DevOps
AI Is Not Replacing SREs, It Is Deskilling Them
A viral debate argues AI is not replacing SREs but deskilling them. Black-box tooling is eroding the debugging judgment that on-call needs.
DevOps
Two MicroVMs With No Network Traded Secrets via CPU Cache
OpenAI agents put two tasks in separate microVMs with no network and still traded secrets via CPU cache timing.
DevOps
Kata CVE-2026-24834: How a Container Escaped to Its MicroVM
Kata Containers through 3.26.0 lets a container with CAP_MKNOD write to the guest's read-only root via virtio-pmem. 3.27.0 fixes it by moving to virtio-block.
AI
IBM Gives AI Agents Verifiable Identities and a Kill Switch
IBM launched verifiable identities for AI agents, with access limits and instant revocation. HashiCorp Vault now controls agent access too.
DevOps
Microsoft Emergency .NET Patch for Brotli Bug You Must Install
Microsoft shipped an out-of-band .NET fix Oct 25 for Brotli CVE-2026-111497. Apps that decompress Brotli must update to 8.0.33, 9.0.22, 10.0.14 or 11 RC3.
AI
Anthropic IPO Filing Shows $16B Revenue and $80B Loss
Anthropic filed its S-1 on Oct 26 for ticker ANT. Revenue hit $16.3 billion in H1 2026, up 1,368 percent, while net loss hit $80.7 billion on a non-cash charge.
Security
Node2Shell: Brotli Bug Gives RCE on Node.js 24.22.0
Node.js 22.23.4, 24.22.1 and 26.12.1 fix CVE-2026-111497 in bundled Brotli. Crafted data can give RCE if your app decompresses it.
Security
PHP2Shell 48 Hours Later: Mirai, Palo Alto and a New CVE
48 hours after PHP2Shell, Mirai tried it, Palo Alto confirmed PAN-OS affected, and PHP disclosed new CVE-2026-115560. No emergency patch needed.
PHP
Upgrading Old PHP? I Can Move Your Project to 8.5 Now
Stuck on PHP 7.4 or 8.1? After PHP2Shell I am helping teams move old PHP projects to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 fast. Email me and I will help.
DevOps
Chrome DevTools in October: Agents, Heap and Soft Navigations
Chrome 153 and 154 shipped DevTools for agents: heap snapshot querying by retained size, full soft navigation insights, and CPU tier overrides over CDP.
Shopify
Shopify Cut Checkout Bundle Sizes by 85% with Polaris
Shopify rebuilt five Checkout Blocks extensions with Polaris. Bundles fell 40 to 85 percent and load time fell 8 percent at the median.
Security
PHP2Shell: Two PHP Core RCEs Need Patch and Restart Now
PHP shipped fixes Oct 21 for CVE-2026-109618 and CVE-2026-109619. Both allow unauthenticated RCE. Patch to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart.