Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Shai-Hulud Miasma: Inside the Compromise of Red Hat's Packages | Harness Blog

The Shai-Hulud lineage has a new face. On June 1, 2026, security teams independently flagged a fresh supply chain compromise inside the @redhat-cloud-services npm namespace. 32 packages and 96 versions were all republished with a credential-stealing worm. These aren't typosquats. They are the official packages in a trusted scope, pulling somewhere 80,000-117,000 average weekly downloads.

Checklist: how to reduce environment drift without slowing devs or AI agents

Environment drift persists when teams standardize code but leave infrastructure, data, and access decisions to individual teams and manual setup. Most teams know their environments are not identical. What they underestimate is how quietly the gap widens. A database version is out of sync between production and staging; an environment variable is added manually to one server but never tracked; a cron job runs in production but was never captured in the dev config.

Bridging AI and Infrastructure: Introducing the Megaport MCP Server for Agentic Networking

Discover the Megaport MCP Server and how it enables AI-powered, agentic networking through natural language access to network infrastructure. By Miwa Fujii, Community Manager - Terraform and Ryan Tucker, Solutions Architect In the cloud networking era, we’ve moved from manual configurations in the Portal to Infrastructure as Code (IaC), Terraform. But the next frontier isn’t just code, it’s intelligence. We are pleased to announce the release of the Megaport MCP Server (Open Beta).

ADO.NET SQL Connection Providers for SQL Server Compared

Selecting an ADO.NET provider may seem like a simple, one-time decision, but it can affect performance, compatibility, and long-term maintainability for years. The provider sits between your application and SQL Server and affects everything from connection management and authentication to support for new database features. Also, today, SQL Server 2025 delivers new cloud-optimized features and modern security and System.Data.SqlClient has become legacy software.

The AI Code Explosion: Why Your Mocking Strategy is Breaking Down

The rise of AI-assisted coding has transformed how software is built. With tools generating entire features in seconds, the bottleneck is no longer writing code—it’s verifying it. Because AI can generate boilerplate and handle API integrations instantly, more service changes are being pushed into authentication logic, API calls, and configurations. Teams desperately need a way to verify these changes before merging, especially when the code touches external dependencies.

Configure Ubuntu with YAML | Ubuntu Summit 26.04

Learn how to configure Ubuntu at launch using declarative, idempotent instructions stored in a version-controlled YAML file. In this talk, Rajan explains how this approach minimizes arbitrary commands, reduces risks of command injection and privilege escalation, and ensures validation and error handling. This is relevant on major public and private clouds, and virtualization solutions ranging from VMware, WSL, LXD, Multipass, Proxmox, and more.

Megaport Storage Marks the Next Step Toward Automated Infrastructure at Scale

Built as a globally distributed storage platform integrated directly into the Megaport backbone and co-located with Latitude.sh compute infrastructure, Megaport Storage simplifies how organizations store, move, and access data across distributed environments with a unified infrastructure experience spanning compute, network, and storage. For years, enterprise infrastructure has moved toward abstraction. Compute became elastic. Networks became software-defined.

uPKI: improving certificate revocation on Linux | Ubuntu Summit 26.04

What is uPKI? While web browsers automatically check if an HTTPS certificate has been revoked, other Linux command-line tools and applications usually skip this check. That leaves applications vulnerable to compromised or misissued certificates many months after this is discovered. In their talk, Joe Birr-Pixton and Dirkjan Ochtman will be introducing uPKI: a new effort to bring browser-grade certificate infrastructure to Linux. This effort is funded by Canonical, engineered by the maintainers of rustls, and builds on foundational work from Mozilla.

AI inference vs. training: What they are and how they differ

AI inference and training are terms you'd run into if you have been around software engineering or even just scrolled through the news. Both are integral to delivering the AI-powered experiences we have come to expect from many of the applications we use daily. According to McKinsey, by 2030 inference will overtake training as the dominant workload in AI data centers, making up more than half of all AI compute and roughly 30-40% of total data center demand.

GitHub Copilot Price Hike Developers Outraged! V2

What used to be $50 a month is now $3,000 — overnight. Microsoft just moved GitHub Copilot to token-based billing, and devs are split between calling it a "rug pull" and admitting someone always had to pay the bill. Here's the part that should worry every engineering leader: most can't tell you what percentage of their AI-generated code actually ships, or where the tokens went. When the meter is running on every prompt, "it feels productive" isn't good enough — you need to know that bug cost you $2,700 in tokens to fix.