Archive - DevOps Bulletin

Digest #238: Cursor extension backdoor, GitHub runners on AWS and 1M Postgres workflows/sec

Also inside: Cloudflare's D1 control plane, cheaper BigQuery queries, and rotating 1,000 service-account passwords.

Oct 30 • Mohamed Labouardy

Digest #237: LiteLLM's compromised release, PHP's two critical RCEs, GCP billing hijacks and cheaper AI reviews

Also inside: Brotli's impact beyond Node.js, patching EC2 without replacing instances, and testing multi-tenant GPU clusters without GPUs.

Oct 25 • Mohamed Labouardy

Digest #236: AWS agents exploit 33 of 37 CVEs, Anthropic replaces Git, microVMs and Postgres upgrades

Also inside: debugging Kubernetes Jobs before a Pod exists, cutting Azure costs, and tracing a running process back to what started it.

Oct 17 • Mohamed Labouardy

Digest #235: GhostAction's 346-repo burst, Airbnb's MySQL regression, Kubernetes' 10-second shutdown and AI vulnerability triage

Also inside: Sam Newman on resilient systems, encrypting secrets with SOPS, and five GitHub security settings you can enable from your terminal.

Oct 9 • Mohamed Labouardy

Digest #234: Doom in SQL, GitLab pushes by email, Linux kernel escapes and Postgres OOM tests

Also inside: GitHub Actions runners on Lambda microVMs, OpenAI's forum-to-repo exploit chain, and rebalancing EKS Pods across availability zones.

Oct 2 • Mohamed Labouardy

September 2026

Digest #233: When IaC can't recover your data, Postgres's 20-minute lookup, Kubernetes PVC tracking and IAM fixes in pull requests

Also inside: migrating production n8n on EKS, splitting AWS commitment discounts fairly, and monitoring Kubernetes with OpenObserve.

Sep 25 • Mohamed Labouardy

Digest #232: Why AWS Multi-Region Is Still Hard, The GitHub Actions Caches You're Missing, Claude Code on a Cloud VM and the Cloud Waste…

Why multi-region AWS is still hard, the caches your GitHub Actions workflows are missing, PostgreSQL 19's plan advice, and a Kubernetes-native registry…

Sep 18 • Mohamed Labouardy

Digest #231: Jenkins is Dead? GitHub Actions Alternative, 1 in 10 LiteLLM Gateways Still Use the Demo Key, Spotify's 90% Token Cut and Git…

Also: how Datadog absorbed 20x more Git traffic from CI without slowing down, the benchmark that says RTK doesn't make AI coding cheaper, the Karpenter…

Sep 11 • Mohamed Labouardy

Digest #230: AWS root accounts sprayed at 150+ orgs, Shai-Hulud hunts 469 secret paths, Nvidia buys Hugging Face and Kubernetes scales to…

Also inside: a Cilium bug made pods take 90s to start, what happened when someone broke a K8s cluster on purpose to test AI debugging agents, and how…

Sep 4 • Mohamed Labouardy

August 2026

Digest #229: AWS acquires DuckDB, Cloudflare frees 100TB of RAM, your executable as a SQLite database and on-call as theatre

Also inside: a $500-a-month AI security analyst built on AWS, Databricks running 2,000 AI incident investigations a day, and proof that plan mode…

Aug 28 • Mohamed Labouardy

Digest #228: Cloudflare's 131,000 AI code reviews a month at $0.98 each, Postgres 300x faster, Git rebuilt on S3 and Linux 7.2

Also inside: why a custom linter beats an AI reviewer, Werner Vogels on the control planes behind Aurora DSQL, and how PlanetScale backs up petabytes of…

Aug 21 • Mohamed Labouardy

Digest #227: Terabytes of credentials leaked in a supply chain attack, Figma's security agents, Kubernetes validation cut to 2 minutes and…

Also inside: a Lambda that spiked an AWS bill 1,200% in one weekend, and why cloning a coding-agent repo runs code before your first prompt.

Aug 14 • Mohamed Labouardy

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts