DevOps Bulletin @devopsbulletin - Twitter Profile

Pinned Tweet

about 3 years ago

Master modern CI/CD with "Pipeline as Code" 🚀! Uncover Jenkins at scale, cloud-native pipelines, seamless Docker/serverless deployments, and the soul of DevOps. 🔗 https://t.co/U0Inw8F29W

devopsbulletin's tweet photo. Master modern CI/CD with "Pipeline as Code" 🚀! Uncover Jenkins at scale, cloud-native pipelines, seamless Docker/serverless deployments, and the soul of DevOps. 🔗 https://t.co/U0Inw8F29W https://t.co/D5gVUv0gtK

1

153

43

67

17K

DevOps Bulletin

@devopsbulletin

about 12 hours ago

https://t.co/nV4PznVWWl

0

25

DevOps Bulletin

@devopsbulletin

about 12 hours ago

One model cost about $8 or $24 per task in AWS's benchmark. The heavier agent harness spawned subagents that added tokens and runtime without improving the score. Before swapping models, check what your agent is spending turns on.

devopsbulletin's tweet photo. One model cost about $8 or $24 per task in AWS's benchmark.

The heavier agent harness spawned subagents that added tokens and runtime without improving the score. Before swapping models, check what your agent is spending turns on. https://t.co/K3XqhmJSK3

1

0

102

DevOps Bulletin

@devopsbulletin

about 14 hours ago

https://t.co/OB83tikmtw

0

20

Who to follow

Hand-picked Kubernetes jobs, clear salary ranges and apply directly to companies. Curated by the @Learnk8s team. Mastodon: [email protected]

Aurimas Griciūnas

@Aurimas_Gr

🔨 Founder & CEO @ SwirlAI 📖 Writing about #LLM, #AI, #DataEngineering, #MachineLearning and #Data ✍️ Author of SwirlAI Newsletter.

DevOps Bulletin

@devopsbulletin

about 14 hours ago

A file in Downloads told a coding agent to install malware. Forever Security traced a blocked npm install to a planted AGENTS.md disguised as engineering notes. The agent was treating the attacker's setup instructions as part of its job.

devopsbulletin's tweet photo. A file in Downloads told a coding agent to install malware.

Forever Security traced a blocked npm install to a planted AGENTS.md disguised as engineering notes. The agent was treating the attacker's setup instructions as part of its job. https://t.co/F9gFu5rnUS

4

1

0

132

DevOps Bulletin

@devopsbulletin

1 day ago

https://t.co/XPrGOL1hsC

0

41

DevOps Bulletin

@devopsbulletin

1 day ago

GitHub Actions can leak secrets without contacting an attacker's server. Wiz found Gheist using stolen tokens to plant workflows, encode secrets into logs, download them through GitHub's API, then delete the runs. The exfiltration channel was GitHub itself.

devopsbulletin's tweet photo. GitHub Actions can leak secrets without contacting an attacker's server.

Wiz found Gheist using stolen tokens to plant workflows, encode secrets into logs, download them through GitHub's API, then delete the runs. The exfiltration channel was GitHub itself. https://t.co/IjMknfUMcr

2

0

303

DevOps Bulletin

@devopsbulletin

1 day ago

https://t.co/Kr0CfhNZXj

0

23

DevOps Bulletin

@devopsbulletin

1 day ago

A libcurl security patch exposed a Git bug and broke HCP Terraform runs. The Git bundled with tfc-agent failed on some VCS HTTP redirects after the update. HashiCorp shipped tfc-agent 1.33.3 with the fix.

devopsbulletin's tweet photo. A libcurl security patch exposed a Git bug and broke HCP Terraform runs.

The Git bundled with tfc-agent failed on some VCS HTTP redirects after the update. HashiCorp shipped tfc-agent 1.33.3 with the fix. https://t.co/mL2MIUrEbI

1

0

210

DevOps Bulletin

@devopsbulletin

2 days ago

https://t.co/7rgPQAziNz

0

43

DevOps Bulletin

@devopsbulletin

2 days ago

Your GCP bill can fund an attacker's Gemini usage. Wiz found stolen credentials being used to link external projects to victims' billing accounts. The workloads stayed in the attackers' projects.

devopsbulletin's tweet photo. Your GCP bill can fund an attacker's Gemini usage.

Wiz found stolen credentials being used to link external projects to victims' billing accounts. The workloads stayed in the attackers' projects. https://t.co/2vP3ZMdhno

1

0

189

DevOps Bulletin

@devopsbulletin

3 days ago

https://t.co/nE6RdPMYGX

0

32

DevOps Bulletin

@devopsbulletin

3 days ago

Your biggest prompts can keep you paying for Sonnet after you switch to a cheaper model. In AI21's 50-PR benchmark, three oversized reviews triggered expensive fallbacks. Compacting the inputs helped cut token costs 98% versus baseline.

devopsbulletin's tweet photo. Your biggest prompts can keep you paying for Sonnet after you switch to a cheaper model.

In AI21's 50-PR benchmark, three oversized reviews triggered expensive fallbacks. Compacting the inputs helped cut token costs 98% versus baseline. https://t.co/axUVRNjrxL

2

0

156

DevOps Bulletin

@devopsbulletin

4 days ago

https://t.co/ALXQ3wuMXg

0

43

DevOps Bulletin

@devopsbulletin

4 days ago

LiteLLM removed a leaked key from Git history. Attackers used it months later. It unlocked an agent platform holding a GitHub org owner's token. That access led to a malicious release.

devopsbulletin's tweet photo. LiteLLM removed a leaked key from Git history. Attackers used it months later.

