Datadog Agent Observability Brings AI App Debugging Into Your Coding Agent
Teams spend 60–80% of AI development time on evaluation and error analysis. Datadog's new Agent Observability workflow surfaces production trace data directly into coding agents to cut that cycle.
Terraform and Azure in the AI Era: Governing Infrastructure That Won't Hold Still
AI experimentation is creating unmanaged Azure resources faster than ops teams can track them. Terraform Query and Sentinel policy-as-code are how teams are bringing order back.
Datadog Acquires Adaptive ML: Production-Trained AI Agents for Observability
Datadog acquired Adaptive ML to embed specialized model training into its observability platform — shifting AI agents from generic APIs to systems trained on real production signals.
CVE Severity Scores Are Inflated: JFrog's 96% Finding
JFrog's security team found 96% of critical CVEs warranted a lower rating. Their prototype pollution research exposes why CVSS scores routinely misrepresent real-world exploitability.
Datadog Achieves GovRAMP High: What It Means for State and Local Government Observability
GovRAMP High authorization opens Datadog's full platform to state, local, tribal, and educational agencies — addressing the fragmented monitoring problem endemic to government IT.
OMB M-26-14: What Federal Agencies Must Do About Logging — and How Datadog Helps
The new OMB memo replaces prescriptive logging mandates with a 320-day maturity framework across four levels. Datadog's FedRAMP High platform maps to each level directly.
Datadog's CDN Log Fix: Archive Search Lets You Query 751 GB of Logs Without Paying to Index Them
High-volume CDN access logs are too expensive to keep in Datadog's indexing tier but too valuable to throw away. Archive Search solves the gap — query petabytes in cold storage with the same syntax as Log Explorer.
Why Uniform AI Agent Governance Fails — and What to Do Instead
Gartner projects 40% of enterprises will demote or decommission AI agents by 2027 due to governance failures. JFrog's analysis of why one-size-fits-all governance breaks down, and the tiered alternative.
Mutation Testing: What Platform Teams Are Missing With Code Coverage Alone
Code coverage tells you which lines ran. Mutation testing tells you whether your tests would actually catch a defect. For platform teams shipping infrastructure-affecting code, the difference is the gap between 'tests passed' and 'tests work'.
Checkmarx's New SAST Engine Isn't About the LLM. It's About What Comes After.
Checkmarx unveiled a hybrid SAST engine with three components — a deterministic scanner, an LLM trained on security data, and a Finding Analysis Engine that filters false positives before results reach developers. The differentiator is the last one.
HCP Vault Dedicated Gets Cluster Disaster Recovery — and a DR Testing Path
HashiCorp's HCP Vault Dedicated now supports cluster-level disaster recovery in public preview, enabling failover for cluster-specific incidents and — critically — scheduled DR testing without waiting for a regional outage.
JFrog Artifactory Adds Xet Protocol Support: How Enterprise Model Distribution Finally Scales
JFrog Artifactory's native Xet protocol support brings chunk-level deduplication to Hugging Face model distribution — delivering up to 3.7x faster subsequent pulls and controlled storage growth for enterprises managing fine-tuned model variants.
How Datadog Used AI to Turn a 45-Minute Query Into a 1-Second One
Datadog migrated its Stream Router — the control plane handling 100+ trillion events daily — from FoundationDB to PostgreSQL using AI-assisted refactoring. The approach cut 45-minute operations to 1 second and reduced database costs by 90%.
JFrog Brings Artifact Governance to Coding Agent Plugins
JFrog Agent Plugins Repositories treats coding agent plugins as governed software artifacts in Artifactory — closing the supply chain gap where Claude Code, Cursor, and Codex plugins arrive from uncontrolled GitHub repos and Slack channels.
PixelSmash: The FFmpeg Heap Overflow That Turns Media Files Into Attack Vectors
CVE-2026-8461 is a CVSS 8.8 heap out-of-bounds write in FFmpeg's MagicYUV decoder — enabled by default, triggerable without user interaction, and already demonstrated as RCE against Jellyfin and Nextcloud.
JFrog Named a Leader in the First-Ever Gartner MQ for Software Supply Chain
JFrog placed highest for Ability to Execute in the inaugural Gartner Magic Quadrant for Software Supply Chain Platforms — the first analyst framework to evaluate this market as a unified category.
npm v12's Biggest Security Change: Installation Scripts Now Need Your Permission
npm v12 disables lifecycle scripts, Git dependencies, and remote URL resolution by default — an explicit trust model that blocks 53% of malicious npm attacks and requires teams to audit their CI/CD pipelines before upgrading.
HashiCorp Closes the Terraform-Ansible Gap With pyTFE and Collection 2.0
pyTFE 1.0 and Terraform Ansible Collection 2.0 make it practical to run Terraform workflows from Ansible without glue code — bridging Day 0 provisioning and Day 2 operations natively.
HashiCorp Launches tfctl: A Dedicated CLI for HCP Terraform and Terraform Enterprise
HashiCorp's new tfctl gives platform engineers full API coverage of HCP Terraform and TFE from the command line — with dry-run mode, schema discovery, and built-in guardrails for destructive operations.
Datadog MCP Apps Bring Rendered Dashboards Into Claude, Cursor, and ChatGPT
Datadog's MCP Apps extend the Model Context Protocol with rendered UI components — interactive monitor cards, timeseries graphs, and APM trace views — surfaced directly inside AI coding and chat interfaces.
AI Writes Rego Fast. JFrog's AppTrust Playground Validates It Against Real Artifacts.
OPA dominates policy-as-code at 62% of all policy files. AI tools generate it in seconds. JFrog's Policy-as-Code Playground closes the gap between AI-generated Rego and production-safe policy.
JFrog Brings Xray Security Data Into Amazon Kiro With a New Open-Source Power
JFrog Power for Kiro adds artifact search, repository management, and live CVE data from JFrog Xray directly into Kiro's MCP-native IDE — closing the gap between AI-assisted coding and security validation.
Terraform MCP Server Is Generally Available: What the Four Capabilities Actually Do
HashiCorp's Terraform MCP server reached GA for HCP Terraform and Terraform Enterprise — enabling AI coding assistants to query workspaces, generate registry-compliant code, and explain plan changes in natural language.
When AI Attacks at Machine Speed: The End of Static Credentials
An exposed AWS key can be pivoted to database access in 18 minutes by an AI agent. Why static credentials are no longer a viable security posture.