📋 Weekly Digest
📅 18.10 — 25.10.2026
Найважливіше за тиждень:
☁️ Cloud & DevOps
1. AWS Continuum for code vulnerabilities is now generally available
2. Security Update on PHP2Shell: Impact for Docker Customers
3. ActiveState Partners with Docker to Secure the Open Source in Enterprise Containers
4. Your Agent Runs in a Docker Sandbox. Now It Can Join a Team.
5. Introducing Amazon ECS Gateway: A fully-managed ingress solution for ECS services
🔒 Security
1. OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
2. Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
3. Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
4. Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
5. Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a B
📦 Releases
1. v3.6.0-rc3
2. v3.6.0-rc4
3. v3.3.18
4. gitops-engine/v3.6.0-rc4: chore: bump version to 3.6.0-rc4 on release-3.6 branch (#30347)
5. v1.17.0
🇺🇦 DOU.UA
1. Айтівець виділив 150 тисяч гривень на укриття у фізико-математичному ліцеї КНУ
2. 100% бронювання не буде. В уряді розповіли, як зміняться правила для критичних підприємств
3. «Ви не уявляєте, наскільки Фінляндія готова до війни». Бліц із CEO Sine Engineering про новий R&
4. В Україні може бути власна система супутникового зв’язку. Міноборони домовляється з Nokia та ICEYE
5. 100 днів на посаді міністерки. Що робить Оксана Ферчук у Мінцифри і які питання є у ринку
——————————————
📢 Підписуйся → @devopsdaily
🤖 #WeeklyDigest #DevOpsDaily
📅 18.10 — 25.10.2026
Найважливіше за тиждень:
☁️ Cloud & DevOps
1. AWS Continuum for code vulnerabilities is now generally available
2. Security Update on PHP2Shell: Impact for Docker Customers
3. ActiveState Partners with Docker to Secure the Open Source in Enterprise Containers
4. Your Agent Runs in a Docker Sandbox. Now It Can Join a Team.
5. Introducing Amazon ECS Gateway: A fully-managed ingress solution for ECS services
🔒 Security
1. OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
2. Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
3. Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
4. Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
5. Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a B
📦 Releases
1. v3.6.0-rc3
2. v3.6.0-rc4
3. v3.3.18
4. gitops-engine/v3.6.0-rc4: chore: bump version to 3.6.0-rc4 on release-3.6 branch (#30347)
5. v1.17.0
🇺🇦 DOU.UA
1. Айтівець виділив 150 тисяч гривень на укриття у фізико-математичному ліцеї КНУ
2. 100% бронювання не буде. В уряді розповіли, як зміняться правила для критичних підприємств
3. «Ви не уявляєте, наскільки Фінляндія готова до війни». Бліц із CEO Sine Engineering про новий R&
4. В Україні може бути власна система супутникового зв’язку. Міноборони домовляється з Nokia та ICEYE
5. 100 днів на посаді міністерки. Що робить Оксана Ферчук у Мінцифри і які питання є у ринку
——————————————
📢 Підписуйся → @devopsdaily
🤖 #WeeklyDigest #DevOpsDaily
🛡️ BleepingComputer
📰 AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS News
📰 AWS Weekly Roundup: Amazon Polly Generative engine, TorchNeuron for Trainium, and more (October 26, 2026)
A few weeks ago I presented to a small group of commercial and technology leaders from Brazilian agribusiness at the AWS office in São Paulo. My talk ran through where generative AI fits across the different stages of an agribusiness operation, and the point I kept returning to is that the markets w…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS Weekly Roundup: Amazon Polly Generative engine, TorchNeuron for Trainium, and more (October 26, 2026)
A few weeks ago I presented to a small group of commercial and technology leaders from Brazilian agribusiness at the AWS office in São Paulo. My talk ran through where generative AI fits across the different stages of an agribusiness operation, and the point I kept returning to is that the markets w…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS DevOps Blog
📰 Tracing failures across Terraform state boundaries with AWS DevOps Agent
When a change in one Terraform stack silently breaks an application in another, the team seeing the symptoms often doesn't own the stack that caused it. This post shows how AWS DevOps Agent traces the root cause across Terraform state boundaries, then pairs with Kiro to generate the fix.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Tracing failures across Terraform state boundaries with AWS DevOps Agent
When a change in one Terraform stack silently breaks an application in another, the team seeing the symptoms often doesn't own the stack that caused it. This post shows how AWS DevOps Agent traces the root cause across Terraform state boundaries, then pairs with Kiro to generate the fix.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS Containers
📰 Measuring developer experience on an Amazon EKS developer platform
Most platform teams can't prove their internal developer platform is improving software delivery. This post shows how to automatically collect the four DORA metrics (deployment frequency, lead time for changes, change failure rate, and failed deployment recovery time) on an Amazon EKS platform using…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Measuring developer experience on an Amazon EKS developer platform
