Attackers turned compromised PHP repositories into a botnet this week, using GitHub Actions runners to scan and exploit cPanel and WHM servers at scale.
It is the clearest sign yet that your CI minutes are somebody else's free infrastructure.
Elsewhere, PlanetScale explains how 768 database servers manage to look like one, and AWS shipped a control plane that finally gives platform teams a policy and cost story for Claude Code.

Learn Rogo’s IaC approach

How do platform engineers keep pace with a growing development team at a $2B AI company? On August 11, Lawrence Aiello, Platform Engineering Lead at Rogo, shares how. He’ll cover the modern IaC platforms Rogo weighed, the criteria that mattered, and how infrastructure that runs without attention frees his team to focus on enabling developers. Take Rogo’s criteria into your own platform decision - Register Now

Newsworthy stories

• Large-scale GitHub Actions abuse powers a distributed cPanel and WHM exploitation campaign

• Making 768 servers look like 1

• Introducing Claude apps gateway for AWS

• Merge conflicts are a process problem, not a Git problem

• Why do Kubernetes experts choose managed Kubernetes-as-a-service?

Tutorials of the week

• Automate CI/CD troubleshooting with AWS DevOps Agent and GitHub

• Safe Terraform auto-apply with conftest

• A green Kubernetes deployment does not mean a healthy application

• I built an AI SRE agent that diagnoses incidents before I open my laptop

• Your pod died of “out of ephemeral storage” but the disk is half empty

• Delightful integration tests in Rust

• A CISO’s guide to agentic AI

Videos of the week

Projects of the week

• tfplantui turns a Terraform plan into a navigable dependency graph in your terminal.

• Widen is a native Postgres GUI for macOS that answers questions in plain English and shows you the SQL before it runs.

• tuicr reviews code in a vim-keybound TUI and exports the result straight to GitHub or GitLab.

• zeedumper dumps the flagz, statusz and configz pages from Kubernetes components through the API server proxy.

• iron-proxy blocks all egress from untrusted workloads by default and swaps sandbox tokens for real credentials at the boundary.

Meme of the week

An attacker opened 37 pull requests against AsyncAPI last week, and eight minutes after the malicious one landed, the CI secrets were gone and four npm packages with 3 million weekly downloads were shipping a three-stage payload. The same week, Socket mapped a network of 222 fake GitHub repos pushing a Go module that was really a Windows malware loader, and Sysdig walked through an Azure tenant that fell in about an hour because permissions live across five systems that don’t talk to each other. The most interesting read, though, might be Rootly explaining why they killed their two-year-old small-PR rule now that 80% of their PRs are written by agents.

Newsworthy stories

• AsyncAPI supply chain compromise via GitHub Actions

• Malicious Go module exposes GitHub malware lure network spanning 222 repositories

• Anatomy of an Azure permission takeover

• Introducing a policy workflow built for Terraform

• Why we got rid of our small-PR rule

• How I migrated my website to Cloudflare and saved $228

• The first year managing an SRE team

Tutorials of the week

• The startup’s Postgres survival guide

• Hunting malware and malicious MCPs in memory on Kubernetes

• How I built my own home-lab: a single-node Kubernetes platform

• Authenticate legitimate AI agent traffic with AWS WAF Bot Control

• FinOps guardrails at provisioning time

• 6 security settings every GitHub maintainer should enable this week

• Multi-cluster databases on Kubernetes: architecture and deployment

• How to back up PostgreSQL in Docker

• From Terraform spaghetti to a production-grade GitOps platform

• To every agent its own database

Videos of the week

Projects of the week

• Cleat gives AI coding agents a per-project Docker sandbox so they can run fully autonomously without touching your host.

• Rusternetes is a ground-up reimplementation of Kubernetes in Rust that already passes 94% of the official conformance suite.

• Destructive Command Guard intercepts destructive shell commands before an AI agent gets to run them.

• OpenGeni is a self-hostable agent runtime with durable sessions, human approvals, and governed credentials.

• frp exposes a local server sitting behind NAT or a firewall to the internet.

• Plannotator is a local browser UI for marking up an agent’s plans and diffs, then sending the feedback straight back to it.

• git-filter-repo rewrites Git history to extract subdirectories, rename paths, or strip secrets.

Meme of the week

Someone opened their AWS console this week to a billing alert projecting $140 billion for the month, on an account that normally spends $2-3 on S3. Underneath the meme-worthy screenshot, the real theme was infrastructure hitting its limits: a kubelet memory leak in Kubernetes 1.36, four recurring failure patterns behind thousands of Postgres outages, and Slack rebuilding its entire EC2 fleet management from scratch. And with half this week’s tutorials about giving AI agents identity, memory, and APIs, the CNCF is already asking whether a pod is even the right place to run one.

AI is hitting your infra faster than you can govern it

AI is reshaping infrastructure, but the teams winning aren't adopting fastest, they're governing best. Spacelift surveyed 406 infrastructure and platform engineering leaders and found 93% have already had an AI-caused incident, while only 30% have a formal AI policy. The report reveals what separates the Pioneers, from platform engineering to the AI-specific signals most teams still aren't tracking.

Download the report to see what the most advanced teams do differently.

Newsworthy stories

• Just got an AWS billing alert projecting my monthly cost at $140B

• Fixing a kubelet memory leak in Kubernetes 1.36

• Inside the unpatched Argo CD RCE that leads to K8s cluster takeover

• Is a pod the right deployment unit for an AI agent?

• How we built Slack’s next-generation EC2 platform

• The four horsemen behind thousands of Postgres outages

• The database is not the data model

Tutorials of the week

• Just use Postgres for job queues

• Cloudflare as a data platform?

• How to encrypt Terraform state files

• Implement a unified memory from scratch via knowledge graphs

• Using Go for mobile apps

• Automating cross-repo documentation with GitHub Agentic Workflows

• Automated incident remediation with AWS DevOps Agent and Kiro CLI

• Detecting full table scans with SQLite

• Solving the identity crisis for AI agents

• Designing APIs for agents

Videos of the week

Projects of the week

• Portero shows every listening port on your machine, which process owns it, and lets you kill it or block the port from a built-in firewall.

• Greysight is an open-source dashboard for Snowflake cost observability that automatically suspends idle warehouses.

• Goshot generates polished code and terminal screenshots with syntax highlighting and automatic secret redaction.

• deja-vu is a memory index for coding agents that searches past session logs so they can recall previous solutions.

• pgsavvy is a terminal UI for PostgreSQL that works like “the lazygit for Postgres.”

• Khoj is a self-hostable AI second brain for semantic search and chat over your own documents.

• LobeHub is a platform for managing a team of AI agents as coordinated, schedulable units of work.

Meme of the week

A single attacker chained together application services, CI/CD pipelines, and secrets stores to compromise an entire AWS environment in 72 hours, and the responders tracking it say human-in-the-loop SIEM triage can’t keep pace with an AI moving that fast. The same week, GitHub’s AI agent was caught handing private repos to anyone who posted a nicely worded issue in a public repo, while an unpatched Argo CD flaw gave attackers full control of Kubernetes clusters. If you were counting on “Trusted Publishing” to keep your supply chain clean, one writeup this week argues that’s the wrong thing to trust.

Platform engineering on autopilot

Mendral is an autonomous AI DevOps engineer that handles the work your engineers shouldn’t be doing manually anymore: supply chain security, flaky CI, slow builds, and anything else specific to your stack - Try it out!

Newsworthy stories

• Lone attacker uses AI to breach AWS cloud environment in 72 hours

• Security flaw in Argo CD can let attackers take over Kubernetes clusters

• I replaced my GitHub runners with Lambda MicroVMs, and maybe you should too

• Why sandboxing your agent is not enough

• You shouldn’t trust Trusted Publishing

• Why AI has made security hard

Tutorials of the week

• Build your own vulnerability harness

• How we tricked GitHub’s AI agent into leaking private repos

• Turn your Amazon CloudWatch alarms into actionable signals

• PostgreSQL as a temporal database

• I built PR preview environments with AWS Lambda MicroVMs and cut staging costs by 78%

• Setting up continuous Terraform drift monitoring

• Experiences with local models for coding

• Three ways to give an AI agent an identity

• Multi-account AWS is about ownership, not accounts

Videos of the week

Projects of the week

• kpt is a package-centric toolchain that treats Kubernetes configuration as data, allowing you to edit and deliver manifests using reusable transformation functions rather than templating.

• Nox is a modular Go framework for attack surface management that bundles 300 built-in modules across 24 phases, taking you from passive OSINT to active vulnerability scanning.

• dotenvx is a secure env manager from the creator of dotenv, encrypting .env files with public-key cryptography.

• AnduinOS 2 is an Ubuntu-based Linux distribution designed to give newcomers a familiar, low-friction path to Linux, packaged almost entirely as shell scripts.

• GeoSQL is a Python skill that turns Claude, Codex, and Copilot into geospatial analytics agents across PostGIS, BigQuery, and Snowflake.

Meme of the week

This week, someone makes the case for keeping your databases off Kubernetes, AWS shares what breaks when you scale to 1 million Lambda functions, and LLMjacking takes an ugly turn: attackers are wiring stolen AI compute into autonomous pentesting agents. Also inside: a production migration off Ingress NGINX, pgvector running at scale on Aurora, and a field guide to corrupting SQLite on purpose.

Newsworthy stories

• Why I haven’t run my databases on Kubernetes

• Lessons learned from scaling to 1 million Lambda functions

• CloudTrail in CloudWatch isn’t very good

• Too many Postgres tables are bad

• How we migrated a production cluster from Ingress NGINX to Gateway API

• Attackers are using stolen AI compute to build offensive agentic tools

Tutorials of the week

• Claude Code for infrastructure as code

• Optimize LLM costs on Amazon Bedrock

• Multi-cluster Kubernetes explained

• Run any Dockerfile on Vercel

• AWS Amplify + Lambda MicroVMs

• Running pgvector in production on Amazon Aurora PostgreSQL

• Kubernetes on a fleet of AWS Lambda MicroVMs

• Blue/green deployments on Kubernetes with Argo Rollouts

• Getting started with Claude loops

• How to corrupt an SQLite database file

Videos of the week

Projects of the week

• terraform-review-agent reviews Terraform PRs with parallel security, cost, and style agents and posts one severity-ranked comment.

• datadog-saist is an AI-native SAST tool in Go that uses LLMs to catch vulnerabilities in Java, Python, and Go.

• ZeroFS serves S3 buckets as POSIX filesystems over NFS, 9P, and NBD, with built-in compression and encryption.

• pgsync syncs Postgres, MySQL, or MariaDB to Elasticsearch or OpenSearch in real time from a JSON document schema.

• ballast is a Kubernetes operator that right-sizes pod CPU and memory requests from real usage with in-place resize.

• tidb is a distributed, MySQL-compatible SQL database with HTAP and native vector search.

• herdr is a Rust terminal multiplexer for running multiple coding agents in parallel workspaces.

Meme of the week

This week’s supply chain news is rough: 32 malicious @redhat-cloud-services npm packages stealing credentials via a preinstall hook, and Mitiga finding spyware and 1,230+ leaked API keys hidden inside AI agent instruction files. On the building side, AWS shipped Lambda MicroVMs for running untrusted and AI-generated code in isolation, Postgres 19 hit beta, and one engineer doubled their test suite by dropping per-test SQL migrations.

Feature deployed. Did it actually work?

A change can pass CI and review and still break checkout the moment it deploys. Cleric follows every agent-written change into production, checks that it did what you meant, and gives you a verdict: it worked, fix this, or roll back - See it work on a real change.

Newsworthy stories

• How to become ridiculously good at Kubernetes

• Malware in AI instruction files, plus 1,230+ leaking API keys

• How to render giant code diffs in the browser

• What’s coming in the Postgres 19 beta

• Cutting SQL migrations from tests doubled the suite speed

• Lambda MicroVMs: what you need to know

• Inside the Red Hat npm “Miasma” credential-stealing campaign

Tutorials of the week

• Running isolated sandboxes with Lambda MicroVMs

• Running AI agents safely inside Kubernetes

• Automating PostgreSQL backups to S3 with Airflow

• Building an incident management workflow

• PostgreSQL 18 performance wins on Aurora and RDS

• The feedback loops behind Kubernetes

• Cloning an ECS environment without rewriting Terraform

• Governing AI assets at scale with MCP Gateway and Registry

Videos of the week

Projects of the week

• no-mistakes is a Go local Git proxy that runs an AI review, test, and lint pipeline in an isolated worktree before pushing, then opens a clean PR.

• Hunk is a terminal diff viewer built for reviewing agent-authored changesets, with inline AI annotations.

• BoxBox is a self-hosted file manager for homelabs that supports chunked and resumable uploads.

  

• dbtrail is a point-in-time recovery tool for MySQL that runs time-travel queries and can undo cascade deletes without locks or restores.

• oh-my-reddit is a terminal Reddit client on Bubble Tea, with live-streaming comments and automatic browser session reuse.

• Orca is an agent orchestrator that runs Claude Code, Codex, and 40+ other CLI agents in parallel within git worktrees from a single desktop app.

Meme of the week

Fable 5 opened a 1,810-line pull request on Tabularis this week. Thirty-seven new tests, all passing, in about half an hour. The line count isn’t the interesting part. It’s that it didn’t just build the feature it was asked for. It refactored the shared connection logic first, as the maintainers said they would have done themselves.

A few days later, Cloudflare pointed a different kind of agent at its own code. A harness that hunts for vulnerabilities, then hands every finding to a second, different model to argue it down. It surfaced 13,841 real bugs across 145 repositories. One model finds, another model doubts, and only what survives reaches a human.

While two teams were teaching AI to build and audit code, someone else was teaching it to sell malware. A Rust clipboard hijacker shipped with roughly 15,500 wallet addresses baked in, fronted by AI-generated YouTube narrators reading polished tutorials to an audience of coordinated fake comments.

Notice the pattern. The same kind of autonomous agent is now writing production code, auditing it, and, in the wrong hands, packaging the attack. The more capable they get, the more of the unglamorous work they can actually own. That’s the bet behind Mendral: an autonomous AI DevOps engineer that takes the jobs your team shouldn’t be doing by hand, like supply chain security, and just handles them.

In the tutorials: how a single prompt injection turned Claude Code’s own GitHub Action into a way to read your API keys, the gameday that proved Datadog’s Postgres failover wasn’t actually safe, and why one NULL can make a NOT IN query quietly return nothing at all.

On video: Postgres branching that clones a database in under a second and scales to zero, plus why slow learning still wins in the AI era.

Then six devtools worth a look, including a Kubernetes desktop client that installs nothing in your cluster, a bastion that fronts SSH, Postgres, and Kubernetes with no client software, and an MCP server that indexes the entire Linux kernel in three minutes.

Platform engineering on autopilot

Mendral is an autonomous AI DevOps engineer that handles the work your engineers shouldn’t be doing manually anymore: supply chain security, flaky CI, slow builds, and anything else specific to your stack - Try it out!

Newsworthy stories

• Why is DuckDB fast?

• Hackers use AI-generated YouTube narrators to promote Crypto malware

• What job interviews taught me about Kubernetes

• Fable 5 opened a 1,810-line, 37-test PR on Tabularis in 30 minutes

• Running local models is good now

• Infrastructure as Code needs software engineering, not more config tooling

• Cursor, GitLab, and Zed agree GitHub is breaking

• The only scalable delete in Postgres is DROP TABLE

• How Cloudflare’s multi-agent harness found 13,841 bugs across 145 repos

Tutorials of the week

• Building high-availability PostgreSQL on Kubernetes

• GitHub Actions security checklist for supply chain attacks

• Cut your AWS Fargate bill by 40%

• Getting started with AKS using Pulumi and C#

• Building a RAG-powered SRE knowledge base with Amazon Bedrock

• Securing CI/CD in an agentic world: Claude Code GitHub action case

• Run your email agent on serverless

• A goroutine leak profile in the Go standard library

• Abusing AI features in SQL Server 2025

• The NULL in your NOT IN

• Operationalizing AWS security: a maturity roadmap

Videos of the week

Projects of the week

• Klustr is a native Go/React Kubernetes desktop client that drives Helm, Argo CD, Flux, and cert-manager from your kubeconfig with no in-cluster components.

• Local Cloud Browser is a native macOS GUI for 28 AWS-compatible services, using Keychain credentials and read-only by default.

• WinPodX runs Windows apps as native Linux windows via FreeRDP RemoteApp, built in Python and Qt6.

• Zvec is Alibaba’s in-process C++ vector database that searches billions of vectors in milliseconds with hybrid retrieval.

• codebase-memory-mcp is an MCP server that builds code knowledge graphs, enabling AI agents to skip re-reading files and index the 28M-line Linux kernel in 3 minutes.

• Warpgate is a transparent Rust bastion and PAM for SSH, HTTPS, Kubernetes, MySQL, and Postgres with no client-side software.

Meme of the week

Someone collected 3,600 Google API keys, pointed an AI at them, and Google paid out $500,000. The payout isn’t the interesting part. It’s how many of those keys should never have worked at all.

A separate group gained access to high-profile Instagram accounts this week without writing a single exploit. They just asked Meta AI for access. It said yes.

And while two companies were learning what their AI would hand to a stranger, AWS shipped one agent that reads your bill and another that diagnoses your EKS nodes before you’ve finished reading the alert.

Notice the pattern. The more we wire agents into internal tools, the more of them reach for things nobody actually gave them permission to touch, and most of those connections have no auth and no record of who asked. That’s the gap Zuplo’s MCP Gateway closes.

In the tutorials: why a plain web page can turn ChatGPT’s own output into a phishing link, how to let Terraform auto-apply without losing sleep, and the reason your Claude Code security review keeps missing the bug in the same session you wrote it.

On video: Anthropic spent a year warning everyone about AI, then shipped Fable 5. Plus real lessons from engineering teams shipping on Claude.

Then seven devtools worth a look, including a server monitor, a self-hosted Postgres with instant branching, and an AI agent that runs entirely off a USB stick.

Your MCP servers have no security. Fix that

AI agents are connecting to your internal tools, and most MCP servers ship with no auth and no audit trail. Zuplo's MCP Gateway puts OAuth, structured audit logs, and centralized access control in front of them - Lock it down.

Newsworthy stories

• Hacking Google with AI for $500,000

• AWS fired the one employee who gave a damn

• Announcing the public preview of AWS FinOps Agent

• Hackers simply asked Meta AI for access to high-profile Instagram accounts

• Scaling Zero Copy from 1 trillion to 120 trillion rows with file federation

• How CockroachDB built vector indexing at scale

Tutorials of the week

• The architecture of a file tree that never freezes

• Safe Terraform auto-apply with conftest

• Your infrastructure repo is a mess (here’s how to fix it)

• Diagnose EKS Node issues faster with AWS DevOps Agent

• Lessons from building Claude Code: how we use skills

• ChatGPT markdown rendering vulnerability

• Hosting coding agents on Amazon Bedrock AgentCore

• EXPLAIN prettier, or post-processing query plans in Postgres

• Hidden gaps in Claude Code security reviews

• How to avoid rebuilding infrastructure for every new project

Videos of the week

Projects of the week

• Tabularis runs SQL notebooks, visual EXPLAIN plans, and an MCP server against Postgres, MySQL, and SQLite.

• Beszel monitors CPU, memory, disk, network, GPU, and Docker stats with alerts and history.

• doco-cd auto-deploys your Docker Compose projects and Swarm stacks straight from Git via webhooks.

• NeonD gives self-hosted Postgres instant branching, S3 durability, and point-in-time recovery.

• HelixDB stores both graph and vector data in a single OLTP engine for AI apps.

• Hermes-USB-Portable runs a self-contained AI agent off a USB drive with zero host dependencies.

Meme of the week

Three things happened this week that should bother you more than they probably do.

You can delete a Google API key and it keeps authenticating. You can have your GitHub token stolen in a single click without installing anything shady. And the Kubernetes Dashboard you’ve leaned on for years is being shown the door, with a replacement most people haven’t tried yet.

None of these are edge cases. They’re the kind of quiet shifts that don’t make the front page until they’ve already cost someone a weekend. Below: what’s actually going on with each, the supply chain secrets sitting on your dev laptop right now, why your AI-written incident reviews keep getting the root cause wrong, and 8 tools worth a look before Friday.

Speaking of catching things early: this week’s sponsor, Mendral, flagged a supply chain attack two weeks before it went public. It’s built by Docker and Dagger veterans and already chews through 1.18B log lines a week at PostHog.

Platform engineering on autopilot

Mendral is an autonomous AI DevOps engineer that handles the work your engineers shouldn’t be doing manually anymore: supply chain security, flaky CI, slow builds, and anything else specific to your stack - Try it out!

Newsworthy stories

• From Kubernetes Dashboard to Headlamp

• Google API keys keep working after you delete them

• I read the viral “Leaving AWS” post twice. Most of it is a skill issue

• The problem with AI-generated post-incident reviews

• You shipped it fast. But did you ship it right?

• AI through IaC, not instead of it

Tutorials of the week

• 1-click GitHub token stealing via a VSCode bug

• From Jira to PR: how we built agent-driven pipelines for design system changes

• Build an EKS environment factory with Pulumi and vCluster

• Well-architected best practices for software supply chain security

• Migrating from Go to Rust

• Detecting and removing dangerous secrets on dev workstations before Shai-Hulud does

• Securing your Gemini and Google API keys

• Handling graphs with SQL/PGQ in PostgreSQL

Videos of the week

Projects of the week

• Git Concepts Simulator is a browser game that teaches Git by letting you run commands and watch files move between the working directory, staging area, and remotes.

• Bumblebee is a Go read-only scanner from Perplexity that inventories packages and extensions across 9+ ecosystems to flag known-compromised software.

• GitHub Desktop Plus is a community fork of GitHub Desktop, adding multi-account support, Git worktrees, and commit search.

• Sandboxes is a Go engine for self-hosted cloud dev environments with built-in AI agents and live preview URLs, running on Docker with no Kubernetes.

• Mercek is a local-first desktop IDE for Amazon ECS with multi-account discovery, ECS Exec shell access, and Fargate right-sizing, read-only by default.

• Paseo is a control plane for running multiple AI coding agents (Claude Code, Codex, Copilot) in parallel across mobile, desktop, and CLI, fully self-hosted.

Meme of the week

On the tutorial side, a practical guide walks through Terraform state isolation using workspaces versus file layouts with S3 backends, and a case study on cutting a $140K Snowflake bill to $38K in three months using auto-suspend tuning, clustering keys, and query profile analysis. For system design, a deep dive into building S3-style object storage covers metadata/data separation, erasure coding, multipart uploads, and compaction. Plus a full K8s scheduling breakdown that traces the filter/score/bind loop with debugging playbooks for when your pod goes Pending.

For videos this week: a personal take on how AI has reshaped the day-to-day coding workflow, and a practical walkthrough of running LLMs on Kubernetes with LLMKube.

This week’s open source picks include Pullfrog, a TypeScript GitHub bot that triggers AI coding agents inside GitHub Actions via PR comment mentions; pgGraph, a Rust PostgreSQL extension that adds graph traversal to relational tables without a separate graph database; and Pathfinding Cloud Labs, a catalog of 100+ hands-on AWS IAM privilege escalation scenarios with a plabs CLI. Also worth checking: KeyLedger for unified AI API key management with health scoring, Murr for zero-copy ML inference caching on RocksDB, and ktx, a TypeScript/Python MCP context layer that helps AI agents query Snowflake and BigQuery accurately.

Newsworthy stories

• AWS restored my account: the human who made the difference

• GitHub Actions outage told devs “your account is suspended”

• How an attacker used LLMs to move from a CVE to an internal database in 4 pivots

• Rising AI spend turns FinOps into a boardroom strategist

• Gemini 3.5 deleted 28,745 lines, broke production, then fabricated the post-mortem

• Postgres is all you need for durable workflows

• How AWS DevOps agent uses multi-agent reasoning to find root causes

Tutorials of the week

• Terraform state isolation: how I kept dev, staging, and production from destroying each other

• ISO 27001 on AWS: building compliance into the architecture

• I inherited a $140K Snowflake bill. 3 months later, it was $38K. Here’s everything I learned

• Design S3 object storage like a senior engineer

• AI-powered event-driven Amazon EKS AMI updates with GitOps

• Automating security operations with AI: triaging Renovate PRs

• Where did my pod go? A deep dive into K8s scheduling

• Governing infrastructure as code using pattern-based policy as code

Videos of the week

Projects of the week

• Pullfrog is a model-agnostic GitHub bot that triggers AI coding agents inside GitHub Actions via PR/issue comment mentions, no separate infrastructure needed.

• KeyLedger is a TUI dashboard for managing AI provider API keys across OpenAI, Anthropic, AWS IAM, Google Cloud, and Mistral.

• pgGraph is a Rust PostgreSQL extension that adds graph traversal and shortest-path queries directly to relational tables via SQL.

• Pathfinding Cloud Labs is a catalog of 100+ hands-on AWS IAM privilege escalation labs across EC2, Lambda, ECS, SageMaker, and cross-account scenarios.

• Murr is a Rust RocksDB-backed caching layer for ML inference that manages tiered storage across RAM, NVMe, and S3 with zero-copy conversion.

• HeidiSQL is a GUI database client that supports MariaDB, MySQL, PostgreSQL, SQL Server, SQLite, Interbase, and Firebird.

• ktx is an MCP context layer that helps AI agents query data warehouses accurately by ingesting metric definitions and schema metadata from dbt, LookML, Looker, Metabase, and Notion.

Meme of the week

The team behind Docker and Dagger built Mendral, an autonomous AI DevOps engineer that investigates root causes across your repos, CI logs, Dockerfiles, and IaC, then ships fixes as reviewable PRs. Worth a look if supply chain security or slow CI is eating your engineers’ time.

