🛡️ BleepingComputer
📰 Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 Customize Amazon Quick embedded chat into your application
Amazon Quick embedded chat brings a conversational AI interface into your web application. This post walks through customizing the embedded chat with container and SDK styling, branding removal, and a custom agent persona so it matches your brand's look, feel, and voice.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Customize Amazon Quick embedded chat into your application
Amazon Quick embedded chat brings a conversational AI interface into your web application. This post walks through customizing the embedded chat with container and SDK styling, branding removal, and a custom agent persona so it matches your brand's look, feel, and voice.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS Security Blog
📰 Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway
When deploying AI agents with Amazon Bedrock AgentCore, organizations benefit from built-in modern support for OAuth 2.0, AWS Identity and Access Management (IAM), and API key authentication through Amazon Bedrock AgentCore Gateway. However, some enterprise environments still use legacy authenticati…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway
When deploying AI agents with Amazon Bedrock AgentCore, organizations benefit from built-in modern support for OAuth 2.0, AWS Identity and Access Management (IAM), and API key authentication through Amazon Bedrock AgentCore Gateway. However, some enterprise environments still use legacy authenticati…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Amazon Bedrock now supports SpaceXAI Grok 4.6
Amazon Bedrock now supports SpaceXAI Grok 4.6, SpaceXAI's latest flagship model built for long-running agents and ambitious interactive and visual work. Grok 4.6 offers a 500K context window and configurable reasoning efforts (low, medium, high, xhigh). Grok 4.6 builds on previous generations of Gro…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon Bedrock now supports SpaceXAI Grok 4.6
Amazon Bedrock now supports SpaceXAI Grok 4.6, SpaceXAI's latest flagship model built for long-running agents and ambitious interactive and visual work. Grok 4.6 offers a 500K context window and configurable reasoning efforts (low, medium, high, xhigh). Grok 4.6 builds on previous generations of Gro…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🐳 Docker Blog
📰 Coding Agent Horror Stories: The Command You Already Approved
Learn how AI coding agents can run attacker code through commands you already approved and how Docker Sandboxes limit what an attack can reach.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Coding Agent Horror Stories: The Command You Already Approved
Learn how AI coding agents can run attacker code through commands you already approved and how Docker Sandboxes limit what an attack can reach.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Cloudsmith Extends Policies and Controls to Secure Application Binaries
Cloudsmith this week revealed it has expanded the policy management and continuous risk detection capabilities it makes available within its software artifact management platform to now include policy templates, cooldown policies, and expanded evaluation triggers. Alison Sickelka, vice president of…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Cloudsmith Extends Policies and Controls to Secure Application Binaries
Cloudsmith this week revealed it has expanded the policy management and continuous risk detection capabilities it makes available within its software artifact management platform to now include policy templates, cooldown policies, and expanded evaluation triggers. Alison Sickelka, vice president of…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 Amazon Bedrock AgentCore payments is now generally available: Enabling agents to transact safely and autonomously at scale
Amazon Bedrock AgentCore payments is now generally available, enabling AI agents to autonomously transact at scale with built-in spending guardrails, protocol-agnostic payment orchestration, and production-ready observability.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon Bedrock AgentCore payments is now generally available: Enabling agents to transact safely and autonomously at scale
Amazon Bedrock AgentCore payments is now generally available, enabling AI agents to autonomously transact at scale with built-in spending guardrails, protocol-agnostic payment orchestration, and production-ready observability.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛠️ DevOps Tools Weekly Update
Нові та трендові DevOps інструменти з GitHub:
📘 KeygraphHQ/shannon ⭐ 46.9k
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove
📝 TypeScript
📒 isno/theByteBook ⭐ 8.5k
⭐ 【出版书籍】京东购买链接 https://item.jd.com/14531549.html 深入讲解内核网络、Kubernetes、ServiceMesh、容器等云原生相关技术。经历实践检验的“大规模分布式系统”开发指南。
📝 JavaScript
🔹 werf/werf ⭐ 4.7k
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
📝 Go
——————————————
📢 Підписуйся → @devopsdaily
🤖 #DevOpsTools #OpenSource #DevOpsDaily
Нові та трендові DevOps інструменти з GitHub:
📘 KeygraphHQ/shannon ⭐ 46.9k
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove
📝 TypeScript
📒 isno/theByteBook ⭐ 8.5k
⭐ 【出版书籍】京东购买链接 https://item.jd.com/14531549.html 深入讲解内核网络、Kubernetes、ServiceMesh、容器等云原生相关技术。经历实践检验的“大规模分布式系统”开发指南。
📝 JavaScript
🔹 werf/werf ⭐ 4.7k
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
📝 Go
——————————————
📢 Підписуйся → @devopsdaily
🤖 #DevOpsTools #OpenSource #DevOpsDaily
GitHub
GitHub - KeygraphHQ/shannon: Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies…
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. ...
☁️ AWS What's New
📰 Amazon Bedrock now supports OpenAI models in India
Amazon Bedrock now supports the OpenAI GPT-5.6 models (Terra and Luna) in India, with India Geo cross-Region inference. Customers with regulatory requirements of in-country inferencing can now use OpenAI models at scale ensuring that inferencing is processed within India. Cross-Region inference auto…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon Bedrock now supports OpenAI models in India
Amazon Bedrock now supports the OpenAI GPT-5.6 models (Terra and Luna) in India, with India Geo cross-Region inference. Customers with regulatory requirements of in-country inferencing can now use OpenAI models at scale ensuring that inferencing is processed within India. Cross-Region inference auto…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Are LLMs Equally Good (or Bad) at Building Secure Software?
