📋 Weekly Digest
📅 06.09 — 13.09.2026
Найважливіше за тиждень:
☁️ Cloud & DevOps
1. DevOps’ Three Ways Were Never About Tooling
2. Kubernetes v1.37: Native Histograms Graduates to Beta
3. GitHub’s August Outages Show Growth Is Outpacing Infrastructure
4. GitHub Widens the Door on Advanced Security Trials
5. Why AI Agents Shouldn’t Guess at Vulnerability Exploitability
🔒 Security
1. Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
2. CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
3. When the Whole Company Adopts AI: What It Does to Your SOC
4. OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
5. GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
📦 Releases
1. Helm v3.22.0
2. Helm v4.3.0
3. v1.17.0-beta1
4. v1.16.2
5. 3.13.3 / 2026-09-07
🇺🇦 DOU.UA
1. Склади дистриб’ютора Ajax Systems постраждали внаслідок російської атаки
2. Росіяни вдарили по офісу інженерної команди «Київстар» у Києві
3. Які компанії найактивніше шукають QA-фахівців
4. Досвід знецінюється | QA отримують більше | Маркетологи штурмують IT | DefTech набирає оберти
5. У компанії N-iX новий СЕО — що про нього відомо
——————————————
📢 Підписуйся → @devopsdaily
🤖 #WeeklyDigest #DevOpsDaily
📅 06.09 — 13.09.2026
Найважливіше за тиждень:
☁️ Cloud & DevOps
1. DevOps’ Three Ways Were Never About Tooling
2. Kubernetes v1.37: Native Histograms Graduates to Beta
3. GitHub’s August Outages Show Growth Is Outpacing Infrastructure
4. GitHub Widens the Door on Advanced Security Trials
5. Why AI Agents Shouldn’t Guess at Vulnerability Exploitability
🔒 Security
1. Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
2. CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
3. When the Whole Company Adopts AI: What It Does to Your SOC
4. OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
5. GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
📦 Releases
1. Helm v3.22.0
2. Helm v4.3.0
3. v1.17.0-beta1
4. v1.16.2
5. 3.13.3 / 2026-09-07
🇺🇦 DOU.UA
1. Склади дистриб’ютора Ajax Systems постраждали внаслідок російської атаки
2. Росіяни вдарили по офісу інженерної команди «Київстар» у Києві
3. Які компанії найактивніше шукають QA-фахівців
4. Досвід знецінюється | QA отримують більше | Маркетологи штурмують IT | DefTech набирає оберти
5. У компанії N-iX новий СЕО — що про нього відомо
——————————————
📢 Підписуйся → @devopsdaily
🤖 #WeeklyDigest #DevOpsDaily
🔧 DevOps.com
📰 More JFrog Artifactory Bugs Are Under Attack, and All Three Have Patches
Attackers are actively exploiting three JFrog Artifactory flaws, exposing how slow patching can turn artifact repositories into software supply chain attack paths.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 More JFrog Artifactory Bugs Are Under Attack, and All Three Have Patches
Attackers are actively exploiting three JFrog Artifactory flaws, exposing how slow patching can turn artifact repositories into software supply chain attack paths.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Webinar: How malicious OAuth apps can lead to Google Workspace breaches
Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying solely on stolen passwords. This webinar examines two attacks to show how these breaches unfold and which security controls can help stop them. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Webinar: How malicious OAuth apps can lead to Google Workspace breaches
Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying solely on stolen passwords. This webinar examines two attacks to show how these breaches unfold and which security controls can help stop them. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS News
📰 AWS Weekly Roundup: OpenAI GPT-6 Astra on Amazon Bedrock, Amazon Quick desktop GA, Kiro for students, and more (September 14, 2026)
There’s a particular energy to mid-September in New York. Pumpkin spice lattes are flowing, temperatures are dropping, and it’s nearly sweater weather. The city is back at full speed, and so is the AWS launch calendar. This week that energy showed up in a new frontier model on Amazon Bedrock, a desk…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS Weekly Roundup: OpenAI GPT-6 Astra on Amazon Bedrock, Amazon Quick desktop GA, Kiro for students, and more (September 14, 2026)
There’s a particular energy to mid-September in New York. Pumpkin spice lattes are flowing, temperatures are dropping, and it’s nearly sweater weather. The city is back at full speed, and so is the AWS launch calendar. This week that energy showed up in a new frontier model on Amazon Bedrock, a desk…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS Security Blog
📰 AWS Security Reference Architecture: A deep dive into PCI DSS compliance
Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations tha…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS Security Reference Architecture: A deep dive into PCI DSS compliance
Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations tha…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Qwen3.6-35B-A3B-NVFP4 and Wan2.1-T2V-1.3B-Diffusers models now available on Amazon SageMaker JumpStart
NVIDIA's Qwen3.6-35B-A3B-NVFP4 and Alibaba's Wan2.1-T2V-1.3B-Diffusers models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These two models bring specialized capabilities spanning agentic coding with long-context reasoning…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Qwen3.6-35B-A3B-NVFP4 and Wan2.1-T2V-1.3B-Diffusers models now available on Amazon SageMaker JumpStart
NVIDIA's Qwen3.6-35B-A3B-NVFP4 and Alibaba's Wan2.1-T2V-1.3B-Diffusers models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These two models bring specialized capabilities spanning agentic coding with long-context reasoning…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Hybrid Software Development: Benefits and Challenges
Fortunately, companies do not always have to choose between in-house vs outsourcing. Instead they can adopt a hybrid development strategy, which combines the capacities of internal and external IT teams. This approach allows companies to capitalize on the strengths of both traditional software devel…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Hybrid Software Development: Benefits and Challenges
Fortunately, companies do not always have to choose between in-house vs outsourcing. Instead they can adopt a hybrid development strategy, which combines the capacities of internal and external IT teams. This approach allows companies to capitalize on the strengths of both traditional software devel…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Japan's Digital Agency says VPN flaw exposed 246,000 personnel records
Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Japan's Digital Agency says VPN flaw exposed 246,000 personnel records
Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore
Amazon Bedrock AgentCore Identity now offers a Consent portal, a managed web experience and session binding endpoint for AgentCore Gateway. This post walks through provisioning a portal, configuring GitHub and Slack 3LO targets, and the end-user consent flow, and shows how to review activity in AWS…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore
Amazon Bedrock AgentCore Identity now offers a Consent portal, a managed web experience and session binding endpoint for AgentCore Gateway. This post walks through provisioning a portal, configuring GitHub and Slack 3LO targets, and the end-user consent flow, and shows how to review activity in AWS…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☸️ Kubernetes Blog
📰 Kubernetes Changed Block Tracking API - Beta Differences
Changed Block Tracking (CBT) support for CSI drivers shipped as Alpha in September 2025. With the March 2026 v1.0.0 release of the external-snapshot-metadata project, the feature moved to Beta . If you aren't yet familiar with changed block tracking for storage in Kubernetes, the Alpha announcement…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Kubernetes Changed Block Tracking API - Beta Differences
Changed Block Tracking (CBT) support for CSI drivers shipped as Alpha in September 2025. With the March 2026 v1.0.0 release of the external-snapshot-metadata project, the feature moved to Beta . If you aren't yet familiar with changed block tracking for storage in Kubernetes, the Alpha announcement…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Ministral-3-3B-Instruct-2512 and Ministral-3-8B-Instruct-2512 models now available on Amazon SageMaker JumpStart
Mistral AI's Ministral-3-3B-Instruct-2512 and Ministral-3-8B-Instruct-2512 models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These two models from the Ministral 3 family bring compact, vision-capable language models purpo…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Ministral-3-3B-Instruct-2512 and Ministral-3-8B-Instruct-2512 models now available on Amazon SageMaker JumpStart
Mistral AI's Ministral-3-3B-Instruct-2512 and Ministral-3-8B-Instruct-2512 models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These two models from the Ministral 3 family bring compact, vision-capable language models purpo…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Stop Chasing 100% Test Coverage: Why DevOps Teams Need to Test Smarter, Not More
Every software team eventually runs into the same question: How much testing is enough? For years, the default answer has been “more.” More automated tests. More regression suites. More environments. More devices. But as applications become more complex and release cycles continue to acc…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Stop Chasing 100% Test Coverage: Why DevOps Teams Need to Test Smarter, Not More
Every software team eventually runs into the same question: How much testing is enough? For years, the default answer has been “more.” More automated tests. More regression suites. More environments. More devices. But as applications become more complex and release cycles continue to acc…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Microsoft confirms KB5002914 Excel update breaks copy and paste
Microsoft has confirmed that copy and paste may silently fail for some Excel users after installing the September 2026 KB5002914 security update. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Microsoft confirms KB5002914 Excel update breaks copy and paste
Microsoft has confirmed that copy and paste may silently fail for some Excel users after installing the September 2026 KB5002914 security update. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 Abnormal AI: Amazon Bedrock AgentCore for agentic email security at scale
Learn how Abnormal AI deployed Amazon Bedrock AgentCore Code Interpreter as an ephemeral compute scratch pad for the agents behind its real-time email threat detection at billion-message scale, plus the sandbox design decisions and practical lessons for builders deploying Code Interpreter in product…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Abnormal AI: Amazon Bedrock AgentCore for agentic email security at scale
Learn how Abnormal AI deployed Amazon Bedrock AgentCore Code Interpreter as an ephemeral compute scratch pad for the agents behind its real-time email threat detection at billion-message scale, plus the sandbox design decisions and practical lessons for builders deploying Code Interpreter in product…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☸️ Kubernetes Blog
📰 Kubernetes v1.37: Memory QoS Graduates to Beta
Memory QoS has graduated to Beta in Kubernetes v1.37 and is now enabled by default. On Linux nodes running cgroup v2, the feature uses the memory controller to give the kernel better guidance on how to treat container memory. It was first introduced as Alpha in v1.22, and expanded in v1.36 with tier…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Kubernetes v1.37: Memory QoS Graduates to Beta
Memory QoS has graduated to Beta in Kubernetes v1.37 and is now enabled by default. On Linux nodes running cgroup v2, the feature uses the memory controller to give the kernel better guidance on how to treat container memory. It was first introduced as Alpha in v1.22, and expanded in v1.36 with tier…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS Security Blog
📰 Architecting resilient authentication with Amazon Cognito multi-Region replication
Your consumer identity and access management (CIAM) system is the foundation of your customer experience. It’s how users sign in, access services, and engage with your applications. As your business scales across geographies, ensuring authentication is always available becomes a core architectural r…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Architecting resilient authentication with Amazon Cognito multi-Region replication
Your consumer identity and access management (CIAM) system is the foundation of your customer experience. It’s how users sign in, access services, and engage with your applications. As your business scales across geographies, ensuring authentication is always available becomes a core architectural r…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Amazon SageMaker AI now supports instance preference lists for training and processing jobs
Today, Amazon SageMaker AI announces instance preference lists for training and processing jobs, making it easier and faster to find compute capacity for your workloads. Many AI training, fine-tuning, and data processing workloads run comparably well on any of several instance types or sizes. Howeve…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon SageMaker AI now supports instance preference lists for training and processing jobs
Today, Amazon SageMaker AI announces instance preference lists for training and processing jobs, making it easier and faster to find compute capacity for your workloads. Many AI training, fine-tuning, and data processing workloads run comparably well on any of several instance types or sizes. Howeve…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔀 HashiCorp Blog
📰 Simplifying Terraform for IBM Z with intent-driven workflows
Learn how intent-driven workflows introduce a new interaction model for IBM Terraform for Z and LinuxONE, helping organizations modernize infrastructure operations through guided, repeatable agentic workflows.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Simplifying Terraform for IBM Z with intent-driven workflows
Learn how intent-driven workflows introduce a new interaction model for IBM Terraform for Z and LinuxONE, helping organizations modernize infrastructure operations through guided, repeatable agentic workflows.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🔧 DevOps.com
📰 Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence
Java 27 strengthens enterprise security with monthly critical patch updates and post-quantum TLS 1.3 support, helping organizations prepare for AI-driven threats and future quantum risks.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence
Java 27 strengthens enterprise security with monthly critical patch updates and post-quantum TLS 1.3 support, helping organizations prepare for AI-driven threats and future quantum risks.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily