🕵️ The Hacker News
📰 Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager
Oracle has released security updates to address a critical security flaw impacting Identity Manager and Web Services Manager that could be exploited to achieve remote code execution. The vulnerability, tracked as CVE-2026-21992, carries a CVSS score of 9.8 out of a maximum of 10.0. "This vulnerabili…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager
Oracle has released security updates to address a critical security flaw impacting Identity Manager and Web Services Manager that could be exploited to achieve remote code execution. The vulnerability, tracked as CVE-2026-21992, carries a CVSS score of 9.8 out of a maximum of 10.0. "This vulnerabili…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 AWS Neuron announces support for Dynamic Resource Allocation with Amazon EKS
AWS announces the Neuron Dynamic Resource Allocation (DRA) driver for Amazon Elastic Kubernetes Service (EKS), bringing Kubernetes-native hardware-aware scheduling to AWS Trainium-based instances. The Neuron DRA driver publishes rich device attributes directly to the Kubernetes scheduler, enabling t…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS Neuron announces support for Dynamic Resource Allocation with Amazon EKS
AWS announces the Neuron Dynamic Resource Allocation (DRA) driver for Amazon Elastic Kubernetes Service (EKS), bringing Kubernetes-native hardware-aware scheduling to AWS Trainium-based instances. The Neuron DRA driver publishes rich device attributes directly to the Kubernetes scheduler, enabling t…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🕵️ The Hacker News
📰 FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to individuals with high intelligence value, the U.S. Cybersecurity and Infrastructure…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to individuals with high intelligence value, the U.S. Cybersecurity and Infrastructure…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 AWS DataSync now supports AWS Secrets Manager for all location types
AWS DataSync now supports AWS Secrets Manager for credential management across all location types, including Hadoop Distributed File System (HDFS), Amazon FSx for Windows File Server, and Amazon FSx for NetApp ONTAP. Previously, Secrets Manager integration was limited to a subset of location types,…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS DataSync now supports AWS Secrets Manager for all location types
AWS DataSync now supports AWS Secrets Manager for credential management across all location types, including Hadoop Distributed File System (HDFS), Amazon FSx for Windows File Server, and Amazon FSx for NetApp ONTAP. Previously, Secrets Manager integration was limited to a subset of location types,…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🕵️ The Hacker News
📰 Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages
The threat actors behind the supply chain attack targeting the popular Trivy scanner are suspected to be conducting follow-on attacks that have led to the compromise of a large number of npm packages with a previously undocumented self-propagating worm dubbed CanisterWorm. The name is a reference to…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages
The threat actors behind the supply chain attack targeting the popular Trivy scanner are suspected to be conducting follow-on attacks that have led to the compromise of a large number of npm packages with a previously undocumented self-propagating worm dubbed CanisterWorm. The name is a reference to…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📋 Weekly Digest
📅 15.03 — 22.03.2026
Найважливіше за тиждень:
☁️ Cloud & DevOps
1. Announcing Ingress2Gateway 1.0: Your Path to Gateway API
2. Running Agents on Kubernetes with Agent Sandbox
3. The SaaS Observability Era is Ending: Why BYOC Is the Future of Telemetry
4. Secure Code Warrior AI Agent Applies Policies to AI Generated Code
5. OpenAI Bolsters AI Coding with Acquisition of Python Toolmaker Astral
🔒 Security
1. FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
2. Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager
3. Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages
4. CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026
5. Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets
📦 Releases
1. v1.36.0-beta.0
2. v3.4.0-rc2
3. v1.34.6
4. v1.35.3
5. v1.33.10
🇺🇦 DOU.UA
1. У Дія City 10 резидентів-єдинорогів. Як пройшов 2025 рік для спецрежиму і для IT-галузі
2. Українські підрозділи збивають іранські «шахеди» щонайменше в п’яти країнах на Близькому Сході
3. Як ветерани запускають стартапи в Україні: 6 історій зі SKELAR Veteran Venture Program
4. Мінфін опублікував другий законопроєкт про ПДВ для ФОП. Що змінилося
5. Премія DOU 2026. Повний список переможців
——————————————
📢 Підписуйся → @devopsdaily
🤖 #WeeklyDigest #DevOpsDaily
📅 15.03 — 22.03.2026
Найважливіше за тиждень:
☁️ Cloud & DevOps
1. Announcing Ingress2Gateway 1.0: Your Path to Gateway API
2. Running Agents on Kubernetes with Agent Sandbox
3. The SaaS Observability Era is Ending: Why BYOC Is the Future of Telemetry
4. Secure Code Warrior AI Agent Applies Policies to AI Generated Code
5. OpenAI Bolsters AI Coding with Acquisition of Python Toolmaker Astral
🔒 Security
1. FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
2. Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager
3. Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages
4. CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026
5. Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets
📦 Releases
1. v1.36.0-beta.0
2. v3.4.0-rc2
3. v1.34.6
4. v1.35.3
5. v1.33.10
🇺🇦 DOU.UA
1. У Дія City 10 резидентів-єдинорогів. Як пройшов 2025 рік для спецрежиму і для IT-галузі
2. Українські підрозділи збивають іранські «шахеди» щонайменше в п’яти країнах на Близькому Сході
3. Як ветерани запускають стартапи в Україні: 6 історій зі SKELAR Veteran Venture Program
4. Мінфін опублікував другий законопроєкт про ПДВ для ФОП. Що змінилося
5. Премія DOU 2026. Повний список переможців
——————————————
📢 Підписуйся → @devopsdaily
🤖 #WeeklyDigest #DevOpsDaily
🕵️ The Hacker News
📰 CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws impacting Apple, Craft CMS, and Laravel Livewire to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch them by April 3, 2026. The vulnerabilities that have come under…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws impacting Apple, Craft CMS, and Laravel Livewire to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch them by April 3, 2026. The vulnerabilities that have come under…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Five Great DevOps Job Opportunities
Explore the latest DevOps.com weekly jobs report. Highlighting premier opportunities at Bank of America, Microsoft, and GEICO, with salary insights up to $300,000 for senior engineering and platform leadership roles.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Five Great DevOps Job Opportunities
Explore the latest DevOps.com weekly jobs report. Highlighting premier opportunities at Bank of America, Microsoft, and GEICO, with salary insights up to $300,000 for senior engineering and platform leadership roles.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🕵️ The Hacker News
📰 Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems
Threat actors are suspected to be exploiting a maximum-severity security flaw impacting Quest KACE Systems Management Appliance (SMA), according to Arctic Wolf. The cybersecurity company said it observed malicious activity starting the week of March 9, 2026, in customer environments that's consisten…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems
Threat actors are suspected to be exploiting a maximum-severity security flaw impacting Quest KACE Systems Management Appliance (SMA), according to Arctic Wolf. The cybersecurity company said it observed malicious activity starting the week of March 9, 2026, in customer environments that's consisten…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🇺🇦 DOU.UA
📰 Як я будував рекомендаційну систему для книжкового агрегатора: Data Engineering на практиці
Йоу, спільното DOU! Мене звати Анатолій Шара. Частина з вас може пам’ятати мій попередній матеріал про MLOps, а для тих, з ким ми ще не знайомі: я — NLP Engineer й уже ось як п’ятий рік служу в лавах ЗСУ. Крайній рік став особисто для мене непростим періодом. Я інтуїтивно відчував, що вдруге в житті на мене насувається ПТСР, тому, щоб пом’якшити йо…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
📰 Як я будував рекомендаційну систему для книжкового агрегатора: Data Engineering на практиці
Йоу, спільното DOU! Мене звати Анатолій Шара. Частина з вас може пам’ятати мій попередній матеріал про MLOps, а для тих, з ким ми ще не знайомі: я — NLP Engineer й уже ось як п’ятий рік служу в лавах ЗСУ. Крайній рік став особисто для мене непростим періодом. Я інтуїтивно відчував, що вдруге в житті на мене насувається ПТСР, тому, щоб пом’якшити йо…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
🔧 DevOps.com
📰 From AI Code to Production: The Case for FeatureOps
As 80% of developers adopt AI coding tools, delivery stability is hitting a wall. Discover why "FeatureOps" and feature flagging are the critical runtime controls needed in 2026 to close the understanding gap and prevent catastrophic outages like those seen at Google and Cloudflare.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 From AI Code to Production: The Case for FeatureOps
As 80% of developers adopt AI coding tools, delivery stability is hitting a wall. Discover why "FeatureOps" and feature flagging are the critical runtime controls needed in 2026 to close the understanding gap and prevent catastrophic outages like those seen at Google and Cloudflare.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🕵️ The Hacker News
📰 Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware
Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware. The email campaigns take advantage of the urgency and time-sensitive nature of emails to send phishing messages masquerading as refund notices, payroll for…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware
Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware. The email campaigns take advantage of the urgency and time-sensitive nature of emails to send phishing messages masquerading as refund notices, payroll for…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS News
📰 AWS Weekly Roundup: NVIDIA Nemotron 3 Super on Amazon Bedrock, Nova Forge SDK, Amazon Corretto 26, and more (March 23, 2026)
Hello! I’m Daniel Abib, and this is my first AWS Weekly Roundup. I’m a Senior Specialist Solutions Architect at AWS, focused on the generative AI and Amazon Bedrock. With over 28 years of experience in solution architecture, software development, and cloud architecture, I help Startups & Enterprises…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS Weekly Roundup: NVIDIA Nemotron 3 Super on Amazon Bedrock, Nova Forge SDK, Amazon Corretto 26, and more (March 23, 2026)
Hello! I’m Daniel Abib, and this is my first AWS Weekly Roundup. I’m a Senior Specialist Solutions Architect at AWS, focused on the generative AI and Amazon Bedrock. With over 28 years of experience in solution architecture, software development, and cloud architecture, I help Startups & Enterprises…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 AWS HealthImaging is now available in Europe (London)
AWS HealthImaging is now available in the AWS Europe (London) Region. AWS HealthImaging is a HIPAA-eligible service that empowers healthcare providers, life sciences organizations, and their software partners to store, analyze, and share medical images at petabyte scale. AWS HealthImaging offers ful…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS HealthImaging is now available in Europe (London)
