Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Shai-Hulud Miasma: Inside the Compromise of Red Hat's Packages | Harness Blog

The Shai-Hulud lineage has a new face. On June 1, 2026, security teams independently flagged a fresh supply chain compromise inside the @redhat-cloud-services npm namespace. 32 packages and 96 versions were all republished with a credential-stealing worm. These aren't typosquats. They are the official packages in a trusted scope, pulling somewhere 80,000-117,000 average weekly downloads.

5 questions you should be asking about cloud dependency

Cloud infrastructure has become the backbone of modern business operations. But as organizations deepen their reliance on cloud providers, a critical question often goes unasked: just how dependent are we, and at what cost? For years, the cloud adoption narrative focused on agility, scalability, and cost efficiency. Those benefits remain real. But the landscape is shifting.

Protecting against HTTP/2 Bomb vulnerability (CVE-2026-49975) with HAProxy

On June 2, 2026, security researchers disclosed a remote denial-of-service (DoS) exploit named the HTTP/2 Bomb. This flaw allows unauthenticated remote attackers to rapidly exhaust server memory, rendering major web servers inaccessible.

NVIDIA Approach for Achieving ASIL B Qualified Linux | Ubuntu Summit 26.04

Can a general purpose, open source operating system like Linux be deployed in safety-critical products? Can it achieve certifications to standards like ISO 26262? This question has become increasingly common in recent years. In this talk, Bryan provides a safety integrity qualification approach for Linux. It is composed of Linux Kernel, user space libraries (like libc) and user-space components (like init processes), up to ASIL B according to ISO 26262:2018.

MongoDB Changelog Automation Explained: How Harness Database DevOps Works

Managing MongoDB database changes shouldn't require manually creating and maintaining changelogs. In this video, you'll learn how Harness Database DevOps automatically generates MongoDB changelogs, helping teams capture existing database changes and bring them into version control for reliable CI/CD workflows. As a modern **database schema migration tool**, Harness Database DevOps helps teams automate database change management across relational and NoSQL databases, reducing manual effort and deployment risk.

The AI Code Explosion: Why Your Mocking Strategy is Breaking Down

The rise of AI-assisted coding has transformed how software is built. With tools generating entire features in seconds, the bottleneck is no longer writing code—it’s verifying it. Because AI can generate boilerplate and handle API integrations instantly, more service changes are being pushed into authentication logic, API calls, and configurations. Teams desperately need a way to verify these changes before merging, especially when the code touches external dependencies.

ADO.NET SQL Connection Providers for SQL Server Compared

Selecting an ADO.NET provider may seem like a simple, one-time decision, but it can affect performance, compatibility, and long-term maintainability for years. The provider sits between your application and SQL Server and affects everything from connection management and authentication to support for new database features. Also, today, SQL Server 2025 delivers new cloud-optimized features and modern security and System.Data.SqlClient has become legacy software.

Should platform, SRE, and security merge into one function?

Platform, SRE, and security are three distinct functions in modern engineering orgs, each shaped by a different problem. SRE was the operations function's answer to scale: how to keep systems reliable when the systems get big. Platform answered a different problem: how to let developers ship without becoming infrastructure experts. Security drew the line on what could safely reach production.