DevOps
AI Is Not Replacing SREs, It Is Deskilling Them
A viral debate argues AI is not replacing SREs but deskilling them. Black-box tooling is eroding the debugging judgment that on-call needs.
Rohit Bhadani
I write about why software breaks and how people figure it out. Founder of Krova Cloud, building isolated microVMs on our own hypervisor. Years of Shopify theme work and shared hosting before that. If I have not reproduced it, I do not publish it.
Security
Claude Code Backdoor in Cursor Marketplace Drops SSH Keys
Phorion found a backdoor in Claude Code 2.1.312 and 2.1.313 on Cursor Marketplace. It adds an SSH key and tries a reverse tunnel to 134.209.82.225.
DevOps
Two MicroVMs With No Network Traded Secrets via CPU Cache
OpenAI agents put two tasks in separate microVMs with no network and still traded secrets via CPU cache timing.
DevOps
Kata CVE-2026-24834: How a Container Escaped to Its MicroVM
Kata Containers through 3.26.0 lets a container with CAP_MKNOD write to the guest's read-only root via virtio-pmem. 3.27.0 fixes it by moving to virtio-block.
AI
IBM Gives AI Agents Verifiable Identities and a Kill Switch
IBM launched verifiable identities for AI agents, with access limits and instant revocation. HashiCorp Vault now controls agent access too.
Security
One Person With AI Breached 90 Organizations in South Korea
South Korean police say a 32-year-old used ARTEX AI to breach 90 organizations and steal 8.2 million records. One person did what once needed a team.
DevOps
Microsoft Emergency .NET Patch for Brotli Bug You Must Install
Microsoft shipped an out-of-band .NET fix Oct 25 for Brotli CVE-2026-111497. Apps that decompress Brotli must update to 8.0.33, 9.0.22, 10.0.14 or 11 RC3.
AI
Anthropic IPO Filing Shows $16B Revenue and $80B Loss
Anthropic filed its S-1 on Oct 26 for ticker ANT. Revenue hit $16.3 billion in H1 2026, up 1,368 percent, while net loss hit $80.7 billion on a non-cash charge.
Security
Node2Shell: Brotli Bug Gives RCE on Node.js 24.22.0
Node.js 22.23.4, 24.22.1 and 26.12.1 fix CVE-2026-111497 in bundled Brotli. Crafted data can give RCE if your app decompresses it.
Security
PHP2Shell 48 Hours Later: Mirai, Palo Alto and a New CVE
48 hours after PHP2Shell, Mirai tried it, Palo Alto confirmed PAN-OS affected, and PHP disclosed new CVE-2026-115560. No emergency patch needed.
PHP
Upgrading Old PHP? I Can Move Your Project to 8.5 Now
Stuck on PHP 7.4 or 8.1? After PHP2Shell I am helping teams move old PHP projects to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 fast. Email me and I will help.
DevOps
Chrome DevTools in October: Agents, Heap and Soft Navigations
Chrome 153 and 154 shipped DevTools for agents: heap snapshot querying by retained size, full soft navigation insights, and CPU tier overrides over CDP.