It unlocked an agent platform holding a GitHub org owner's token. That access led to a malicious release. https://t.co/x4Svbm3M5B

1

0

265

DevOps Bulletin

@devopsbulletin

5 days ago

https://t.co/tFHJY0iTdB

0

37

DevOps Bulletin

@devopsbulletin

5 days ago

𝗬𝗼𝘂𝗿 𝗰𝗼𝗱𝗶𝗻𝗴 𝗮𝗴𝗲𝗻𝘁 𝗰𝗮𝗻 𝗷𝗼𝗶𝗻 𝗮 𝗴𝗿𝗼𝘂𝗽 𝗰𝗵𝗮𝘁 𝗳𝗿𝗼𝗺 𝗶𝗻𝘀𝗶𝗱𝗲 𝗶𝘁𝘀 𝗗𝗼𝗰𝗸𝗲𝗿 𝘀𝗮𝗻𝗱𝗯𝗼𝘅. Docker's BAND AI kit connects sandboxed agents with humans and other agents. Outbound WebSocket/API connections; no inbound port needed.

devopsbulletin's tweet photo. 𝗬𝗼𝘂𝗿 𝗰𝗼𝗱𝗶𝗻𝗴 𝗮𝗴𝗲𝗻𝘁 𝗰𝗮𝗻 𝗷𝗼𝗶𝗻 𝗮 𝗴𝗿𝗼𝘂𝗽 𝗰𝗵𝗮𝘁 𝗳𝗿𝗼𝗺 𝗶𝗻𝘀𝗶𝗱𝗲 𝗶𝘁𝘀 𝗗𝗼𝗰𝗸𝗲𝗿 𝘀𝗮𝗻𝗱𝗯𝗼𝘅.

Docker's BAND AI kit connects sandboxed agents with humans and other agents. Outbound WebSocket/API connections; no inbound port needed. https://t.co/3L4lm8G0Cg

3

0

169

DevOps Bulletin

@devopsbulletin

5 days ago

https://t.co/G0sI3h7RZG

0

28

DevOps Bulletin

@devopsbulletin

5 days ago

𝗧𝘆𝗽𝗲𝗦𝗰𝗿𝗶𝗽𝘁 𝗴𝗼𝘁 𝗮 𝗚𝗼 𝗿𝗲𝘄𝗿𝗶𝘁𝗲. 𝗡𝗼𝘄 𝗖𝗹𝗼𝘂𝗱𝗳𝗹𝗮𝗿𝗲 𝗶𝘀 𝗯𝗮𝗰𝗸𝗶𝗻𝗴 𝗮 𝗥𝘂𝘀𝘁 𝗽𝗼𝗿𝘁. tsrs is experimental. Early benchmarks report up to 8x faster checks and ~70% less memory than TypeScript 7.0, with matching worker counts.

devopsbulletin's tweet photo. 𝗧𝘆𝗽𝗲𝗦𝗰𝗿𝗶𝗽𝘁 𝗴𝗼𝘁 𝗮 𝗚𝗼 𝗿𝗲𝘄𝗿𝗶𝘁𝗲. 𝗡𝗼𝘄 𝗖𝗹𝗼𝘂𝗱𝗳𝗹𝗮𝗿𝗲 𝗶𝘀 𝗯𝗮𝗰𝗸𝗶𝗻𝗴 𝗮 𝗥𝘂𝘀𝘁 𝗽𝗼𝗿𝘁.

tsrs is experimental. Early benchmarks report up to 8x faster checks and ~70% less memory than TypeScript 7.0, with matching worker counts. https://t.co/j7vP0r7jiJ

1

0

157

DevOps Bulletin

@devopsbulletin

6 days ago

https://t.co/MhxMoiO7UP

0

61

DevOps Bulletin

@devopsbulletin

6 days ago

𝗡𝗼𝗱𝗲.𝗷𝘀 𝗷𝘂𝘀𝘁 𝗽𝗮𝘁𝗰𝗵𝗲𝗱 𝗮 𝗕𝗿𝗼𝘁𝗹𝗶 𝗳𝗹𝗮𝘄 𝘁𝗵𝗮𝘁 𝗰𝗮𝗻 𝗹𝗲𝗮𝗱 𝘁𝗼 𝗿𝗲𝗺𝗼𝘁𝗲 𝗰𝗼𝗱𝗲 𝗲𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻. October 21: 10 fixes across Node.js 22, 24 and 26, including TLS and permission-model bypasses. Fixed: 22.23.4 / 24.22.1 / 26.12.1.

devopsbulletin's tweet photo. 𝗡𝗼𝗱𝗲.𝗷𝘀 𝗷𝘂𝘀𝘁 𝗽𝗮𝘁𝗰𝗵𝗲𝗱 𝗮 𝗕𝗿𝗼𝘁𝗹𝗶 𝗳𝗹𝗮𝘄 𝘁𝗵𝗮𝘁 𝗰𝗮𝗻 𝗹𝗲𝗮𝗱 𝘁𝗼 𝗿𝗲𝗺𝗼𝘁𝗲 𝗰𝗼𝗱𝗲 𝗲𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻.

October 21: 10 fixes across Node.js 22, 24 and 26, including TLS and permission-model bypasses.

Fixed: 22.23.4 / 24.22.1 / 26.12.1. https://t.co/WfonmkDMq0

1

0

184

DevOps Bulletin

@devopsbulletin

Who to follow

Last Seen Users on Sotwe

Trends for you

Most Popular Users