Cordyceps: GitHub Actions CI/CD Hijack via Pull Request
Novee Security found 300+ GitHub repos hijackable by a free account via CI/CD trust flaws. Microsoft, Google, and Apache confirmed. Patch your workflows ...
Linkerd 2.20 Cuts Control Plane Memory 85%: Act Now
Linkerd 2.20: 85% control plane memory cut, native sidecar orchestration as default, rate-limit-aware load balancing. ...
Vertex AI SDK Is Dead: Migrate to google-genai Before Your Code Breaks
Google removed vertexai.generative_models on June 24. Migrate to google-genai now.
AWS Lambda MicroVMs: Stateful Serverless Is Here
AWS Lambda MicroVMs gives each user their own Firecracker VM with 8-hour runtime, suspend-while-idle billing, ...
GitHub Actions Checkout v7: Migrate Before July 16
GitHub's actions/checkout v7 blocks pwn request attacks by default. Your CI may break on July ...
Cloudflare OAuth Opens to All: Partner Lock Is Over
Cloudflare OAuth is now self-serve for all developers. Here's what unlocked, how a 132M-row migration delivered a 45% latency win, and what to ...
Kube-Wasm Hits CNCF Graduation: Wasm on Kubernetes
Kube-Wasm earns provisional CNCF graduation. Learn how WebAssembly replaces runc containers in Kubernetes with 2.3 ...
Neoclouds Will Own 20% of the $267B AI Cloud Market by 2030
Gartner predicts neoclouds will capture 20% of the $267B AI cloud market by 2030. Here ...
NVIDIA Grove: Open-Source Kubernetes API for AI Inference
NVIDIA Grove is an open-source Kubernetes API for orchestrating multi-component AI inference with gang scheduling, ...
CVE-2026-20253: Patch Splunk Enterprise Now — Pre-Auth RCE
CVE-2026-20253 is a CVSS 9.8 pre-auth RCE in Splunk Enterprise 10.0 and 10.2. Active exploitation ...