AWS HealthImaging is now available in the AWS Europe (London) Region. AWS HealthImaging is a HIPAA-eligible service that empowers healthcare providers, life sciences organizations, and their software partners to store, analyze, and share medical images at petabyte scale. AWS HealthImaging offers ful…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 PagerDuty Extends Scope and Reach of AI SRE Platform
PagerDuty has extended the capabilities and reach of its artificial intelligence (AI) agents to enable them to be invoked directly from within the Slack messaging platform. Additionally, the AI SRE Agent that is embedded within the PagerDuty Operations Cloud platform can now also leverage the Model…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 PagerDuty Extends Scope and Reach of AI SRE Platform
PagerDuty has extended the capabilities and reach of its artificial intelligence (AI) agents to enable them to be invoked directly from within the Slack messaging platform. Additionally, the AI SRE Agent that is embedded within the PagerDuty Operations Cloud platform can now also leverage the Model…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🕵️ The Hacker News
📰 ⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
Another week, another reminder that the internet is still a mess. Systems people thought were secure are being broken in simple ways, showing many still ignore basic advisories. This edition covers a mix of issues: supply chain attacks hitting CI/CD setups, long-abused IoT devices being shut down, a…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 ⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
Another week, another reminder that the internet is still a mess. Systems people thought were secure are being broken in simple ways, showing many still ignore basic advisories. This edition covers a mix of issues: supply chain attacks hitting CI/CD setups, long-abused IoT devices being shut down, a…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔑 Krebs on Security
📰 ‘CanisterWorm’ Springs Wiper Attack Targeting Iran
A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or have Farsi set as the default language.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 ‘CanisterWorm’ Springs Wiper Attack Targeting Iran
A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or have Farsi set as the default language.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🇺🇦 DOU.UA
📰 Azure Entra ID: App Registrations, Service Principals та Enterprise Apps
Зізнайтеся, скільки разів ви читали офіційну документацію Microsoft і ловили себе на думці, що після прочитаного запитань стало ще більше? Особливо це стосується Entra ID (старого доброго Azure AD). Коли ми будуємо мікросервісну архітектуру, налаштовуємо CI/CD пайплайни або просто пояснюємо колегам, як правильно інтегрувати новий сервіс, рано чи пі…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
📰 Azure Entra ID: App Registrations, Service Principals та Enterprise Apps
Зізнайтеся, скільки разів ви читали офіційну документацію Microsoft і ловили себе на думці, що після прочитаного запитань стало ще більше? Особливо це стосується Entra ID (старого доброго Azure AD). Коли ми будуємо мікросервісну архітектуру, налаштовуємо CI/CD пайплайни або просто пояснюємо колегам, як правильно інтегрувати новий сервіс, рано чи пі…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
☁️ AWS Security Blog
📰 IAM policy types: How and when to use them
June 3, 2022: Original publication date of this post. This post has been updated to add the additional IAM policy types: Resource control policies. You manage access in AWS by creating policies and attaching them to AWS Identity and Access Management (IAM) principals (roles, users, or groups of user…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 IAM policy types: How and when to use them
June 3, 2022: Original publication date of this post. This post has been updated to add the additional IAM policy types: Resource control policies. You manage access in AWS by creating policies and attaching them to AWS Identity and Access Management (IAM) principals (roles, users, or groups of user…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🐳 Docker Blog
📰 Trivy supply chain compromise: What Docker Hub users should know
We wanted to provide you information about a security incident that we became aware of that affects customers who use the Aqua Security Vulnerability scanner (Trivy) across multiple distribution channels including Docker Hub, GitHub, and npm. Between 18:24 UTC on March 19, 2026 and 01:36 UTC on Marc…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Trivy supply chain compromise: What Docker Hub users should know
We wanted to provide you information about a security incident that we became aware of that affects customers who use the Aqua Security Vulnerability scanner (Trivy) across multiple distribution channels including Docker Hub, GitHub, and npm. Between 18:24 UTC on March 19, 2026 and 01:36 UTC on Marc…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Anthropic Extends Claude Code Into Messaging Apps, Challenging OpenClaw’s Lead
Anthropic has debuted a new capability for its Claude Code platform, called Channels, that enables a number of key improvements. Notably, it allows users to communicate with the coding assistant through messaging platforms like Telegram and Discord. More important, Channels is continuously available…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Anthropic Extends Claude Code Into Messaging Apps, Challenging OpenClaw’s Lead
Anthropic has debuted a new capability for its Claude Code platform, called Channels, that enables a number of key improvements. Notably, it allows users to communicate with the coding assistant through messaging platforms like Telegram and Discord. More important, Channels is continuously available…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily