Datadog's Azure Integration No Longer Needs a Secret to Rotate
Secretless authentication replaces static client secrets with OIDC-based federated identity. No expiration dates, no rotation schedules, no telemetry gaps when someone forgets to update a credential.
JFrog Artifactory and GCP Artifact Registry: Native Pull, No Sync Required
JFrog's Artifact Registry Connector routes Cloud Run and GKE pulls directly to Artifactory in real time — eliminating sync lag, parallel registries, and policy enforcement gaps.
AGENTS.md vs. Skills: How to Actually Steer a Coding Agent
CircleCI's breakdown of when to use AGENTS.md versus modular skills for coding agents — and why the real problem isn't the format, it's measuring whether steering works at all.
Unfixed Kubernetes CVEs: What You Can and Can't Actually Detect
Four Kubernetes CVEs have been unfixed since 2020–2021 — not because they were overlooked, but because patching would break the platform. Here's how to know if your cluster is actually exposed.
When Zero Plus Zero Equals Two: Fixing Trace Fragmentation in Istio and Kiali
Combining Istio sidecar tracing with OpenTelemetry instrumentation produces duplicate, disconnected trace records — not unified observability. The fix is two configuration changes, and it closes the gap permanently.
Understanding Unfixed Kubernetes CVEs: What You Can — and Can't — Detect
Four Kubernetes CVEs remain unfixed because patching would break the platform. Datadog's guide to audit-log-based detection shows what each one exposes — and the honest limits of what audit logs can confirm.
HCP Terraform as the Control Plane for AI-Driven Infrastructure
HashiCorp's case for HCP Terraform as the governance layer for AI agents writing infrastructure code: provenance, policy gates, scoped identities, isolated workspaces, and audit trails agents can't bypass.
Agentic Dev Security Starts Before the Agent Writes Its First Line
JFrog's Ohad Shalev argues most agentic development security tools watch what agents build but miss what they consume before they start — and that gap is where the real attack surface lives.
SLSA and DevGovOps: Why Software Supply Chain Governance Now Runs at Machine Speed
AI agents generate code faster than human governance frameworks can review it. DevGovOps — continuous governance embedded in CI/CD — is the response, and SLSA provides the maturity model. Here's how JFrog's implementation works.
swampUP 2026: JFrog's Conference Puts AI Supply Chain Trust at the Center
swampUP 2026 in New York (September 1–3) focuses on immunizing, healing, and governing the agentic software supply chain. Anthropic's Deputy CISO, NVIDIA, AWS, and Wiz are on the agenda. Here's what to expect.
Gateway API v1.6: TCP and UDP Routing Are Finally Production-Ready
Kubernetes Gateway API v1.6 graduates TCPRoute and UDPRoute from experimental to Standard, letting platform teams route databases, DNS, and gaming traffic without vendor lock-in.
Kubernetes v1.37: The Deprecations Platform Teams Need Now
cgroup v1 nodes now fail kubelet initialization by default, kube-proxy IPVS mode is deprecated, and Static Pods lose Secret/ConfigMap references in v1.37.
JFrog's Agent Guard Targets the MCP Servers Nobody in Security Approved
36% of MCP servers and agent skills tested carry a security flaw. JFrog's Agent Guard adds an approved-only proxy so developers can't connect coding agents to ungoverned tools.
Why the controller-runtime Cache Keeps Kubernetes Stable
Every Kubernetes controller reads through a local cache, not the API server directly — the list-watch mechanism that makes that possible, and where it breaks.
The Practical Guide to AI Sandboxes for Developers
AI coding agents have deleted home directories and a production database. What an AI sandbox is, how isolation levels differ, and where it fits.
Datadog's Mambark: A 97M-Parameter Filter That Cuts AI Security Costs 10,000x
Datadog's Mambark, a 96.9M-parameter state-space model, screens 10 billion daily security events down to ~10,000 candidates before an AI agent ever runs.
An OpenAI Model Found a Zero-Day in Artifactory. JFrog Patched It Fast.
OpenAI's models autonomously chained vulnerabilities to escape a sandbox and reach Artifactory infrastructure — a preview of what 'AI as attacker' means for patch response times.
Remote MCP Servers: Why 'Just Run It Locally' Stopped Working
Remote MCP servers move tool access from a developer's laptop to hosted infrastructure — here's the architecture shift and why CircleCI built one for CI/CD.
Model Routing Promises 85% Savings. One Switch Can Erase All of It.
JFrog's research shows model routing cuts AI agent costs by 40-85% — but a single mid-session model switch can cost more than the savings it was meant to create.
Terraform's New Undo Button Fixes Its Scariest Failure Mode
HCP Terraform's new Stacks restore feature undoes accidental workspace deletion with one click — part of a broader release addressing monorepo sprawl and migration friction.
Autonomous Infrastructure for Agentic Workflows
HashiCorp's seven-layer model for governing infrastructure as AI agents make changes at machine speed, from code to policy-bound self-service.
AI Coding Speed Is Outrunning Secrets Security
Nearly 30 million secrets leaked on GitHub in 2025 (up 34% YoY). AI-assisted code leaks at nearly 2x the rate. What DevOps security teams should do now.
Datadog JFR: Why CPU-Time Profiling Beats Wall-Clock in JDK 25
JDK 25 adds unbiased CPU-time profiling to Java Flight Recorder, fixing wall-clock sampling bias that misleads Java performance work.
NuGet Typosquat: How One Extra Letter Rigged a Betting Platform's Odds
JFrog uncovered Newtonsoftt.Json.Net, a typosquatted NuGet package that patched a betting platform's game logic to rig crash-game outcomes on a schedule only the attacker knew.