Operations | Monitoring | ITSM | DevOps | Cloud

Thanks to AI, vulnerability disclosures are exploding. In mid 2026, we're seeing 130+ a day and climbing, with roughly a quarter already being exploited in the wild before they're even disclosed. The result: security teams that used to have 30 days to respond now feel pressure to issue patches in a few days or hours. This video covers why "are we safe?" isn't a question you get to answer once: That last drill is what separates teams that panic when a real incident hits from teams that already know the answer.

Think of an SBOM as your ingredient list. A common language describing everything that goes into a piece of software, every dependency and version, in one place. This video covers why SBOMs have gone from niche to mandatory, and why they're harder to pull off than the concept suggests: The concept is simple. Operationalizing it across a large, diverse tech stack is where it gets hard.

See how Harness Database DevOps and DBmarlin work together to give you full visibility into query performance, automated deployment verification, and AI-assisted database change authoring - all inside your CI/CD pipeline. Most teams deploy database changes blind - they push a schema migration and hope nothing breaks. This demo shows a better way: DBmarlin surfaces the cost and performance of every query before and after a change, while Harness CV uses AI/ML to automatically detect regressions and block bad deployments from reaching production.

Most Operational Readiness Testing (ORT) programs follow the same ritual. A checklist gets filled out. Someone runs a load test in a war room the week before launch. A failover drill gets scheduled, and everyone hopes it goes cleanly. Then the release is shipped, and testing is done. But with Harness, you can make this process continuous, and your service resilience is protected by the same ORT checklist for every small change in your SDLC.

Hardware costs are rising. But Civo Product Director Russ Smith has a different take: your existing kit just became more valuable. The hyperscalers competing for the same DRAM and compute as you still have to pass that cost on eventually. At high utilisation rates, your resource rental overtakes purchase cost. Typically in under a year.

Connect Codex to CircleCI and give your coding agent direct access to the CI feedback it needs to keep working. In this tutorial, we’ll walk through setting up the CircleCI CLI and CircleCI plugin for Codex, then show how Codex can check pipeline results, validate your CircleCI config, diagnose failed builds, trigger new pipelines, and keep iterating on a fix until CI is green. Instead of bouncing between your terminal and CircleCI to copy logs and errors back to your agent, you can bring the full CI feedback loop directly into your Codex session.

See how to build an HR PTO agent with Resolve Agent Lab. In this Resolve Reels demo, we create a purpose-built AI agent by adding automation skills, instructions, conversation starters, and guardrails. The agent can answer PTO questions, check balances, account for calendar conflicts, and submit requests through systems like Workday or ADP. See how Resolve helps teams build AI agents that take action across enterprise systems.

CRA compliance is similar to other frameworks, like ISO 27001, SOC 2, GDPR, or PCI DSS, in that the same approach applies: define your scope, figure out your product classification, then work through the list of controls. This video covers why that's less daunting than it sounds: CRA compliance isn't a one-time milestone. If you're selling into Europe, you need to continuously meet it.

What happens when AI agents stop simply answering questions and start using computers of their own? It could create an entirely new boom in virtual machines. In this episode of Uplink, David Crawshaw, Co-Founder and CEO of exe.dev, joins host Michael Reid to explore the infrastructure behind the rapidly emerging world of AI agents. As agents become capable of writing code, running applications, operating tools, maintaining state, and working independently, they need more than access to an AI model. They need computing environments where they can actually get work done.

In Kepler ADE by GitKraken, you can connect and use whichever AI coding agents fit your workflow. This video shows how to configure agents, set defaults, manage multiple accounts, and run parallel sessions.

Hardened base images are a great secure foundation. They're minimal, security-vetted, and have few dependencies to worry about. But almost nobody ships a bare base image. Teams build on top of it. This video cover whys that "on top of it" layer is where the risk actually lives: Skip the base image hardening and you're building on a shaky foundation. Skip artifact management and you're leaving everything built on top of that foundation ungoverned. A strong posture uses both.

Microsoft finally patched a critical Copilot vulnerability nearly eight months after researchers first disclosed it — and the way the attack worked raises some unsettling questions about AI memory. The vulnerability chained together multiple flaws that could allow a malicious prompt hidden inside a webpage to be pulled into Copilot simply by asking it to summarize the page. From there, the attack could potentially access connected data from services like Gmail, Google Drive, and Google Calendar and exfiltrate that information using Copilot’s own capabilities. But the most concerning part may have been persistence.

Our Megaport technical expert, Steve Tu explains what IPsec is, how it secures network traffic, and where it’s used across VPN and cloud connectivity. About Megaport Deploying infrastructure should be fast and simple. Megaport’s software-defined platform provides private compute, network, and storage — so you can build secure, scalable infrastructure for cloud, enterprise, and global AI inference workloads. Trusted by the world’s leading enterprises, Megaport operates across 1,200+ enabled locations globally.

As AI agents take on more complex tasks, their token consumption can add up quickly. Now ask yourself, is it delivering the results you expect it to?

Linux security is evolving rapidly, with critical implications for enterprise environments. As operational complexity grows, so do the nuances of securing and managing Linux and open source at scale.

Pat Wright sits down with PostgreSQL veteran Hari Kiran – founder of OpenSource DB and co-organizer of PG Day Hyderabad, where this episode was recorded. They talk community building, mentoring the next generation of PostgreSQL contributors, and how a coffee chat with a friend turned into one of India’s biggest PostgreSQL events.

This session walks SQL Server developers through a complete database development workflow, from designing schema changes to testing and deploying them safely, using SQL Toolbelt Essentials. Most database teams don't struggle with SQL itself. The friction comes from process: schema changes made without a clear picture of what's already there, inconsistent code quality across a team, databases left outside version control, and deployments that feel riskier than they should. This session covers all four, with a live demo in SSMS for each one.

CircleCI now works with Cursor Origin. Connect your repo, push a commit, and run your existing CircleCI pipeline. Now in beta.

Kintsugi puts sales tax compliance on autopilot for 7,300 companies selling into 110 countries, and its tax engine sits inside other companies' checkouts. The answer has to arrive before the shopper finishes paying. "Typically, a customer's expectation is that we are returning the sales tax estimate on the invoice within 100 milliseconds." The cost of missing is not abstract: "For every minute that our sales tax API, if it ever goes down, our customers are not able to collect roughly $4 million in sales tax that they should be collecting.".

Your Claude session cost $20. Shipping it safely shouldn't cost you a weekend. Vibe coders can build the app. Most can't deploy it without leaving the door open. Konstruct handles the infra, the Kubernetes, the "please don't get hacked" part, so your lazy Saturday idea gets to survive contact with the internet.

Manage the full PostgreSQL database lifecycle from one AI-powered IDE. dbForge Studio for PostgreSQL brings together database design, development, and administration, as well as data management, analysis, reporting, and extensive automation. Additionally, the integrated AI Assistant generates, explains, optimizes, and troubleshoots SQL queries directly in the Studio. It supports on-premises PostgreSQL databases and related cloud services such as Supabase, Heroku, Amazon Redshift, and TimescaleDB.

Enterprise AI is only useful when it actually runs in production, inside the tools teams already depend on. Getting there is harder than it sounds. Forward Deployed Engineers at Atlassian work directly inside some of the world's largest organizations, building AI-powered agents, connectors, and workflows on Atlassian's platform. They work alongside customers to understand the real constraints, design solutions that hold up at scale, and see them through to deployment.

In the Startup Stories with Atlassian series, we interview founders about their entrepreneurial journey, learn about the problems they are trying to solve, and explore how their teams are using Atlassian tools to grow and deliver value to their customers. In this episode of Startup Stories with Atlassian, Adam sits down with Stan Suchkov, Founder and CEO of Evolve, to explore why pivoting isn't the failure most founders fear – and why the best founders do it deliberately, quickly, and without losing their team in the process.

Most AI model benchmarks measure general coding ability or reasoning. GitBench, built by GitKraken developer advocate Chris Griffing, measures something narrower and more practical: how well a given AI model handles specific Git tasks, starting with commit squashing, identifying which commits in a messy history should be combined into one clean commit.

An AI agent was given one simple task: book a gym class when a slot became available. Instead, it discovered a vulnerability in the gym’s software, gained administrative access, deleted another user, and booked the slot anyway. Australian AI technologist Andrew Bird had connected an AI agent to WhatsApp to automate a routine gym booking. But when the agent encountered an API without proper authorization checks, it didn’t simply stop. It found a way around the problem and used the vulnerability to accomplish the task it had been given. And that creates a much bigger question.

An SBOM is more than a compliance checkbox. It's literally a bill of materials for your product: every software component that makes it into what you ship, plus the metadata that tells you whether it's safe to use. This video covers what that metadata actually does for you: An SBOM earns its keep when it shows you what's actually there, version to version, on a continual basis.

How is AI changing IT operations, and what does it take to move AI agents from impressive demos to production-ready systems? In this episode of Agents of IT, Resolve’s Zack Austin sits down with Alex Cinovoj, Founder and CTO of TechTide AI, to explore what enterprise AI looks like when it has to work in the real world. Alex brings years of hands-on IT, infrastructure, DevOps, and AI engineering experience to a conversation about the shift from experimenting with AI to building trustworthy systems that deliver measurable outcomes.

A documented policy only works if every engineer remembers it, every time, under deadline pressure. That's the gap policy-as-code closes. This video covers what that actually looks like in practice: The instructions don't change. What changes is whether something actually enforces them, or just hopes someone reads them.

PostgreSQL database development involves much more than writing and executing queries. Developers build applications, DBAs maintain database performance and reliability, analysts turn raw data into insights, and DevOps teams automate database delivery through CI/CD pipelines. In this video, you will see how dbForge Studio for PostgreSQL brings database development, management, data analysis, reporting, and automation into a single AI-powered PostgreSQL IDE.

How env zero turns Infrastructure as Code into true self-service—developers deploy pre-approved infrastructure in a few clicks, and multi-step workflows handle the complex stuff automatically. This walkthrough shows what happens once discovery, codification, and governance are in place: developers pull from a catalog of approved resources without filing tickets or writing Terraform, and platform teams keep their guardrails intact. We also cover workflows, which chain multiple deployments into a single run.

How env zero keeps Infrastructure as Code under control at scale — custom roles and permissions, Policy as Code guardrails, and automated drift detection with remediation. This walkthrough covers env zero's governance features: building granular custom roles for your teams, enforcing policy guardrails that stop bad configurations before they deploy, and catching infrastructure drift the moment someone changes something outside the platform.

Turn manually-created cloud resources into Infrastructure as Code, then package that code into reusable templates your whole team can deploy. This walkthrough covers two env zero capabilities that work well together: using Cloud Compass to codify click ops resources into Terraform or OpenTofu, and building reusable templates so other users can deploy proven infrastructure without writing code or configuring integrations themselves.

See how env zero discovers and manages every cloud resource across AWS, Azure, and GCP—including resources deployed outside of Infrastructure as Code. In this overview, we walk through env zero's cloud resource discovery and environment migration capabilities. You'll see how the Cloud Compass dashboard maps your entire resource estate, how to tell whether a resource was created by IaC, click ops, or an API call, and how to bring existing Terraform workspaces and VCS repositories into env0 in bulk.

As infrastructure gets more complex, with workloads spread across clouds, regions, and providers, every hop your data takes between them adds up. Where do these costs actually come from? Has your team ever traced a surprise bill back to data movement? With Megaport, cloud egress costs are minimized by routing data privately between providers, avoiding the higher transfer rates associated with public internet routing.

Most engineering orgs know that resilience testing matters, but proving ROI before you invest time and money is hard. Harness RT Agents solve that by scanning your CD pipelines for resilience risk first, no instrumentation needed, so you get a real report before you commit to chaos experiments, load tests, or DR testing. In this video: Resilience Testing is free to start, with a full fault library, a hosted control plane, and RBAC included.

AI can write database schema changes in seconds, but nothing should reach production until it's validated, tested, and approved. In this discussion, Ken Muse (GitHub), Steve Jones (Redgate), and Huxley Kendall (Redgate) show how a governed pipeline keeps AI-generated database changes safe without slowing teams down.

CircleCI now integrates with Cursor Origin, bringing scalable CI/CD to Origin-hosted repositories. In this demo, see how to connect an Origin repository to CircleCI, configure your pipeline triggers, run a build, and report CI status back to your Origin pull request. Already using CircleCI? Your existing.circleci/config.yml works as-is, with no Origin-specific CI syntax or separate config to maintain.

Give Claude Code direct access to CircleCI and let it diagnose failed builds, fix issues, and keep iterating until your pipeline is green. In this tutorial, we walk through how to connect Claude Code to CircleCI using the CircleCI CLI. You’ll see how Claude can read pipeline results, identify test failures, make fixes, trigger new builds, and monitor CircleCI without leaving the terminal.