Tag: Devops and ci cd
-
The browser is now an AI runtime: Security risks in Chrome's on-device models
Posted on November 8, 2026, Level intermediate Resource Length long
Google's integration of Gemini Nano into Chrome creates an unmonitored AI runtime accessible to any website, introducing prompt injection and parasitic compute risks that bypass traditional cloud security controls. By Kirill Gelfand , Vladimir Kropotov , Fyodor Yarochkin , David Tulis.
Tags security-and-privacy ai-and-machine-learning architecture-and-apis devops-and-ci-cd
-
The PHP vulnerability scramble exposed the web's hidden maintenance crisis
Posted on October 28, 2026, Level beginner Resource Length short
An OpenAI model uncovered two critical PHP flaws, triggering a global update race that revealed how fragile and under resourced the internet's foundational software has become. By Omar Gallaga.
Tags security-and-privacy backend-development devops-and-ci-cd
-
What is a software bill of materials (SBOM)?
Posted on October 22, 2026, Level intermediate Resource Length long
As software supply chain security shifts from a best practice to a regulatory baseline, engineering leaders must decide how to integrate Software Bill of Materials (SBOM) into their automated delivery pipelines. By GitHub.
Tags security-and-privacy software-engineering devops-and-ci-cd leadership-and-career
-
The unified dependency graph: Stop agentic AI from outrunning its own architecture
Posted on October 20, 2026, Level intermediate Resource Length long
Data platforms treat infrastructure and derived decisions as separate worlds. A unified dependency graph joins them so agentic systems can trace outputs back to raw inputs without losing the thread across transformations. By Animesh Kumar.
Tags ai-and-machine-learning architecture-and-apis backend-development cloud-and-infrastructure devops-and-ci-cd
-
AI agents aren't 'going rogue': Labs skip security basics
Posted on October 14, 2026, Level beginner Resource Length medium
Frontier AI labs attribute model escapes to misalignment, but cybersecurity experts attribute them to long-neglected containment failures. Labs reject external security advice, prioritizing AI safety over proven practices. CISOs must demand vendor accountability and enforce baseline security controls. By Cynthia Brumfield.
Tags security-and-privacy software-engineering data-and-analytics cloud-and-infrastructure devops-and-ci-cd
-
Open Source Summit Europe 2026 puts a price tag on forking and a deadline on agents
Posted on October 8, 2026, Level beginner Resource Length long
A three-day conference turned into a ledger of costs, compliance, and constraints that large engineering teams can no longer ignore. By Tom Smith.
Tags software-engineering devops-and-ci-cd linux security-and-privacy business-and-emerging-tech
-
Experimental Bicep testing framework automates Azure IaC validation
Posted on October 2, 2026, Level beginner Resource Length short
A new experimental framework enables automated, in-memory validation of Azure Bicep templates within CI/CD pipelines, closing a critical gap in Infrastructure as Code testing. A practical proof of concept showing how to use the experimental Bicep testing framework with Pester to validate Azure Monitor log alert resources and automate assertions in CI/CD pipelines. By Stanislav Zhelyazkov.
Tags devops-and-ci-cd software-engineering cloud-and-infrastructure
-
DevOps vs DevSecOps: What is the difference and why does it matter?
Posted on September 30, 2026, Level beginner Resource Length short
The article begins by noting that both DevOps and DevSecOps aim to accelerate and stabilize software delivery, but they diverge in how security is handled. DevOps establishes a culture of shared responsibility between developers and operations, employing CI/CD, automation, infrastructure as code, containers/Kubernetes, and monitoring to achieve speed with stability. DevSecOps builds on this foundation by treating security as an integral, continuous activity rather than a discrete gate at the end of the lifecycle. By Atul Sharma.
Tags cloud-and-infrastructure devops-and-ci-cd security-and-privacy software-engineering
-
Zombie workloads haunt data center efficiency efforts
Posted on September 19, 2026, Level beginner Resource Length long
Idle AI and cloud jobs are draining scarce GPU capacity and budgets. New FinOps strategies and observability tools are emerging to hunt down these costly remnants before they cripple operations. By Jack Vaughan.
Tags cloud-and-infrastructure ai-and-machine-learning devops-and-ci-cd data-and-analytics
-
Monitoring the Monitor: enabling internal telemetry in the OpenTelemetry Collector
Posted on September 16, 2026, Level advanced Resource Length long
Treating the OpenTelemetry Collector as invisible plumbing creates blind spots. By enabling internal telemetry, engineers can detect pipeline failures, queue buildup, and resource exhaustion before they compromise incident response. By Vivek Anandaraman.
Tags cloud-and-infrastructure devops-and-ci-cd software-engineering
-
DockerWakeUp: Running containers on demand instead of 24/7
Posted on September 14, 2026, Level advanced Resource Length short
A practitioner tests DockerWakeUp, a proxy that scales containers to zero when idle. It saves resources and tightens the attack surface, but cold-start latency is a real cost that changes when the tool fits. By Brandon Lee.
Tags devops-and-ci-cd cloud-and-infrastructure backend-development
-
Best Buy scales AI workloads and secures access with Workforce Identity Federation
Posted on August 18, 2026, Level beginner Resource Length short
Best Buy modernized its identity architecture by adopting Google Cloud's Workforce Identity Federation to securely federate Microsoft Entra ID identities. This move eliminated complex synchronization pipelines and service accounts, enabling tens of thousands of users to access advanced analytics and AI resources with existing credentials. The solution reduces administrative friction while ensuring strict control, auditability, and scalability for enterprise cloud operations. By Kishor Patil, Stephen Cakebread.
Tags security-and-privacy devops-and-ci-cd business-and-emerging-tech