Operations | Monitoring | ITSM | DevOps | Cloud

Miasma has already hit Red Hat and 73 Microsoft GitHub repos. Here's how it works and what your team can do right now. Nigel Douglas, Head of Developer Relations at Cloudsmith, breaks down the Miasma worm – a self-replicating supply chain attack and evolved variant of Mini Shai-Hulud from threat group TeamPCP. Learn how Miasma uses the yo-yo attack method to move laterally across registries and workstations, why conventional scanners missed it, and the practical steps security teams can take today, including cooldown policies and continuous risk assessment.

Catch failing tests before they ever leave the machine with just two hooks and Chunk sidecars.

Bitbucket Pipelines already supports triggering on repository pushes and pull request pushes. But if you wanted to react to other events like a deployment finishing, a build failing, or a PR getting merged, you had to wire that up yourself with webhooks or external glue code. New trigger types let you define those conditions directly in your YAML. You can fire custom pipelines on events like pipeline-completed, deployment-completed, pullrequest-created, pullrequest-fulfilled, and more.

Your entire AI stack ran on a model that disappeared in three days. The US government issued a directive suspending all access — a few hours' notice, no deprecation window, no roadmap. Launched Tuesday. Gone by Friday. And every enterprise that had built workflows on top of it just found out what the real risk was: not the model itself, but the absence of a governance layer underneath it.