🔑 Krebs on Security

📰 Microsoft Patch Tuesday, March 2026 Edition

Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing "zero-day" flaws this month (compared to February's five zero-day treat), but as usual some patches may deserve more rapid attention from organi…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🚨 CISA Advisories

🚨 Honeywell IQ4x BMS Controller
🆔 CVE-2026-3611 | Severity: 🔴 CRITICAL

View CSAF Summary Successful exploitation of this vulnerability could allow an unauthorized attacker to access controller management settings, control components, disclose information, or cause a denial-of-service condition. The following versions of Honeywell IQ4x BMS Controller are affected: IQ4E >=Firmware_v3.50_3.44|<4.36_build_4.3.7.9 (CVE-2026-3611) IQ412 >=Firmware_v3.50_3.44|<4.36_build_4.…

🔗 Details

🤖 #CVE #Security #DevOpsDaily

🚨 CISA Advisories

🚨 Ceragon Siklu MultiHaul and EtherHaul Series
🆔 CVE-2025-57176 | Severity: 🔴 CRITICAL

View CSAF Summary Successful exploitation of this vulnerability could result in arbitrary file upload to the target equipment. The following versions of Ceragon Siklu MultiHaul and EtherHaul Series are affected: MultiHaul MH-B100-CCS MultiHaul MH-T200-CCC MultiHaul MH-T200-CNN MultiHaul MH-T201-CNN EtherHaul EH-8010FX EtherHaul EH-500TX EtherHaul EH-600TX EtherHaul EH-614TX EtherHaul EH-700TX Ethe…

🔗 Details

🤖 #CVE #Security #DevOpsDaily

🚨 CISA Advisories

🚨 Apeman Cameras
🆔 CVE-2025-11126 | Severity: 🔴 CRITICAL

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to take control of the device or view camera feeds. The following versions of Apeman Cameras are affected: ID71 vers:all/* (CVE-2025-11126, CVE-2025-11851, CVE-2025-11852) CVSS Vendor Equipment Vulnerabilities v3 9.8 Apeman Apeman Cameras Insufficiently Protected Credentials, Improper Neutralization of Input…

🔗 Details

🤖 #CVE #Security #DevOpsDaily

🚨 CISA Advisories

🚨 Lantronix EDS3000PS and EDS5000
🆔 CVE-2025-67039 | Severity: 🔴 CRITICAL

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code with root-level privileges. The following versions of Lantronix EDS3000PS and EDS5000 are affected: EDS3000PS 3.1.0.0R2 (CVE-2025-67039, CVE-2025-70082, CVE-2025-67041) EDS5000 2.1.0.0R3 (CVE-2025-67034, CVE-2025-67035, CVE-2025-67036, CVE-2025-67037, CVE-2025-67038)…

🔗 Details

🤖 #CVE #Security #DevOpsDaily

🇺🇦 DOU.UA

📰 HOLYWATER TECH більше не в екосистемі Genesis. Чому компанія вийшла і коли

Українська продуктова компанія HOLYWATER TECH вийшла з екосистеми Genesis та отримала незалежне управління. Про це повідомляє Scroll Media з посиланням на власні джерела. Нагадаємо, що глобальна команда налічує понад 200 спеціалістів. З них понад 70% (близько 140) людей працюють в Україні. 📌 Що відомо Раніше HOLYWATER TECH була частиною екосистеми…

🔗 Читати далі

🤖 #DOU #Ukraine #DevOpsDaily

🇺🇦 DOU.UA

📰 Дрони проти ракет: чи можуть українські перехоплювачі замінити ППО

Наскільки ефективні дрони-перехоплювачі, які недоліки їх масового виробництва та як у ці дрони інтегрують штучний інтелект — про це та інше розповідає військовий з позивним Лінк, боєць 12 бригади спеціального призначення «Азов». Дивіться новий випуск рубрики DOU DefTech на нашому ютуб-каналі, а стислу текстову версію розмови читайте далі. Партнер р…

🔗 Читати далі

🤖 #DOU #Ukraine #DevOpsDaily

🇺🇦 DOU.UA

📰 Рада відхилила законопроєкт про ПДВ для ФОПів. Повторного розгляду може не бути

Верховна Рада не підтримала у першому читанні законопроєкт, який передбачав низку податкових змін, зокрема можливе запровадження ПДВ для ФОПів, оподаткування посилок та податки для цифрових платформ. Про це повідомив нардеп Ярослав Железняк. Йдеться про пакет змін, який раніше обговорювали в межах співпраці України з Міжнародним валютним фондом. За…

🔗 Читати далі

🤖 #DOU #Ukraine #DevOpsDaily

🐳 Docker Blog

📰 Building AI Teams: How Docker Sandboxes and Docker Agent Transform Development

It's 11 PM. You've got a JIRA ticket open, an IDE with three unsaved files, a browser tab on Stack Overflow, and another on documentation. You're context-switching between designing UI, writing backend APIs, fixing bugs, and running tests. You're wearing all the hats, product manager, designer, engi…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🔧 DevOps.com

📰 JetBrains Launches Air and Junie CLI to Blend Traditional IDE with AI Agents

JetBrains has launched a new “agentic” tooling stack that pairs a multi‑agent development environment, Air, with a standalone, LLM‑agnostic coding agent, Junie CLI. If you know JetBrains, you probably know it for Kotlin, the statically typed Java Virtual Machine (JVM) language used mostly for Androi…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🔧 DevOps.com

📰 The Observability Bill is Coming Due – and AI Wrote Most of It

Observability has always had a data quality problem. AI coding agents just made it catastrophically worse. Shimmy sits down with the co-founders of Sawmills to dig into why unmanaged telemetry is the unglamorous DevOps crisis that is quietly killing budgets — and what an agentic telemetry management…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🔧 DevOps.com

📰 Gemini Code Assist Gets Agent Auto-Approve, Inline Diffs, and Custom Commands to Speed Up the Core Coding Loop

Google’s latest Gemini Code Assist updates focus on workflow, not hype: Agent Mode with Auto Approve, inline diffs, a Context Drawer, custom commands, Finish Changes, and Outlines streamline how developers review, trust, and integrate AI-generated code in VS Code and IntelliJ.

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🔧 DevOps.com

📰 Microsoft Azure Skills Plugin Gives AI Coding Agents a Playbook for Cloud Deployment

Microsoft’s new Azure Skills Plugin closes the gap between AI-written code and production deployments by packaging expert Azure knowledge as executable skills, backed by MCP servers for real infrastructure actions and AI workflows—bringing guardrails, consistency, and speed to DevOps and platform te…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🔧 DevOps.com

📰 Anthropic Code Review Dispatches Agent Teams to Catch the Bugs That Skim Reads Miss

Anthropic Code Review dispatches agent teams to find bugs in PRs. Multi-agent analysis, severity ranking, and inline fixes for Teams and Enterprise.

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🕵️ The Hacker News

📰 CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting n8n to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2025-68613 (CVSS score: 9.9), concerns a case o…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🕵️ The Hacker News

📰 Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes

Agentic web browsers that leverage artificial intelligence (AI) capabilities to autonomously execute actions across multiple websites on behalf of a user could be trained and tricked into falling prey to phishing and scam traps. The attack, at its core, takes advantage of AI browsers' tendency to re…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🕵️ The Hacker News

📰 Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials

Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two critical bugs that could result in arbitrary command execution. The vulnerabilities are listed below - CVE-2026-27577 (CVSS score: 9.4) - Expression sandbox escap…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🕵️ The Hacker News

📰 Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown

Meta on Wednesday said it disabled over 150,000 accounts associated with scam centers in Southeast Asia as part of a coordinated effort in partnership with authorities from Thailand, the U.S., the U.K., Canada, Korea, Japan, Singapore, the Philippines, Australia, New Zealand, and Indonesia. The effo…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🕵️ The Hacker News

📰 Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices

SAP has released security updates to address two critical security flaws that could be exploited to achieve arbitrary code execution on affected systems. The vulnerabilities in question listed below - CVE-2019-17571 (CVSS score: 9.8) - A code injection vulnerability in SAP Quotation Management Insur…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

🔑 Krebs on Security

📰 Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

A hacktivist group with links to Iran's intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports out of Ireland, Stryker's largest hub outside of the United States, said the company sent home more t…

🔗 Read more

🤖 #DevOps #News #DevOpsDaily

📦 Terraform Releases

🆕 v1.14.7

🔗 Release notes

🤖 #Release #DevOpsDaily