@devopsbulletin

Weekly newsletter focused on AWS, Cloud Security, Kubernetes, FinOps, and devtools ❤️ Hand-curated by @mlabouardy

 Subscribe now ➡️
devopsbulletin.com
Joined March 2021
  • Tweets3.2K
  • Following249
  • Followers4.7K
1.1KMedia
Master modern CI/CD with "Pipeline as Code" 🚀! Uncover Jenkins at scale, cloud-native pipelines, seamless Docker/serverless deployments, and the soul of DevOps. 🔗 manning.com/books/pipeline-a…
1
43
153
17,339
𝗫 𝗮𝗻𝗱 𝗟𝗶𝗻𝗸𝗲𝗱𝗜𝗻 𝗮𝗿𝗲 𝘁𝗵𝗲𝗶𝗿 𝗼𝘄𝗻 𝗔𝗜 𝗯𝘂𝗯𝗯𝗹𝗲. On the feed, everyone is running agents. Outside that bubble, I think most people still use AI to ask questions and rewrite emails.
1
110
xitter.cf/BoringBiz_/status/2111…
Boring_Business
@BoringBiz_Oct 17
Talk to anyone outside the finance and tech bubble on this platform. The average person still has no idea Claude Cowork even exists Anyone above the age of 35 is still using these platforms like a chatbot that just spits out some answers. None of the agentic capabilities are well known Most folks above the age of 45 don’t even know how to toggle between Opus and Fable on their Claude interface That is how early we are. If you are looking at the price action of AI infrastructure stocks and concluding that token usage has peaked, you are so deeply mistaken
23
𝗔𝗻𝘁𝗵𝗿𝗼𝗽𝗶𝗰'𝘀 𝘀𝗵𝗮𝗿𝗲 𝗼𝗳 𝗷𝘂𝗻𝗶𝗼𝗿 𝘁𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝗵𝗶𝗿𝗲𝘀 𝗳𝗲𝗹𝗹 𝗳𝗿𝗼𝗺 𝟮𝟳% 𝘁𝗼 𝟵%. Its hiring managers increasingly value autonomy and judgment over implementation skills. Those are hard to develop without getting a chance to do the work.
1
2
171
anthropic.com/research/emplo…

How employment is changing at Anthropic

How has AI restructured work and employment at Anthropic? As a company at the frontier of AI adoption, Anthropic could be a leading indicator of how AI will shift work organization, hiring, and labor...

anthropic.com
26
𝗥𝗘𝗔 𝗹𝗲𝘁𝘀 𝘆𝗼𝘂𝗿 𝗰𝗼𝗱𝗶𝗻𝗴 𝗮𝗴𝗲𝗻𝘁 𝗶𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗲 𝗮𝗽𝗽𝘀 𝘄𝗶𝘁𝗵𝗼𝘂𝘁 𝘁𝗵𝗲𝗶𝗿 𝘀𝗼𝘂𝗿𝗰𝗲 𝗰𝗼𝗱𝗲. Use it to inspect apps and binaries, understand how a feature works and help build something similar.
1
124
github.com/morluto/rea

GitHub - morluto/rea: Reverse engineer anything with agents, from app behavior down to native...

Reverse engineer anything with agents, from app behavior down to native binaries. - morluto/rea

github.com
24
𝗬𝗼𝘂𝗿 𝗔𝗜 𝗲𝗺𝗮𝗶𝗹 𝘀𝘂𝗺𝗺𝗮𝗿𝘆 𝗰𝗮𝗻 𝗰𝗮𝗿𝗿𝘆 𝘁𝗵𝗲 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿'𝘀 𝗶𝗻𝘀𝘁𝗿𝘂𝗰𝘁𝗶𝗼𝗻𝘀. Barracuda found phishing emails with hidden prompts telling inbox assistants to add fake urgent actions, including changing vendor payment details.
1
153
blog.barracuda.com/2026/10/0…

Email attacks target both humans and AI in the same message | Barracuda

Barracuda Research reveals how phishing emails combine social engineering and prompt injection to target both users and AI-powered email assistants.

blog.barracuda.com
27
𝗗𝘂𝗺𝗽𝗶𝗻𝗴 𝟭𝟬,𝟬𝟬𝟬 𝗹𝗼𝗴 𝗹𝗶𝗻𝗲𝘀 𝗶𝗻𝘁𝗼 𝗮 𝗽𝗿𝗼𝗺𝗽𝘁 𝗶𝘀 𝗽𝗼𝗼𝗿 𝗱𝗲𝗯𝘂𝗴𝗴𝗶𝗻𝗴. Give the agent a service, time window and request ID. Let it search, then pull surrounding lines. Keep the originals available.
1
135
anthropic.com/engineering/wr… More DevOps reads: devopsbulletin.com

Writing effective tools for AI agents

Our most effective techniques for writing, evaluating, and refining tools for AI agents, including how to use Claude Code to improve them.

anthropic.com
24
𝗚𝗶𝘃𝗲 𝘆𝗼𝘂𝗿 𝗰𝗼𝗱𝗶𝗻𝗴 𝗮𝗴𝗲𝗻𝘁 𝗮 𝗺𝗮𝗰𝗵𝗶𝗻𝗲 𝘆𝗼𝘂 𝗰𝗮𝗻 𝘁𝗵𝗿𝗼𝘄 𝗮𝘄𝗮𝘆. Microsoft’s Quicksand is a Python API for QEMU VMs, with snapshots and network isolation by default.
1
151
github.com/microsoft/quicksa… More DevOps reads: devopsbulletin.com

GitHub - microsoft/quicksand: Quickly sandbox your AI agent.

Quickly sandbox your AI agent. Contribute to microsoft/quicksand development by creating an account on GitHub.

github.com
35
𝗚𝗶𝘁𝗛𝘂𝗯’𝘀 𝗔𝗜 𝗦𝗰𝗮𝗻 𝗰𝗮𝗻 𝗳𝗶𝗻𝗱 𝗮 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝘄𝗶𝘁𝗵𝗼𝘂𝘁 𝗳𝗮𝗶𝗹𝗶𝗻𝗴 𝘁𝗵𝗲 𝗰𝗵𝗲𝗰𝗸. It covers Terraform and Dockerfiles. Findings are advisory and cannot block merges through rulesets. Read them before merging.
1
146
github.blog/changelog/2026-1… More DevOps reads: devopsbulletin.com

AI Scan for pull requests generally available - GitHub Changelog

Code scanning AI Scan for pull requests is now generally available. It complements CodeQL by finding vulnerabilities in pull request changes for languages and frameworks that CodeQL does not curren...

github.blog
32
𝗔 𝗚𝗶𝘁 𝗰𝗼𝗺𝗺𝗶𝘁 𝗰𝗮𝗻 𝘄𝗲𝗮𝗿 𝘀𝗼𝗺𝗲𝗼𝗻𝗲 𝗲𝗹𝘀𝗲’𝘀 𝗻𝗮𝗺𝗲. GitHub now records the authenticated pusher alongside author and committer metadata. Limited Enterprise preview. Check who pushed it.
1
1
185
github.blog/changelog/2026-1… More DevOps reads: devopsbulletin.com

Push attribution for commits in limited public preview - GitHub Changelog

GitHub now durably records the authenticated user who pushed each commit and surfaces that pusher identity in the UI and API alongside the existing author and committer fields. Commit author…

github.blog
51
𝗔𝗪𝗦 𝘃𝘀. 𝗖𝗹𝗼𝘂𝗱𝗳𝗹𝗮𝗿𝗲 𝗵𝗮𝘀 𝗿𝗲𝗮𝗰𝗵𝗲𝗱 𝘁𝗵𝗲 𝗰𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝗳𝗹𝗼𝗼𝗿 𝗽𝗹𝗮𝗻. Matthew Prince says AWS cancelled Cloudflare’s re:Invent booth. He plans to attend and host side events anyway. Apparently multi-cloud needs an off-site venue.
1
2
243
xitter.cf/eastdakota/status/2111…
Matthew Prince 🌥
@eastdakotaOct 16
Amused that AWS just unilaterally cancelled Cloudflare's Reinvent booth. There are always signs when someone finally realizes they're losing. Guess we'll just attend and throw the most fun side events without paying Amazon! Reply if you want an invite.
55
𝗚𝗼𝗼𝗴𝗹𝗲 𝗽𝗮𝗶𝗱 $𝟵𝟬,𝟬𝟬𝟬 𝗳𝗼𝗿 𝗮 𝗰𝗼𝗼𝗸𝗶𝗲 𝘁𝗵𝗮𝘁 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝗶𝘁𝘀 𝗼𝘄𝗻 𝘀𝗶𝗴𝗻𝗶𝗻𝗴 𝗸𝗲𝘆. Simon Koeck could forge sessions that reached unsafe pickle decoding, enabling unauthenticated RCE on Google DevSite. Fixed October 7. Signed isn't encrypted.
1
182
simonkoeck.com/writeups/goog…

How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck

A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.

simonkoeck.com
41
Load more