A malicious VS Code extension granted attackers access to 3,800 GitHub repositories this week, raising fresh questions about extension trust in developer toolchains. Docker Sandbox’s undocumented microVM API was fully reverse-engineered and documented by the Rivet team; Terraform 1.15 landed with dynamic source references and variable deprecation; and Anthropic engineers are dropping Markdown in favor of raw HTML when building with Claude Code.

On the tutorial side: security researchers show exactly how malicious skills and agents can compromise Claude Code, Teads walks through cutting BigQuery slot usage by 90% after a production outage, there’s a deep-dive into building a distributed search engine in pure Go, and a postmortem on how unused Postgres indexes silently ate 41GB. Plus canary deployments with AWS SAM, root cause analysis with the AWS DevOps Agent, and Bedrock API key security.

For videos this week: how a single PR nearly hijacked the NPM registry, and a candid take on what moving too fast in software actually costs you.

This week’s projects include SCAM, a 1Password benchmark that tests AI agents’ security awareness in real-world workplace scenarios; pgsqlite, a Postgres wire protocol adapter for SQLite; swamp, a CLI for building reviewable AI agent workflows stored in Git; and capsule, a multi-tenancy framework for Kubernetes.

The team behind Docker and Dagger built an AI DevOps engineer

Mendral is an autonomous AI DevOps engineer that handles the work your engineers shouldn't be doing manually anymore: supply chain security, flaky CI, slow builds, and anything else specific to your stack.

It investigates root causes across your repos, CI logs, Dockerfiles, lockfiles, and IaC, then ships the fix as a reviewable PR - pinning CVEs, killing flakes, tuning cache layers, and upgrading dependencies without taking your engineers off product work - Try it out!

Newsworthy stories

• LLMs are good at SQL. We gave our terabytes of CI logs

• The request is the wrong unit of scale for LLMs on Kubernetes

• We reverse-engineered Docker Sandbox’s undocumented microVM API

• GitHub confirms breach of 3,800 repos via malicious VSCode extension

• Open in VSCode for Terraform in Azure Copilot

• How Anthropic engineers are building with Claude

Tutorials of the week

• Identifying security risks using AWS Cost and Usage Report data

• Live canary deployments with AWS SAM

• Mounting Git commits as folders with NFS

• Automate root cause analysis across Datadog and Elasticsearch with AWS DevOps Agent

• Compromising Claude Code with malicious skills and agents

  

• Building a distributed search engine in pure Go

• How we cut BigQuery slot usage by 90%

• AWS Bedrock security guide: API keys, detection, and response

• How unused indexes ate 41GB of Postgres storage

• Best practices for computer and browser use with Claude

Videos of the week

Projects of the week

• pgsqlite is a PostgreSQL protocol adapter for SQLite, allowing any PostgreSQL client to connect to and query SQLite databases over the standard wire protocol.

• SCAM is a benchmark from 1Password that tests AI agents’ security awareness through realistic, multi-turn workplace scenarios.

• snipe-it is an IT asset and license management system.

• changedetection.io is a website change-detection tool that alerts you when content, prices, or stock levels change.

• swamp is a CLI that supercharges AI agents to build reviewable, shareable operational workflows, stored as versioned YAML in a Git directory.

• capsule is a multi-tenancy and policy framework for Kubernetes that enforces namespace isolation and resource policies across tenant clusters.

• git-switch is a native Git client that runs dev servers directly from the UI.

Meme of the week

On the tutorial side: zero-downtime blue-green frontend deploys on a single EC2 instance with Docker and Nginx, a ten-control GitHub Actions security checklist for surviving supply chain attacks, a breakdown of how Docker’s ONBUILD directive becomes a hidden attack vector in base images, Anthropic’s own guide to running Claude Code in large codebases, a walkthrough of automating dev workflows with MCP, schema validation for Terraform input configs using CUE, and querying Redis with plain SQL.

For videos this week: an argument for why Jenkins is now effectively dead, and a look at the single hottest programming skill to have in 2026.

This week's open source picks include deepsec, a Vercel Labs scanner that runs coding agents across microVMs to find vulnerabilities in large repos; coroot, an eBPF observability platform with zero-instrumentation telemetry and AI root cause analysis; dockhand, a Docker management UI on a hardened Wolfi OS layer; re_gent, version control for AI coding agents that records which prompt wrote each line; petri, a drop-in PostgreSQL replacement that hands every test its own isolated database; tfrev, a Claude-powered reviewer that flags dangerous Terraform plan mismatches; and workshop, a local debugger for coding agents that streams traces and self-heals failing code.

