75 stories from 21 sources
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier…
NIST Launches Centers for AI in Manufacturing and Critical Infrastructure NIST has expanded its collaboration with the nonprofit MITRE Corporation as part of its efforts to ensure U.S. leadership in artificial intellige…
Federated Lightweight Intrusion Detection in Drone Swarms with Knowledge Distillation arXiv:2607.17025v1 Announce Type: new Abstract: Drone swarms are increasingly deployed in critical applications such as surveillance,…
Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments.…
Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.
20+ Hijacked Government Websites Became an Attack Channel More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a le…
Building a Sustainable Metals Infrastructure: NIST Report Highlights Key Strategies Making metals processing more sustainable and resilient will support U.S industrial innovation and competitiveness.
World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated b…
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a softwar…
The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace? Military forces are under increasing pressure to field autonomous capabilities faster than ever before.
MIT to Become Hotbed of AI Video Surveillance It’s a lot : According to information obtained by The Tech , MIT is spending over $3 million on more than 500 AI surveillance cameras in academic buildings, residence halls,…
Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure. The post Meta Paid $78,000 Bounty for Vu…
Deterministic Replay for AI Agent Systems arXiv:2607.16200v1 Announce Type: new Abstract: AI agent systems that couple large language models (LLMs) with external tools and APIs are inherently non-deterministic: LLM samp…
Empirical Grounding Improves the Realism of LLM Agents Simulating Human Behavior During Disruptions arXiv:2607.17437v1 Announce Type: new Abstract: Large language model (LLM) agents offer a generative approach to simula…
From Intent to Infrastructure: LLM-Driven Agent Compilers for ISAC Networks arXiv:2607.16269v1 Announce Type: cross Abstract: Integrated sensing and communications (ISAC) is moving from proof-of-concept demonstrations t…
Auditable Session Admission for Cross-Silo Federated Learning arXiv:2607.16559v1 Announce Type: new Abstract: Cross-silo federated learning keeps raw data local, but deployments frequently stall on a practical bottlenec…
Quantum-Resilient Banking Transaction Security using DW-HKEM: A Hybrid RSA/ML-KEM Cryptographic Gateway with Real-Time arXiv:2607.17573v1 Announce Type: new Abstract: The increasing number of online banking and financia…
Building a Custom Metrics Exporter for Kubernetes Kubernetes ships with built-in awareness of CPU and memory, but most real-world scaling decisions depend on signals that live entirely outside that narrow window: how ma…
Built to bounce back: How Azure resiliency evolved Cloud resiliency is about ensuring systems can adapt, recover, and keep functioning within real-world constraints. The post Built to bounce back: How Azure resiliency e…
Content Independence Day, one year on: building the business model for the agentic Internet One year after declaring Content Independence Day, a dynamic market for monetized content has officially emerged. In this repor…
HCP Terraform powered by Infragraph is now in limited availability Hybrid and multi-cloud estates create data silos. HCP Terraform powered by Infragraph provides a single source of truth to help optimize and secure infr…
Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study Privacy controls — systems that enforce retention, access, allowed-purpose, downstream-sharing, or anonymization policies — require a…
Deploy Boundary on Kubernetes with official Helm charts HashiCorp Boundary now offers official Helm charts for deploying controllers and workers on Kubernetes. Learn which chart fits your deployment model and how to get…
Spotlight on WG Device Management The rising popularity of AI, Edge, and Telecommunications workloads on Kubernetes has led to new requirements for hardware management. We now need hardware specification beyond CPU time…
Inside Microsoft’s two-decade push to cut water intensity while scaling for growth As demand for cloud and AI services continues to grow, datacenters are becoming more essential than ever. Communities also want to bette…
Lights Out, Systems On: Validating Instant Power Loss Readiness We’re introducing Instantaneous PowerLoss Storm, a new testing paradigm within Meta’s infrastructure for handling and mitigating instant or zero-notice pow…
Reconciling the Past: Correcting Records for Unfixed Kubernetes CVEs The Kubernetes project relies on transparency to empower cluster administrators and security researchers. One important way we do that is by publishin…
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to ca…
Announcing etcd 3.7.0-beta.0 SIG-Etcd announces the availability of the first beta release of etcd v3.7.0 . This new version of the popular distributed database and key Kubernetes component includes the long-requested R…
Kubernetes v1.36: Mixed Version Proxy Graduates to Beta Back in Kubernetes 1.28, we introduced the Mixed Version Proxy (MVP) as an Alpha feature (under the feature gate UnknownVersionInteroperabilityProxy ) in a previou…
Kubernetes v1.36: Advancing Workload-Aware Scheduling AI/ML and batch workloads introduce unique scheduling challenges that go beyond simple Pod-by-Pod scheduling. In Kubernetes v1.35, we introduced the first tranche of…
Kubernetes v1.36: PSI Metrics for Kubernetes Graduates to GA Since its original implementation in the Linux kernel in 2018, Pressure Stall Information (PSI) has provided users with the high-fidelity signals needed to id…
Kubernetes v1.36: Moving Volume Group Snapshots to GA Volume group snapshots were introduced as an Alpha feature with the Kubernetes v1.27 release, moved to Beta in v1.32, and to a second Beta in v1.34. We are excited t…
Kubernetes v1.36: Server-Side Sharded List and Watch As Kubernetes clusters grow to tens of thousands of nodes, controllers that watch high-cardinality resources like Pods face a scaling wall. Every replica of a horizon…
Kubernetes v1.36: Declarative Validation Graduates to GA In Kubernetes v1.36, Declarative Validation for Kubernetes native types has reached General Availability (GA). For users, this means more reliable, predictable, a…
Kubernetes v1.36: Pod-Level Resource Managers (Alpha) Kubernetes v1.36 introduces Pod-Level Resource Managers as an alpha feature, bringing a more flexible and powerful resource management model to performance-sensitive…
Kubernetes v1.36: In-Place Vertical Scaling for Pod-Level Resources Graduates to Beta Following the graduation of Pod-Level Resources to Beta in v1.34 and the General Availability (GA) of In-Place Pod Vertical Scaling i…
Kubernetes v1.36: Tiered Memory Protection with Memory QoS On behalf of SIG Node, we are pleased to announce updates to the Memory QoS feature (alpha) in Kubernetes v1.36. Memory QoS uses the cgroup v2 memory controller…
Kubernetes v1.36: Staleness Mitigation and Observability for Controllers Staleness in Kubernetes controllers is a problem that affects many controllers, and is something may affect controller behavior in subtle ways. It…
Kubernetes v1.36: Mutable Pod Resources for Suspended Jobs (beta) Kubernetes v1.36 promotes the ability to modify container resource requests and limits in the pod template of a suspended Job to beta. First introduced a…
Kubernetes v1.36: Fine-Grained Kubelet API Authorization Graduates to GA On behalf of Kubernetes SIG Auth and SIG Node, we are pleased to announce the graduation of fine-grained kubelet API authorization to General Avai…
Kubernetes v1.36: User Namespaces in Kubernetes are finally GA After several years of development, User Namespaces support in Kubernetes reached General Availability (GA) with the v1.36 release. This is a Linux-only fea…
SELinux Volume Label Changes goes GA (and likely implications in v1.37) If you run Kubernetes on Linux with SELinux in enforcing mode, plan ahead: a future release (anticipated to be v1.37) is expected to turn the SELin…
Harshita Arora Joins YC as General Partner We're thrilled to announce that Harshita Arora is joining Y Combinator as a General Partner. She brings deep fintech and infrastructure experience, a founder's instinct for pro…
Before You Migrate: Five Surprising Ingress-NGINX Behaviors You Need to Know As announced November 2025, Kubernetes will retire Ingress-NGINX in March 2026. Despite its widespread usage, Ingress-NGINX is full of surpris…
Introducing Node Readiness Controller In the standard Kubernetes model, a node’s suitability for workloads hinges on a single binary "Ready" condition. However, in modern Kubernetes environments, nodes require complex i…
New Conversion from cgroup v1 CPU Shares to v2 CPU Weight I'm excited to announce the implementation of an improved conversion formula from cgroup v1 CPU shares to cgroup v2 CPU weight. This enhancement addresses critic…
Announcing the Checkpoint/Restore Working Group The community around Kubernetes includes a number of Special Interest Groups (SIGs) and Working Groups (WGs) facilitating discussions on important topics between intereste…
Uniform API server access using clientcmd If you've ever wanted to develop a command line client for a Kubernetes API, especially if you've considered making your client usable as a kubectl plugin, you might have wonder…
Kubernetes v1.35: Restricting executables invoked by kubeconfigs via exec plugin allowList added to kuberc Did you know that kubectl can run arbitrary executables, including shell scripts, with the full privileges of th…
Updated Apple Developer Program License Agreement now available The Apple Developer Program License Agreement has been revised to support new features, updated policies, and to provide clarification. Please review the c…
New requirement for apps using Sign in with Apple for account creation Starting January 1, 2026, developers based in the Republic of Korea must provide a server‑to‑server notification endpoint when registering a new Ser…
Random access memories: Inside the time-shifting narrative of The Wreck The Wreck is filed under games, but it’s also been called a visual novel, an interactive experience, and a playable movie. Florent Maurin is OK wit…
Identity-Bound Academic Credentials on Blockchain: On-Chain Issuer Accreditation with ERC-3643 and OnchainID arXiv:2607.16383v1 Announce Type: new Abstract: Verifying academic credentials remains difficult: records are…
Isolation Failure From Shared Storage: Characterizing and Exploiting Page-Cache SCA Leakage Across Containers and VMs arXiv:2607.17518v1 Announce Type: cross Abstract: Modern cloud platforms increasingly combine strong…
Hut 8, IREN deals lift AI-focused Bitcoin mining stocks Bitcoin miners rallied as investors cheered multi-billion-dollar AI infrastructure contracts, underscoring the sector’s accelerating shift toward data centers and…
Catalyst-free, microdroplet-mediated waste plastic conversion to diacids Nature, Published online: 15 July 2026; doi:10.1038/s41586-026-10746-7 A catalyst-free upcycling strategy based on in situ generation of hydroxyl…
Announcing etcd v3.7.0 This article is a mirror of the original announcement Today, SIG etcd is releasing etcd v3.7.0 , the latest minor release of the popular distributed key-value store and core Kubernetes component.…
Kubernetes v1.36: Deprecation and removal of Service ExternalIPs The .spec.externalIPs field for Service was an early attempt to provide cloud-load-balancer-like functionality for non-cloud clusters. Unfortunately, the…
Securing Production Debugging in Kubernetes During production debugging, the fastest route is often broad access such as cluster-admin (a ClusterRole that grants administrator-level access), shared bastions/jump boxes,…