Operations | Monitoring | ITSM | DevOps | Cloud

A new report from LeadDev and Harness makes one thing clear: AI coding tools have fundamentally changed how much code organizations are producing. What has not changed nearly fast enough is how that code gets released. The State of AI-Driven Software Releases 2026 report, based on responses from 500424 engineers across industries and company sizes, puts real numbers behind a problem that engineering leaders have been feeling for a while. AI is accelerating the code creation side of the SDLC.

The open-source landscape has witnessed another highly automated, ecosystem-level subversion. On June 17, 2026, a critical software supply chain attack struck the Mastra AI framework - a popular open-source TypeScript ecosystem used widely to build AI agents, workflows and RAG pipelines. By exploiting a compromised contributor account, threat actors successfully mass-published 144 malicious packages under the official @mastra npm scope.

In the fast-paced world of modern software delivery, compliance is often a bottleneck. While our existing OPA-based Policy as Code feature has long empowered teams to encode complex authorization checks and enforce granular governance across their DevOps workflows, we know that starting from a blank page can be daunting. Security and governance teams struggle to keep up with the volume of releases, while developers often find the initial setup of these policies to be time-consuming.

For years, security teams have been sold the same bargain: send in more data, buy more tools, tune more rules, and you'll be better protected. In practice, a lot of teams have ended up with the opposite. They're carrying more cost and more complexity, and they still don't have much confidence that their detections are actually working the way they should. That's the backdrop for why Cribl is acquiring CardinalOps.

By: Tucker Callaway, CEO at Mezmo The market keeps saying “SaaS is dead.” That’s probably true, but it’s also incomplete. What’s actually dying is the idea that value lives inside a vendor-controlled black box. The next era is about utilities: unlimited coding capacity and unlimited analytical capability. And if those two utilities are real, then the vendor model has to change.

PagerDuty fires. You open the incident. Title, timestamp, nothing else. Whatever context exists is in someone's head, in a Slack thread from two weeks ago, or in a runbook nobody has touched since the last reorg. We got tired of that. So we put an AURA agent behind a Slack bot and pointed it at our own production environment.

AI has changed how software gets built. It hasn't changed how software gets run. Most of the AI money in software has gone into the IDE: code generation, copilots, developer assistants, faster pull requests. That work matters. But writing software is one slice of the lifecycle. The harder problem, and the more expensive one, is running that software in production. Production is where systems fail in ways nobody predicted. Incidents don't stay inside one service.

Automation has always promised the same basic things: less work, faster resolution, and more consistency. What has changed is how much judgment automation can now apply before work begins. Traditional process automation is excellent at executing known steps. Agentic automation, though, adds a new layer: AI systems that can decide which action or workflow should happen next. That difference matters a whole lot.

Idle resources in your data center are a liability. Every unused server drawing power, every underutilized rack consuming cooling capacity, and every stranded port sitting dark on a switch represents money spent with no operational return. That's always been true for traditional compute. It's even more consequential as organizations invest in GPU infrastructure for AI workloads, where the hardware is an order of magnitude more expensive and the cost of underutilization scales accordingly.

Agentic IT operations have arrived. It’s no longer a question of if enterprise IT departments will adopt agentic ITOps, but how quickly. Every year, IT environments grow more distributed, complex, and difficult to monitor with legacy tools and processes. At the same time, the pace of AI development is accelerating the volume of changes and incidents, straining teams that are still trying to manage them manually, reactively, and one alert at a time.