Newsworthy stories

• Your container is not a sandbox

• AI load breaks GitHub, why not other vendors?

• What’s gone wrong at GitHub?

• Why I’m leaving GitHub for Forgejo

• AI assistants are leaking your conversations

• The (in)security landscape of AI-powered GitHub Actions

• Everything you know about scaling web apps breaks when you serve an LLM

• How we replaced Ingress-NGINX at Stack Overflow

• Top 15 CI/CD metrics

• The danger of multi-SSO AWS Cognito user pools

Tutorials of the week

• GitHub Actions security checklist for supply chain attacks

• Schema validation for Terraform input configuration

• Use Redis with SQL

• Zero downtime frontend deploys with blue-green on a single EC2

• Unmasking the Docker ONBUILD supply chain attack vector

• How Claude Code works in large codebases

• Automate your dev workflows with MCP

• Inbox and outbox patterns for reliable event processing

• My favorite Go backend architecture pattern

Videos of the week

Projects of the week

• deepsec runs coding agents across microVMs to scan large repos for vulnerabilities, resuming where it left off after interruptions.

• coroot is an eBPF-based observability platform with zero-instrumentation metrics, logs, traces, and AI-powered root cause analysis.

• dockhand is a Docker management UI for container orchestration, Compose stacks, and Git-based deployments.

  

• re_gent is version control for AI coding agents that records which prompt wrote each line, with rgt log, rgt blame, and rgt show.

• petri is a drop-in PostgreSQL replacement that gives every test its own isolated, seeded database with no cleanup or shared-state flakiness.

• tfrev uses Claude to review Terraform plans against code changes and flag intent mismatches like a tag edit triggering a full destroy and recreate.

• workshop is a local debugger for coding agents that streams traces in real time, writes evals, and self-heals failing code until assertions pass.

Meme of the week

IaCConf 2026 is this edition’s sponsor, a virtual event on May 14th that brings together platform engineering leaders to discuss what happens to your platform abstractions and metrics when AI becomes a first-class consumer of your infrastructure.

On the news side, a direct argument that Terraform is now obsolete, as LLM can translate intent into infrastr…

Read more

TeamCity 2026.1 introduces a set of focused improvements that make your CI/CD more intuitive, intelligent, and enterprise-ready.

Werner Vogels published a detailed look at the engineering behind Lambda’s network. On the security side, GitHub Actions is identified as the weakest link in your CI/CD chain, with a thorough breakdown of how supply chain attac…

Read more

Bright Data CLI gives coding agents (Claude Code, Cursor, Copilot) real-time web scraping and structured data extraction from 40+ platforms, directly from the terminal, at 10-32x the cost of MCP for equivalent tasks.

Sysdig documented how CVE-2026-33626 enabled a published LMDeploy advisory to become a working SSRF exploit within 12.5 hours, with attacke…

Read more

IaCConf 2026 is back on May 14, free and virtual. Corey Quinn is keynoting on AI writing Terraform code, and if that’s part of your stack, it’s worth the two hours.

Wiz traced a GitHub Actions supply chain campaign to six accounts pushing AI-generated malicious packages under the prt-scan name. A researcher also found that Claude Code’s deny rules are si…

Read more

Noros connects to your AWS, GCP, and Azure accounts in 5 minutes and answers questions like “why did my spend spike this month?” in seconds. DevOps Bulletin readers get a free month at launch.

This week, BeyondTrust uncovered a command injection flaw in OpenAI Codex that exposed GitHub tokens, and Claude Code’s source code was leaked through npm source m…

Read more

Welcome to this week’s edition of the DevOps Bulletin.

The Axios npm library was compromised through a targeted attack on the maintainer’s computer, exposing how vulnerable open-source projects can be. At the same time, developers are switching from traditional SSH keys to certificates for better security, and attackers are using fake VS Code alerts on G…

Read more

Welcome to this week’s edition of the DevOps Bulletin.

Malware hit PyPI through a poisoned LiteLLM package last week, and the full minute-by-minute response took just 72 minutes from discovery to public disclosure. Dropbox shrank its server monorepo from 87 GB to 20 GB. BeyondTrust got a full DNS reverse shell running inside AWS AgentCore’s supposedly is…

Read more

From S3 bucketsquatting finally being dead after a decade of exploitation, to Reddit migrating petabyte-scale Kafka from EC2 to Kubernetes with zero downtime, and an active phishing campaign targeting AWS console credentials using adversary-in-the-middle proxies.

On the tutorial side, we look at how A…

Read more