Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Supply chain hit: the first hours are about "am I affected?"

Jul 27, 2026 By Cloudsmith In Cloudsmith
The first two to three hours after a supply chain compromise aren't about remediation – they're about figuring out whether you're affected at all. That requires two things: a feed of compromised packages you can cross-reference against what you're using, and an audit trail showing which developers pulled which packages and when. Teams that can answer "are we affected?" in 30 minutes have that data pre-built into their platform. Teams that don't are still piecing it together at hour three. Protect your supply chain with Cloudsmith.
View Video
certkit

Public mTLS client-auth certificates stop renewing in October

Jul 27, 2026 By Todd H. Gardner In CertKit
Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.
Read Post
Teneo

Why Written AI Policies Alone Won't Protect Your Organization

Jul 27, 2026 By Teneo In Teneo
Most organizations have responded to the rapid growth of AI by creating written policies that define acceptable use. A clear AI policy can establish expectations, assign responsibilities, and help employees understand how AI should and shouldn’t be used. But policy alone can’t provide oversight and is almost impossible to enforce at scale without the right tools.
Read Post
gitkraken

Why We Built Kepler: One Engineer's Frustration With Fifteen Open Terminals

Jul 27, 2026 By Jade Nangah In GitKraken
We didn’t set out to build a new category of product. We set out to stop juggling. That’s the word Gyo, the senior engineer who built the first version of Kepler, keeps coming back to when he talks about where it started. “I have a lot of terminals opened, and with all those tabs, it was very difficult for me to keep focused on what I was doing,” he says. “I’m not a juggler.”
Read Post
harness

Your Production System Is Now in Your Pocket | Harness Blog

Jul 27, 2026 By Aurora Chun In Harness
In April, Harness announced the Harness Cursor Plugin, a native integration that lets developers manage CI/CD pipelines, deployments, and security posture using natural language inside Cursor, governed by the same RBAC, OPA policies, and audit trails already enforced across the Harness platform. That experience has, until now, lived entirely at a desk.
Read Post
canonical

Ubuntu's virtualization hardware enablement (HWE) stack: a new model for confidential computing enablement

Jul 27, 2026 By Ijlal Loutfi In Canonical
Confidential computing is moving quickly. The foundation is already here: AMD SEV-SNP and Intel TDX have made it possible to run confidential virtual machines (VMs) with stronger protection for data in use. Ubuntu 26.04 Long Term Support (LTS) brings integrated host and guest support for both of these technologies, making confidential computing a native part of the Ubuntu virtualization offering..
Read Post
upsun

AI fatigue: what happens when product teams can't keep up with their own agents

Jul 27, 2026 By Upsun In Upsun
For the past two years, the conversation around AI in software engineering has focused on one thing: productivity. Engineers are shipping faster, writing more code, and completing work in hours that once took days. Every new model promises another leap forward. What gets far less attention is what all that speed demands from the people using it. Guillaume Moigneu, Field CTO at Upsun, has spent the past year watching engineering teams adapt to AI-assisted development.
Read Post
upsun

Business continuity starts with portability

Jul 27, 2026 By Upsun In Upsun
Business continuity planning has a quiet assumption built into most of it: that the infrastructure the plan runs on will cooperate. Backup systems will be accessible. Recovery procedures will work as documented. The provider whose services underpin the critical path will be available, or at least recoverable within the window the plan specifies. That assumption is tested every time a major provider has an outage, a regional failure, or a service disruption that cascades across dependent workloads.
Read Post
cloudzero

Shipped: Every cost recommendation now comes with the why and the how

Jul 27, 2026 By Kevin Lamb In CloudZero
A savings number tells you money is on the table, but it doesn’t tell you whether the finding holds up, what it’s based on, or what to do next. In that gap, recommendations pile up unactioned. When you’re staring at thousands of them, a title and a dollar figure isn’t enough to decide which are safe to act on.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.