news​

• Kubernetes 1.31 was released on August 13.
• PSA: Zero click RCE vulnerability on MS Windows, CVE Score 9.8, please patch now if you are using IPv6.
• Cyber insurers are winners from the biggest ever IT outage.
• The best hacks and security research from Black Hat and Def Con 2024.
• .internal is now officially a reserved TLD.
• Slack develops Bedrock Operator for Kubernetes StatefulSets.
• Proposal: terraform plan -light.
  • terraform plan -light.
  • tofu plan -light.
• Russ Cox steps down as tech lead of Go programming language.

news​

• Google's online search monopoly is illegal, US judge rules.
• Crowdstrike drivers are a prime target for RCE and LPE.'
• Coinbase awarded a $500k bug bounty via hackerone.
• Coming soon to K8s: mount a docker container as a volume.

toolings​

• aws-icons: SVG and PNG AWS icons for your architecture diagrams.
• logu: Extract patterns from (streaming) unstructured log messages.

news​

• GitHub:
  • GitHub Private Mirrors App – Public Beta.
  • Actions Usage Metrics is generally available (GitHub Enterprise Only) .
  • Validation on package name when submitting a new GitHub security advisory (GHSA).
  • Copilot Enterprise Mixed Licensing beta.
  • Repository updates July 31st 2024.
  • Copilot network requests are now routed based on subscription.
• Secure Boot useless on hundreds of PCs from major vendors after key leak.
• Homebrew Undergoes Security Audit .
• AWS Silently Deprecates Code Commit, Cloud9.
• OpenTofu 1.8.0 is out: with Early Evaluation, Provider Mocking, and a Coder-Friendly Future.
• OpenTofu plans dynamic providers/loops.
• The 7th annual Open Source Management & OSPO survey is now accepting responses!.

news​

• CrowdStrike
  • CrowdStrike outage explained: What caused it and what’s next.
  • Remediation and Guidance Hub.
  • Preliminary Post Incident Review (PIR).
• GitHub:
  • Code security configurations are supported in the audit log.
  • Security overview dashboards, secret scanning metrics and enablement trends reports are now generally available.
  • Deprecation of API endpoint to enable or disable a security feature for an organization.
  • Enable secret scanning for non-provider patterns on repositories with the REST API.
  • Enhance your pull request workflow: Copilot pull request text completion now in beta.
• the 2024 results from Stack Overflow’s Annual Developer Survey
• Wiz Rejects Google’s $23 Billion Offer, Seeks IPO Instead.

news​

• AWS App Studio promises to generate enterprise apps from a written prompt.
• Google near deal to acquire cybersecurity startup Wiz for $23 billion.
• New Blast-RADIUS attack breaks 30-year-old protocol used in networks everywhere.
• CISA broke into a US federal agency, and no one noticed for a full 5 months.

toolings​

• k8ssandra-operator: The Kubernetes operator for K8ssandra.
• aws-secretsmanager-agent: a local HTTP service that you can install and use in your compute environments to read secrets from Secrets Manager and cache them in memory.
• kaskade:a text user interface for kafka, which allows you to interact and consume topics from your terminal in style!
• tau: Open source distributed Platform as a Service (PaaS). A self-hosted Vercel / Netlify / Cloudflare alternative.