Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

npm axios attack - What happened and how to protect your supply chain

100M+ weekly downloads. One compromised maintainer account. A remote access trojan in two active release branches. This is a 30-minute breakdown of the Axios npm supply chain attack – how it happened, why it was hard to detect, and what any engineering team can do right now to reduce exposure. Nigel Douglas, Head of Developer Relations at Cloudsmith, is joined by Jenn Gile, co-founder of Open Source Malware, a community-driven threat intelligence platform focused on malicious open source packages.

Konstruct product updates: Hosted control planes and multi-cloud

March signified a very important period for the Konstruct team, where we were able to focus on something we’ve heard consistently from teams: reduce the time to value without compromising control. In the previous post, we walked through how Konstruct 0.1–0.3 established the core platform model, introduced templates, and expanded GitOps into something that can represent both infrastructure and applications. With 0.4, we’re taking a more opinionated step forward.

Meet Cortex: The Engineering Operations Platform

Standardize. Visualize. Drive Change. Cortex is the leading Engineering Operations Platform that helps organizations define what "good" looks like and empowers teams to reach those standards. From tracking DORA metrics to driving large-scale migrations, Cortex provides the visibility and tools necessary to maintain a high-performing engineering culture. In this video, you’ll see how to: Set the Standards: Create custom Scorecards (like Operational Maturity or DORA Metrics) with automated rules integrated directly from tools like PagerDuty, Incident.io, and GitHub.

Conversations: Ask Netdata About Anything You're Looking At

Netdata AI can already troubleshoot your alerts and generate Insights reports. What it couldn’t do, until now, was have a back-and-forth conversation. You could get a one-shot analysis, but you couldn’t ask follow-up questions, pull in additional context, or go from a quick question to a full investigation without starting over. We’ve added a conversational layer to Netdata AI.

Free vs Commercial ORM Tools: Best Picks Compared

When you’re building.NET applications, the choice between free ORM tools and commercial ones can make or break your project’s future. It’s not about one side winning, both have standout strengths. Free tools like Entity Framework Core or Dapper offer flexibility without the price tag. However, as projects grow, teams need commercial tools to deal with larger schemas, more complex mappings, and multiple developers working on the same data layer.

Bridging the Gap: Keeping On-Premises SQL Server Competitive in a Cloud-First World

Short Summary: Many companies evaluate cloud platforms when they reach scalability limits on existing infrastructure, with migration decisions typically driven by a broader mix of factors: cost optimization, availability, security, and access to managed services. However, despite this shift, a lot of teams still run SQL Server on their own servers. Keeping these systems running well requires good monitoring, performance tuning, and regular maintenance.

Cost Awareness in CI/CD Pipelines: A FinOps Guide | Harness Blog

This guide walks through practical ways to embed cost awareness directly into CI/CD workflows so development teams can make cost-informed decisions before deployment. You’ll learn how to implement automated cost feedback loops, introduce pipeline budget guardrails, and use Harness Cloud Cost Management to align DevOps velocity with FinOps accountability.

Defeating Context Rot: Mastering the Flow of AI Sessions | Harness Blog

In Part 1, we argued that most dev teams start in the wrong place. They obsess over prompts, when the real problem is structural: agents are dropped into repositories that were never designed for them. The solution was to make the repository itself agent-native through a standardized instruction layer like AGENTS.md. But even after you fix the environment, something still breaks. The agent starts strong.

Why SaaS is Dying (and what's next) #speedscale #saas #data #datasecurity #devops #technews

Traditional SaaS is a data trap. It’s time to stop sending your most valuable asset to third parties. Enter BYOC (Bring Your Own Cloud): the future of data sovereignty, where the software comes to you. Visit: speedscale.com.