic are hiring forward deployed engineer teams

OpenAI and Anthropic are building forward deployed engineering (FDE) teams that embed directly with enterprise clients to integrate AI models into production systems. MIT research found 95 percent of enterprise AI pilots failed due to implementation challenges, not model quality, driving this shift toward hands-on deployment support.

#agents #enterprise AI #deployment #implementation

Read article →
AI in SRE: Where and how Google is deploying agentic AI to improve operations AI 8.0
Google Cloud Blog

AI in SRE: Where and how Google is deploying agentic AI to improve operations

Google SRE is adopting agentic AI to manage increasing system complexity driven by microservices, distributed infrastructure, and AI-generated code. The deployment addresses challenges from wider geographical distribution, complex product topologies, and continuous deployment pipelines by using AI as a force multiplier while maintaining operational control.

#agentic-AI #SRE #operations #reliability

Read article →
Evolving Dataflow to process massive datasets for machine learning Cloud 8.0
Google Cloud Blog

Evolving Dataflow to process massive datasets for machine learning

Google evolved its Flume data platform (successor to MapReduce) with innovations for large-scale ML data processing, including liquid sharding for dynamic work-unit splitting. These features are now available in Google Cloud Dataflow, addressing scalability and efficiency demands from training frontier models like Gemini and autonomous systems like Waymo.

#Dataflow #data-processing #machine-learning #scalability

Read article →
Nano Banana 2 and Nano Banana Pro are generally available, and already powering creative workflows AI 7.0
Google Cloud Blog

Nano Banana 2 and Nano Banana Pro are generally available, and already powering creative workflows

Google announces general availability of Nano Banana 2 (Gemini 3.1 Flash Image) and Nano Banana Pro (Gemini 3 Pro Image) via Gemini Enterprise Agent Platform for image generation and editing in enterprise workflows. Nano Banana 2 now supports video files as input prompts for context-aware image generation, with 1K and 2K output capabilities GA and 4K in preview.

#LLM #image generation #multimodal #agents

Read article →
Go from resource-level to business-level maintenance in Google Cloud Cloud 6.0
Google Cloud Blog

Go from resource-level to business-level maintenance in Google Cloud

Google Cloud launches App-centric maintenance visibility in Unified Maintenance, shifting from resource-focused to application-aware maintenance tracking. The feature integrates with App Hub to aggregate maintenance schedules for GKE clusters, Compute Engine VMs, and AlloyDB instances into a single business-oriented dashboard.

#observability #maintenance #GKE #Compute Engine

Read article →
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer Security 7.0
The Hacker News

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors are actively exploiting a critical, now-patched vulnerability in FortiClient Endpoint Management Server (EMS) to deliver credential-stealing malware across managed endpoints. The campaign abused trusted endpoint management infrastructure to distribute payloads, demonstrating how attackers weaponize legitimate management tools to compromise organizations at scale.

#CVE #FortiClient #credential-theft #endpoint-management

Read article →
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal Security 6.0
The Hacker News

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

Microsoft has publicly advocated for Coordinated Vulnerability Disclosure (CVD) practices, urging researchers to notify vendors before public disclosure. The statement follows removal of a researcher's GitHub account after they disclosed multiple zero-day details, reigniting debate over responsible disclosure timing and researcher accountability.

#CVE #disclosure-policy #zero-day #responsible-disclosure

Read article →
ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More Security 5.0
The Hacker News

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

A weekly threat bulletin covering 18+ security incidents including a Claude security plugin vulnerability, Azure privilege escalation, Kali365 MFA bypass, and phishing campaigns. The digest highlights recurring patterns of low-effort malware distribution, exposed infrastructure, and social-engineering tactics across multiple platforms and services.

