Operations | Monitoring | ITSM | DevOps | Cloud

AI coding assistants have transformed how developers write and debug code. But there’s a gap: these assistants often can’t see what’s happening in your CI/CD pipelines. When a build fails, you’re still stuck switching tabs, hunting through logs, and copying error messages back into your editor. What if your AI assistant could talk directly to CircleCI? In this tutorial, you’ll learn how to connect Cursor, an AI-powered code editor, to CircleCI using the CircleCI MCP server.

On December 3, 2025, the React team announced a critical security vulnerability in React Server Components (RSC). Identified as CVE-2025-55182 (and covering the now-duplicate CVE-2025-66478), this flaw allows unauthenticated attackers to execute arbitrary JavaScript code on backend servers.

The state of web app, API, and AI service security is in constant flux, with threats seemingly lurking around every corner. For years, organizations have relied on web application firewalls (WAFs) as a critical layer of defense. HAProxy Technologies has long provided robust WAF solutions, including earlier versions such as the "Advanced WAF" and "ModSecurity WAF" — based on the popular open source WAF engine. These excelled against widely-known OWASP Top 10 threats.

New Relic provides full-stack observability and monitoring. It provides almost every type of system monitoring on a single platform. This includes monitoring tools for infrastructure, application performance monitoring (APM), synthetics, user, log, mobile, network, and Kubernetes components. DevOps, security, and business professionals use these capabilities to detect anomalies, analyze root causes, and fix software performance issues.

For twenty years, a stolen private key was a disaster. It meant total compromise. Every encrypted conversation, password transmitted, API call ever made was readable. Traffic was being recorded all the time, “just in case” your private key leaked out. The NSA even had a name for it: “harvest now, decrypt later.” Record all the encrypted traffic today. Steal the private keys tomorrow. Decrypt everything retroactively.

I still remember the working with a leading insurance provider on an internal review of their IT estate and discovering a team quietly using an unapproved SaaS tool to speed up their reporting. It wasn’t malicious, they were trying to solve a problem faster. But as we stared at the dashboard, I could see the CIO’s mind racing: What data had they uploaded? Was it encrypted? Were they still compliant?