Typeform rolled their ownTerraform providerto wrangle runtime data through an internal API. Built with HashiCorp’sGo SDK, the official scaffolding framework, and wired up withacceptance testsfor full lifecycle muscle. They skipped the publicTerraform Registryentirely. Instead, they shipped provider..

AWS just dropped a new threat-response setup that tiesGuardDuty,EventBridge,Step Functions, andSystems Manager Run Commandinto one clean pipeline. The goal? Hunt for EC2 threats and lock downActive Directoryaccounts—automatically. GuardDuty kicks off the flow when it spots trouble. From there, Even..

Grafana Beyla 2.5 goes all-in on upstreamOpenTelemetry eBPF Instrumentation, baking it right into the core. This release addsauto-instrumentation for MongoDB and JSON-RPC,manual spans in Go, and tightertrace correlation for NodeJS. New in town:survey mode. Think lightweight service discovery—no ful..

Pulumi ESC just leveled up withApprovals—structured reviews for environment config changes, straight from Console, CLI, SDK, or VS Code. Think pull requests, but for your infra settings. No more YOLO updates. Teams can now lock down config changes with required sign-offs. More control. Cleaner logs..

Microsoft just droppedAzure Service Health Built-In Policy(Preview). It lets teams push Service Health alerts across every Azure subscription—automatically—using Azure Policy. No more piecemeal setup. It folds in AMBA lessons, supports custom rules and action groups, and locks in alert coverage at ..

Cybersecurity professionals can now launch Kali Linux in a virtualized container on macOS Sequoia using Apple's new containerization framework. Apple announced a new framework at WWDC 2025, allowing Apple Silicon hardware to run isolated Linux distros in a virtualized environment. There are limitati..

A team wired up Azure DevOps’MCP serverwithGitHub Copilotto crank outPlaywrightend-to-end tests from manual test cases. They now run tests on demand from Azure Test Plans, convert entire test suites in bulk, and drop the results into CI pipelines—no hand-holding required. System shift:AI's not just..

MariaDB Kubernetes Operator 25.08.0 drops some real upgrades. First up:physical backups. Now supported through native MariaDB tools and Kubernetes CSI snapshots—huge win if you're dealing with chunky datasets and tight recovery windows. It alsodefaults to MariaDB 11.8, which brings in anative vect..

CNCF just dropped anAI workload conformance program, built like the Kubernetes one—so AI tools play nice across clusters. Portability, meet your referee. It’s tightening the loop betweenOpenTelemetry and OpenSearch, turning ad-hoc hacks into actual cross-project coordination. AndBackstage and GitOp..

A fresh pattern’s gaining traction:Docker + Tailscale sidecarsreplacing old-school reverse proxies and clunky VPNs. Each service runs as its ownmesh-routed node, containerized and independent. The trick?Network namespace sharing.App containers hook into the Tailscale mesh with no exposed ports, no ..