Skip to main content
_d
devops/ness

DevOps, Cloud & AI Infrastructure News

The DevOpsNess news desk covers the changes that make an engineering team act this week: security advisories, outages, deprecations and pricing changes in Kubernetes, CI/CD, cloud and AI infrastructure. Each post says what happened, who is affected, how to check your own systems, and what to do now.

Every item is checked against primary sources (vendor advisories, release notes and status pages), which are linked at the end of each post. Mistakes are corrected in place with a dated note; see the editorial policy for how news is produced. Follow along with the news RSS feed.

A FROM line pointing at a host like x.azurecr.io.attacker.com is enough to make kaniko hand the build's Entra ID token to that host. Which kaniko forks and images are affected, how to find Azure identities in your build pods, and what to rotate.
••11 hours ago

kaniko CVE-2026-105769: Lookalike ACR Hosts Get Your Azure Token. Rebuild on v1.25.20

A FROM line pointing at a host like x.azurecr.io.attacker.com is enough to make kaniko hand the build's Entra ID token to that host. Which kaniko forks and images are affected, how to find Azure identities in your build pods, and what to rotate.

KU
Kiril Urbonas·8 min read·8
Read article
.NET 8, .NET 9, the Lambda dotnet8 runtime and the Azure Functions in-process model all lose support on November 10, 2026. Inventory commands, the isolated-worker migration and a CI gate.
••6 days ago

.NET 8 Support Ends November 10: The Lambda and Azure Functions Checklist

.NET 8, .NET 9, the Lambda dotnet8 runtime and the Azure Functions in-process model all lose support on November 10, 2026. Inventory commands, the isolated-worker migration and a CI gate.

KU
Kiril Urbonas·8 min read·18
Read article
AWS deprecated the Lambda python3.10 runtime on October 31, 2026. Functions keep running, patches stop. The inventory commands, IaC diffs and AL2023 gotchas for moving to python3.13.
••6 days ago

Lambda Python 3.10 Is Deprecated Today: Find Every Function and Move to 3.13

AWS deprecated the Lambda python3.10 runtime on October 31, 2026. Functions keep running, patches stop. The inventory commands, IaC diffs and AL2023 gotchas for moving to python3.13.

KU
Kiril Urbonas·8 min read·21
Read article
A use-after-free in the IPv4 TCP handshake, present since Linux 4.4, now has a working exploit against MPTCP listeners, and every Go 1.24+ server is one by default. Which kernels are fixed and how to roll them through EKS, GKE and AKS.
••6 days ago

CVE-2026-98432: The CVSS 9.8 Linux TCP Bug Now Has an Exploit. Patched Node Images

A use-after-free in the IPv4 TCP handshake, present since Linux 4.4, now has a working exploit against MPTCP listeners, and every Go 1.24+ server is one by default. Which kernels are fixed and how to roll them through EKS, GKE and AKS.

KU
Kiril Urbonas·8 min read·186
Read article
On October 20, 2026, europe-west2-b lost power when its generators never started. Cross-zone control-plane timeouts then degraded the whole London region. What happened and the gcloud audit to run now.
••6 days ago

Google Cloud's europe-west2 Outage: One Zone Lost Power and the Region Stalled for 6 Hours

On October 20, 2026, europe-west2-b lost power when its generators never started. Cross-zone control-plane timeouts then degraded the whole London region. What happened and the gcloud audit to run now.

KU
Kiril Urbonas·8 min read·19
Read article
Upstream stopped patching 1.34 on October 27. EKS starts billing 6x on December 2, AKS drops it at the end of November, and GKE gives you until January. The dates, the commands to find your 1.34 clusters, and the upgrade order.
••6 days ago

Kubernetes 1.34 Hit End of Life Oct 27: What EKS, GKE and AKS Do Next

Upstream stopped patching 1.34 on October 27. EKS starts billing 6x on December 2, AKS drops it at the end of November, and GKE gives you until January. The dates, the commands to find your 1.34 clusters, and the upgrade order.

KU
Kiril Urbonas·8 min read·25
Read article
An unauthenticated regex-compiler RCE reaching back to GitLab 7.0, no workaround, and backports on older branches that fix only the critical bug. The exact version per branch and the commands to get there.
••6 days ago

GitLab CVE-2026-110264: A Second CVSS 10 RCE in Nine Days. Patch to 19.5.1

An unauthenticated regex-compiler RCE reaching back to GitLab 7.0, no workaround, and backports on older branches that fix only the critical bug. The exact version per branch and the commands to get there.

KU
Kiril Urbonas·8 min read·14
Read article
OpenAI shut down o1, o3-mini, o4-mini and gpt-4-turbo on October 23, and the gpt-4o and gpt-4.1 families follow on January 14. Here is the full calendar and a migration plan that won't break production.
••last week

OpenAI Model Shutdowns: gpt-4o and gpt-4.1 Go Dark Jan 14, 2027

OpenAI shut down o1, o3-mini, o4-mini and gpt-4-turbo on October 23, and the gpt-4o and gpt-4.1 families follow on January 14. Here is the full calendar and a migration plan that won't break production.

KU
Kiril Urbonas·6 min read·26
Read article
Two unauthenticated RCEs in PHP core, leaked a day before the patch, with exploit attempts already logged. Here is how to tell if you are exposed and what to do tonight.
••2 weeks ago

PHP2Shell (CVE-2026-109618, CVE-2026-109619): Patch Before the Bots Do

Two unauthenticated RCEs in PHP core, leaked a day before the patch, with exploit attempts already logged. Here is how to tell if you are exposed and what to do tonight.

KU
Kiril Urbonas·8 min read·14
Read article
Your AI gateway holds every provider key you own. In 2026 LiteLLM shipped 18 security advisories, three of them exploited in the wild. Here is what to patch and how to fence it in.
••2 weeks ago

LiteLLM's Rough 2026: 3 CISA KEV Flaws, a 9.9 CVE, and a Poisoned PyPI Release

Your AI gateway holds every provider key you own. In 2026 LiteLLM shipped 18 security advisories, three of them exploited in the wild. Here is what to patch and how to fence it in.

KU
Kiril Urbonas·8 min read·36
Read article
GitLab is capping unauthenticated API calls at 60 an hour starting October 19, and the preview windows land before most teams will have noticed.
••last month

GitLab's New Rate Limits: What to Fix Before Oct 19

GitLab is capping unauthenticated API calls at 60 an hour starting October 19, and the preview windows land before most teams will have noticed.

KU
Kiril Urbonas·8 min read·434
Read article
The June to August promotion ended on September 1. Included Copilot credits fell 37% on Business and 44% on Enterprise while seat prices stayed flat. Here is the arithmetic and the controls.
••last month

Copilot's September Bill Cliff: Included AI Credits Just Dropped

The June to August promotion ended on September 1. Included Copilot credits fell 37% on Business and 44% on Enterprise while seat prices stayed flat. Here is the arithmetic and the controls.

KU
Kiril Urbonas·7 min read·34
Read article
Page 1 of 2 · 16 posts