Most platform teams can't prove their internal developer platform is improving software delivery. This post shows how to automatically collect the four DORA metrics (deployment frequency, lead time for changes, change failure rate, and failed deployment recovery time) on an Amazon EKS platform using…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 OpenAI GPT-6.1 Terra is now generally available on Amazon Bedrock
Today, AWS announces the general availability of OpenAI GPT-6.1 Terra on Amazon Bedrock. GPT-6.1 Terra expands the GPT-6 family with a balance of capability, speed, and cost efficiency for everyday workloads. As the newest model in the Terra line, GPT-6.1 Terra combines detailed visual reasoning, ac…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 OpenAI GPT-6.1 Terra is now generally available on Amazon Bedrock
Today, AWS announces the general availability of OpenAI GPT-6.1 Terra on Amazon Bedrock. GPT-6.1 Terra expands the GPT-6 family with a balance of capability, speed, and cost efficiency for everyday workloads. As the newest model in the Terra line, GPT-6.1 Terra combines detailed visual reasoning, ac…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Former pentester used ARTEX AI to steal 8.2 million data records
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Former pentester used ARTEX AI to steal 8.2 million data records
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 Fleet-wide computer vision lifecycle at the edge with SageMaker SDK v3
Fleet-wide computer vision needs a model per camera, not one model for the whole fleet. This post presents a working Amazon SageMaker SDK v3 reference architecture that trains, quality-gates, compiles per-camera models with SageMaker Neo, and versions thousands of them, with an AWS Step Functions la…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Fleet-wide computer vision lifecycle at the edge with SageMaker SDK v3
Fleet-wide computer vision needs a model per camera, not one model for the whole fleet. This post presents a working Amazon SageMaker SDK v3 reference architecture that trains, quality-gates, compiles per-camera models with SageMaker Neo, and versions thousands of them, with an AWS Step Functions la…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☸️ Kubernetes Blog
📰 Announcing the Workload Conformance Working Group
We are excited to announce that the Kubernetes community now has a Workload Conformance Working Group . The working group is writing a shared standard for how workloads behave at runtime on Kubernetes. To get it right, we need input from the people who build those workloads and from the people who r…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Announcing the Workload Conformance Working Group
We are excited to announce that the Kubernetes community now has a Workload Conformance Working Group . The working group is writing a shared standard for how workloads behave at runtime on Kubernetes. To get it right, we need input from the people who build those workloads and from the people who r…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Amazon WorkSpaces Core Managed Instances now supports ModifyVolume API
Amazon WorkSpaces Core Managed Instances now supports the ModifyVolume API, which lets you change volume size, volume type, IOPS, or throughput in place, without detaching the volume or restarting the instance. Previously, changing storage capacity or performance on a deployed managed instance requi…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon WorkSpaces Core Managed Instances now supports ModifyVolume API
Amazon WorkSpaces Core Managed Instances now supports the ModifyVolume API, which lets you change volume size, volume type, IOPS, or throughput in place, without detaching the volume or restarting the instance. Previously, changing storage capacity or performance on a deployed managed instance requi…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 Groundhog Day for AI agents: Prompt caching patterns for using OpenAI models on Amazon Bedrock
Every time an agent takes a step, it re-reads its entire context before acting. Here is how prompt caching for OpenAI models on Amazon Bedrock lets your agent remember, cutting input cost and latency without resending the same tools, instructions, and history every turn.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Groundhog Day for AI agents: Prompt caching patterns for using OpenAI models on Amazon Bedrock
Every time an agent takes a step, it re-reads its entire context before acting. Here is how prompt caching for OpenAI models on Amazon Bedrock lets your agent remember, cutting input cost and latency without resending the same tools, instructions, and history every turn.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🇺🇦 DOU.UA
📰 Мільйони constraints і години обчислень: як ми переносили NP-складну optimization-задачу на GPU
Привіт! Мене звати Владислав Бутенко , я R&D Product Manager у SoftServe. Понад шість років працюю з автоматизацією та AI-продуктами, зокрема займаюся рішеннями на базі Oracle Cloud Infrastructure і NVIDIA для великого бізнесу. Зараз ми в компанії дуже активно розвиваємо цей напрямок і у вересні розширили партнерство з Oracle. У цьому матеріалі я х…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
📰 Мільйони constraints і години обчислень: як ми переносили NP-складну optimization-задачу на GPU
Привіт! Мене звати Владислав Бутенко , я R&D Product Manager у SoftServe. Понад шість років працюю з автоматизацією та AI-продуктами, зокрема займаюся рішеннями на базі Oracle Cloud Infrastructure і NVIDIA для великого бізнесу. Зараз ми в компанії дуже активно розвиваємо цей напрямок і у вересні розширили партнерство з Oracle. У цьому матеріалі я х…
🔗 Читати далі
🤖 #DOU #Ukraine #DevOpsDaily
☁️ AWS Security Blog
📰 AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first ever Cloud High (PBHH) security assessment with 172 assessed services and features. Completion of this assessment, effective September 18, 2026, m…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first ever Cloud High (PBHH) security assessment with 172 assessed services and features. Completion of this assessment, effective September 18, 2026, m…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Amazon Corretto October 2026 Patch Updates
On October 26, 2026 Amazon announced a patch update for the following Amazon Corretto Long-Term Support (LTS) and Feature Release (FR) versions of OpenJDK. Corretto 27.0.1.0.11, 25.0.5.0.10, 21.0.13.0.11, 17.0.21.0.11, 11.0.33.0.10, and 8u512 are now available for download . Amazon Corretto is a no-…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon Corretto October 2026 Patch Updates
On October 26, 2026 Amazon announced a patch update for the following Amazon Corretto Long-Term Support (LTS) and Feature Release (FR) versions of OpenJDK. Corretto 27.0.1.0.11, 25.0.5.0.10, 21.0.13.0.11, 17.0.21.0.11, 11.0.33.0.10, and 8u512 are now available for download . Amazon Corretto is a no-…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🛡️ BleepingComputer
📰 Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. [...]
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🤖 AWS ML Blog
📰 AWS named a Leader in the 2026 Gartner Magic Quadrant for Contact Center as a Service
AWS has been named a Leader in the 2026 Gartner Magic Quadrant for Contact Center as a Service (CCaaS) for AWS Connect Customer. This recognition marks an important milestone for our team, and it reflects years of work pushing on what's possible in customer experience.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 AWS named a Leader in the 2026 Gartner Magic Quadrant for Contact Center as a Service
AWS has been named a Leader in the 2026 Gartner Magic Quadrant for Contact Center as a Service (CCaaS) for AWS Connect Customer. This recognition marks an important milestone for our team, and it reflects years of work pushing on what's possible in customer experience.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS Security Blog
📰 Introducing Route 53 Resolved IP Validation for AWS Network Firewall
Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network Firewall domain rules match the name that the client puts in the request, and the client chooses that name. The connections for protocols such as SSH and…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Introducing Route 53 Resolved IP Validation for AWS Network Firewall
Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network Firewall domain rules match the name that the client puts in the request, and the client chooses that name. The connections for protocols such as SSH and…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
☁️ AWS What's New
📰 Amazon ECS now supports GPU sharing with NVIDIA Multi-Process Service (MPS)
Amazon Elastic Container Service (Amazon ECS) now supports GPU sharing with NVIDIA Multi-Process Service (MPS), enabling you to run multiple Amazon ECS tasks concurrently on a single NVIDIA GPU. GPU sharing helps you increase GPU utilization and reduce infrastructure costs for workloads that use onl…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Amazon ECS now supports GPU sharing with NVIDIA Multi-Process Service (MPS)
Amazon Elastic Container Service (Amazon ECS) now supports GPU sharing with NVIDIA Multi-Process Service (MPS), enabling you to run multiple Amazon ECS tasks concurrently on a single NVIDIA GPU. GPU sharing helps you increase GPU utilization and reduce infrastructure costs for workloads that use onl…
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
🐳 Docker Blog
📰 Win the Agentic Era, Together: Introducing the Docker Navigator Partner Program
Docker is launching the Navigator Partner Program, with three tiers, co-selling benefits, and a new incentive for every registered AI governance deal.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily
📰 Win the Agentic Era, Together: Introducing the Docker Navigator Partner Program
Docker is launching the Navigator Partner Program, with three tiers, co-selling benefits, and a new incentive for every registered AI governance deal.
🔗 Read more
🤖 #DevOps #News #DevOpsDaily