An SCW study finds a large variance in how frontier and budget LLMs perform across different frameworks, and explains the striking cost variance.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Are LLMs Equally Good (or Bad) at Building Secure Software?
An SCW study finds a large variance in how frontier and budget LLMs perform across different frameworks, and explains the striking cost variance.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Critical RCE flaw in Windows IKE Extension now actively exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions component. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Critical RCE flaw in Windows IKE Extension now actively exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions component. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 Implement vector-prompt document classification using Amazon Bedrock
Learn how to build a multi-agent document classification solution on Amazon Bedrock using the Strands Agents SDK. Three specialized agents combine textual analysis with Claude Haiku 4.5 and visual similarity search with Amazon Titan Multimodal Embeddings to accurately classify insurance documents su…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Implement vector-prompt document classification using Amazon Bedrock
Learn how to build a multi-agent document classification solution on Amazon Bedrock using the Strands Agents SDK. Three specialized agents combine textual analysis with Claude Haiku 4.5 and visual similarity search with Amazon Titan Multimodal Embeddings to accurately classify insurance documents su…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Amazon Quick adds deny by default for custom permissions
Amazon Quick custom permissions now include deny by default, a governance setting that automatically restricts new AI capabilities before they reach users. Previously, new AI capabilities were available to all users on release, requiring administrators to react after the fact. With deny by default,…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon Quick adds deny by default for custom permissions
Amazon Quick custom permissions now include deny by default, a governance setting that automatically restricts new AI capabilities before they reach users. Previously, new AI capabilities were available to all users on release, requiring administrators to react after the fact. With deny by default,…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Cursor Launches Origin Code Hosting Platform as GitHub Rival
AI coding provider Cursor has launched Origin, a code hosting platform that puts source code and AI coding agents inside the Cursor development environment. The new coding platform expands the company into a market long dominated by GitHub. The rollout arrived as GitHub suffered a major outage lasti…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Cursor Launches Origin Code Hosting Platform as GitHub Rival
AI coding provider Cursor has launched Origin, a code hosting platform that puts source code and AI coding agents inside the Cursor development environment. The new coding platform expands the company into a market long dominated by GitHub. The rollout arrived as GitHub suffered a major outage lasti…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 How Jumio built a real-time feature store on AWS
Learn how Jumio built a centralized, real-time feature store on AWS with Amazon SageMaker Feature Store, Amazon Managed Service for Apache Flink, and Amazon Kinesis Data Streams. The architecture delivers sub-100ms feature serving for fraud detection and saves approximately $120,000 annually.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 How Jumio built a real-time feature store on AWS
Learn how Jumio built a centralized, real-time feature store on AWS with Amazon SageMaker Feature Store, Amazon Managed Service for Apache Flink, and Amazon Kinesis Data Streams. The architecture delivers sub-100ms feature serving for fraud detection and saves approximately $120,000 annually.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🇺🇦 DOU.UA
📰 Розбір першої автономної AI-атаки: Інцидент з проникненням у Hugging Face
У липні 2026 року відбувся прецедент, який остаточно змінив уявлення про кібербезпеку AI-систем. Дослідницька модель від OpenAI, що проходила оцінку в ізольованому середовищі ExploitGym , самостійно вийшла за межі пісочниці й протягом 4.5 днів повністю автономно атакувала продакшен-інфраструктуру Hugging Face. Без жодного наказу від людини модель в…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
📰 Розбір першої автономної AI-атаки: Інцидент з проникненням у Hugging Face
У липні 2026 року відбувся прецедент, який остаточно змінив уявлення про кібербезпеку AI-систем. Дослідницька модель від OpenAI, що проходила оцінку в ізольованому середовищі ExploitGym , самостійно вийшла за межі пісочниці й протягом 4.5 днів повністю автономно атакувала продакшен-інфраструктуру Hugging Face. Без жодного наказу від людини модель в…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
☁️ AWS Security Blog
📰 Propagate user authorization context in AI agents with Amazon Bedrock AgentCore
Many teams now deploy AI agents that pull from Amazon DynamoDB tables, document repositories, software as a service (SaaS) platforms, and internal knowledge bases to answer questions and automate workflows. A key risk in these deployments is that the agent has no awareness of who’s asking, so it mig…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Propagate user authorization context in AI agents with Amazon Bedrock AgentCore
Many teams now deploy AI agents that pull from Amazon DynamoDB tables, document repositories, software as a service (SaaS) platforms, and internal knowledge bases to answer questions and automate workflows. A key risk in these deployments is that the agent has no awareness of who’s asking, so it mig…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS Containers
📰 Deep dive into Amazon EKS certificate authority rotation
Amazon EKS now provides a managed, non-disruptive lifecycle for rotating your cluster's certificate authority (CA), with automated safeguards and rollback. This deep dive explains how CA rotation works, what AWS handles versus what you must update, and how to walk through the rotation lifecycle on y…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Deep dive into Amazon EKS certificate authority rotation
Amazon EKS now provides a managed, non-disruptive lifecycle for rotating your cluster's certificate authority (CA), with automated safeguards and rollback. This deep dive explains how CA rotation works, what AWS handles versus what you must update, and how to walk through the rotation lifecycle on y…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily