Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Shipped: See which billing connections stopped sending data, and why

Every number in CloudZero comes from a billing connection. When a credential expires or a permission changes, that connection stops sending data, and your reports show less spend than you actually have. If you catch it early, you can fix the connection before month-end close. You also need to know what broke. For Azure and Snowflake connections, CloudZero now tells you which check failed, so you can send the fix to the right person without opening a support ticket.

PHP2Shell: Manage security patches at scale with Cortex

"Patch every PHP server. Today." That was the message a lot of engineering leaders got the week of October 20. PHP2Shell is a pair of unauthenticated remote code execution bugs in PHP itself, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2. Attacks started before the patches shipped, and working exploits followed within days.

Fixing distrusted InCommon certificates with ERR_CERT_AUTHORITY_INVALID

Starting Tuesday, October 27, a lot of university websites will open in Chrome to this. Chrome is distrusting a root certificate, emSign ECC Root CA - G3, after eMudhra generated CA keys as small as 4. Every InCommon certificate issued from eMudhra’s ECC chain since April chains to that root.

7 weak points in your delivery model to fix before your next audit or outage

An auditor asking for evidence of your deployment process and an incident review asking what went wrong are asking about the same things. The difference is timing. One catches the weak point before it costs you anything. The other catches it in the middle of an outage, with a customer on the phone.

Microsoft Offers 60,000 Employees Buyouts. Here's the AI Problem.

Microsoft is offering voluntary buyouts to 60,000 employees—more than a quarter of its workforce—while investing billions into AI infrastructure. But here's the bigger question: What happens when experienced engineers leave and AI-generated code keeps accelerating? AI can write code faster than ever. But deploying it safely, securely, and at scale? That's becoming the real bottleneck. Is Microsoft funding AI with headcount instead of efficiency?

The Migration Takes 2 Weeks. Deciding to Do It Takes 6 Months. (Webinar Replay)

Replay and recap of our October 20 live session: why the decision to migrate takes longer than the migration itself, the five human blockers behind it, two customer migrations, and three ways to cut decision time. Chapters, timestamps and key takeaways. Romaric founded Qovery to make Kubernetes accessible to every engineering team. He writes about platform strategy, developer experience, and the future of cloud infrastructure.

Britain's schools are adopting AI, but who controls the infrastructure behind it?

Four in five UK teachers now use artificial intelligence for work. That is an extraordinary level of adoption for a technology that, just a few years ago, most people outside the technology industry had barely encountered. But there's another figure from the same research that I find considerably more interesting. Only 35% of teachers using AI say they're actually working fewer hours because of it.

Was Saudi Arabia Secretly Listening to OpenAI's Biggest Secrets?

A hidden recording device. A former OpenAI engineer. And a possible connection to the Saudi government. What started as a suspicious discovery behind a television inside OpenAI has turned into a federal investigation with potential national security implications. The FBI is investigating whether former OpenAI engineer Abdulrahman Alfozan was involved in corporate espionage, with prosecutors pointing to alleged connections to a member of the Saudi royal family.