OffNet Newsroom

Daily topic roundup

Automation / DevOps / IaC

Wednesday, July 29, 2026 · 8 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
InfoQ generaldevops

GitHub Adds 3-Day Cooldown to Dependabot Default Policy

GitHub has updated Dependabot to wait three days before opening pull requests for new dependency versions. This delay aims to give the security community time to identify and patch malicious releases before they are automatically integrated into codebases. The change shifts the default behavior from immediate updates to a more cautious, delayed approach.

  • Automated PRs now have a 3-day delay by default to mitigate supply chain risks.
  • This window allows time for community detection of malicious or broken dependency releases.
  • Engineers should review existing workflows as immediate updates are no longer the default.
  • Security posture improves by reducing exposure to zero-day vulnerabilities in new packages.
  • No configuration change is required to benefit from this new default safety mechanism.
Read at source →
InfoQ generaldevops

Securing MCP in Production: Defense-in-Depth Beyond the Gateway

This article outlines a defense-in-depth strategy for securing Model Context Protocol deployments in production environments. It identifies four key architectural control layers: safe execution, management infrastructure, outbound trust, and semantic integrity. The core argument is that security enforcement must extend beyond the gateway to the earliest trustworthy control points within the architecture.

  • Move security enforcement beyond the gateway to earlier trustworthy control points.
  • Implement safe execution layers to contain potential model or tool risks.
  • Secure management infrastructure to protect configuration and state.
  • Establish strict outbound trust controls for external API calls.
  • Enforce semantic integrity to validate data context and meaning.
Read at source →
arXiv cs.AI researchai

Conformal Prediction for Cloud VM Right-Sizing Recommendations

This paper introduces Right-sizing Recommendations (RSR), a framework using conformal prediction to optimize virtual machine sizing in data centers. It addresses the limitations of traditional allocation methods that fail to handle fluctuating resource utilization, leading to over- or under-provisioning. By providing high-quality interval predictions, the approach captures demand uncertainty to support more efficient instance provisioning and cost reduction for hyperscalers.

  • Conformal prediction provides reliable uncertainty intervals for VM resource demand.
  • RSR framework targets hyperscaler efficiency by reducing over- and under-provisioning.
  • Interval predictions enable better operational decisions than point estimates.
  • Addresses the unpredictability of VM utilization patterns in dynamic clouds.
CHECKLISTWhat matters hereConformal prediction provides reliable uncertainty intervals for VM…RSR framework targets hyperscaler efficiency by reducing over- and…Interval predictions enable better operational decisions than point…Addresses the unpredictability of VM utilization patterns in dynamic…
Read at source →
AWS What's New awsdatabase

AWS Glue Data Quality adds ML anomaly detection and GDC result storage

AWS Glue Data Quality now allows anomaly detection for Catalog-based evaluations, using ML-powered time-series forecasting to identify unexpected changes in data statistics like row count spikes or distinct value drops. The service also supports writing evaluation results, including rule outcomes and profiling metrics, directly to AWS Glue Data Catalog tables. These features apply consistently across both ETL jobs and Catalog evaluations, enabling automatic issue surfacing for data engineers monitoring large numbers of tables.

  • ML-based anomaly detection removes the need for explicit threshold rules in GDC evaluations.
  • Evaluation results and profiling metrics can now be persisted directly to the Glue Data Catalog.
  • Support spans both ETL jobs and Catalog-based evaluations for consistent monitoring.
CHECKLISTKey GDC EnhancementsUse ML anomaly detection for Catalog evaluationsPersist metrics directly to Glue Data CatalogApply consistent monitoring across ETL and Catalog
Read at source →
AWS What's New awsdatabase

AWS Glue Data Quality adds Distribution Analyzer for profiling histograms

AWS Glue Data Quality now includes a Distribution Analyzer that generates frequency distributions and histograms directly via DQDL rulesets. The tool supports numeric histograms with custom bin counts, as well as value distributions for categorical, date, and boolean columns. This feature allows practitioners to detect skewness, outliers, and anomalies without writing custom code, integrating seamlessly into existing data quality workflows.

  • DQDL now supports a Distribution Analyzer for automated data profiling.
  • Generates histograms for numeric columns with customizable bin counts.
  • Provides value distributions for categorical, date, and boolean fields.
  • Enables quick detection of skewness and outliers without custom code.
  • Integrates directly into existing DQDL rulesets for pipeline validation.
CHECKLISTProfile Data With Distribution AnalyzerGenerate histograms for numeric columnsMap distributions for categorical fieldsDetect skewness without custom codeValidate anomalies in existing rulesets
Read at source →
InfoQ generaldevops

Grafana Assistant Now Queries 30+ Data Sources via Natural Language

Grafana Labs has updated Grafana Assistant to support querying and correlating data across more than 30 distinct data sources. The AI-powered observability tool allows users to interact with this expanded ecosystem using natural language prompts. This enhancement aims to streamline cross-source analysis without requiring complex query syntax.

  • Grafana Assistant now supports over 30 data sources for integrated querying.
  • Users can correlate metrics across disparate systems using natural language.
  • Reduces friction in multi-source observability workflows for DBAs and engineers.
  • No need to learn specific query languages for each connected backend.
Read at source →
The Register general

Microsoft and Wiz agents catch 90% of bugs by matching models to tasks

A joint effort between Microsoft and Wiz demonstrates that AI security agents can identify over 90% of software vulnerabilities. The key to this high detection rate is assigning specific LLMs to distinct security roles rather than relying on a single generic model. This approach allows each agent to specialize in its designated area, significantly improving overall accuracy in bug hunting.

  • Specialized AI agents outperform general models in security vulnerability detection.
  • Matching the right LLM to specific security tasks is critical for success.
  • Joint Microsoft-Wiz research shows >90% bug catch rate using this method.
  • Architecting agents by role can streamline automated security workflows.
Read at source →
The Register general

Arista patches actively exploited VeloCloud unauth RCE, CISA demands urgent fix

Arista Networks has released a patch for a critical vulnerability in VeloCloud SD-WAN software that allows unauthenticated command injection. The flaw, assigned a CVSS score of 10, enables attackers to execute arbitrary commands on managed Edge devices without authentication. CISA is urging administrators to prioritize this fix due to active exploitation in the wild.

  • Fix critical CVSS 10 unauthenticated command injection in VeloCloud Edge devices
  • CISA mandates urgent remediation due to active exploitation in the wild
  • Attackers gain full control over managed SD-WAN edge nodes without credentials
  • Prioritize patching for all VeloCloud deployments immediately
Read at source →
↑