#threat-roundup #Azure #MFA-bypass #privilege-escalation

Read article →
How we built Cloudflare's data platform and an AI agent on top of it AI 8.0
Cloudflare Blog

How we built Cloudflare's data platform and an AI agent on top of it

Cloudflare built Town Lake, a unified SQL analytics platform consolidating data from 50+ disparate systems (Postgres, ClickHouse, Kafka, BigQuery), and Skipper, an AI data agent that answers plain-English questions in seconds. The system solves data sprawl by providing a single interface to petabytes of production data across 330+ cities.

#AI agents #data platform #analytics #LLM

Read article →
Claw-style AI agents are coming to the enterprise. The governance infrastructure is still catching up. AI 7.0
The New Stack

Claw-style AI agents are coming to the enterprise. The governance infrastructure is still catching up.

Automation Anywhere announced EnterpriseClaw, wrapping Nvidia's OpenShell runtime (which enables agents to replicate human keyboard actions) in centralized governance for enterprise deployment. The platform integrates with Cisco, Okta, and OpenAI, but reveals a critical gap: enterprises lack security and IAM frameworks to safely govern autonomous agents with device-level file system access and runtime tool creation.

#agents #governance #enterprise #OpenShell

Read article →
The agentic identity crisis: Why your security isn't ready for the AI revolution AI 8.0
The New Stack

The agentic identity crisis: Why your security isn't ready for the AI revolution

As AI agents move from chatbots to autonomous API callers and file readers, legacy IAM models fail. Agents operate in an identity vacuum, inheriting broad service-account or human-user permissions, creating a 144:1 agent-to-human ratio in production. The article maps the shift from input-validation security to action-based threat modeling, where prompt injection triggers malicious tool calls rather than display errors.

#agents #IAM #security #prompt-injection

Read article →
How Endava builds an agentic organization with Codex AI 6.0
OpenAI Blog

How Endava builds an agentic organization with Codex

Endava deployed OpenAI's Codex to automate software delivery workflows, reducing requirements analysis from weeks to hours through agentic task orchestration. The case study demonstrates how agents can coordinate across teams to accelerate development cycles and reduce manual handoffs.

#agents #LLM #automation #software delivery

Read article →
New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users" AI 7.0
The Hacker News

New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

LayerX Security's State of AI Usage Report 2026 reveals that enterprise AI risk is not evenly distributed but concentrated among a small group of power users and specific platforms. The research highlights a significant visibility gap in how organizations understand and track their actual AI exposure and usage patterns.

#AI-security #risk-concentration #visibility-gap #enterprise-AI

Read article →
Debugging the undebuggable: building observability into probabilistic AI systems AI 8.0
The New Stack

Debugging the undebuggable: building observability into probabilistic AI systems

Traditional debugging fails for LLM and agent workflows because failures are non-deterministic, reasoning steps are hidden, and retrieval can silently return low-quality context. The article shifts the paradigm from log-based debugging to observability-driven engineering, showing how to instrument AI services to surface hidden reasoning, tool failures, and retrieval quality.

#observability #LLM #agents #debugging

Read article →
The Kubernetes integration tax: Prometheus, Cilium and production reality DevOps 8.0
CNCF Blog

The Kubernetes integration tax: Prometheus, Cilium and production reality

Platform teams spend 80% of their time wiring together 20-30 CNCF projects (Prometheus, ArgoCD, Cilium, cert-manager, Velero, Sealed Secrets, Kyverno) rather than installing or tuning them individually. The article documents the hidden cost of integration: Prometheus had no ServiceMonitors for Cilium metrics, leaving on-call engineers blind despite Hubble working correctly, illustrating how integration gaps cascade across production stacks.

#Kubernetes #Prometheus #Cilium #integration

Read article →
JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware Security 7.0
The Hacker News

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

A previously undocumented threat actor (JINX-0164) has targeted cryptocurrency organizations using recruitment-themed social engineering and custom macOS malware. The campaign specifically targeted CI/CD infrastructure, demonstrating sophisticated targeting of development pipelines to facilitate digital asset theft.

#threat-actor #macOS-malware #social-engineering #CI/CD-targeting

Read article →