OffNet Newsroom

Daily topic roundup

Automation / DevOps / IaC

Tuesday, October 20, 2026 · 5 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
The Register general

Terra finds AI-assisted attackers breaking GitHub security patches

Research from Terra indicates a significant uptick in GitHub security fixes that fail or introduce new vulnerabilities within 90 days of release. This trend is attributed to attackers leveraging AI to rapidly identify and exploit weaknesses in patch implementations.

  • Monitor patch regressions closely; initial fixes may introduce new vulnerabilities
  • AI accelerates the discovery of flaws in recently released security patches
  • Implement rigorous post-patch validation and rollback strategies
  • Expect shorter windows for patch stability in high-risk environments
Read at source →
The Register general

Microsoft Exchange October Patch Breaks OWA and Clogs Queues

Microsoft's October updates for Exchange Server have caused significant regressions, specifically breaking Outlook Web Access (OWA) and triggering severe email backlogs on high-volume systems. Administrators report spending entire weekends remediating these issues after a default server setting was altered during the patch process. The disruption highlights the risks of automatic default changes in critical communication infrastructure.

  • October Exchange updates broke Outlook Web Access (OWA) functionality
  • Busy servers experienced lengthy email queues due to a default setting change
  • Admins faced weekend-long remediation efforts to restore service
  • Review default configuration changes in Exchange patch notes before deploying
Read at source →
AWS What's New awsdatabase ↺ since 10-17

AWS Lambda durable functions now live in GovCloud US Regions

AWS has expanded Lambda durable functions to GovCloud (US-West and US-East), enabling compliant orchestration of multi-step workflows for government and regulated sectors. These functions introduce checkpointing and wait primitives that allow state persistence and automatic failure recovery without continuous compute billing. This update supports complex AI and order-processing tasks while adhering to strict security mandates.

  • Durable functions available in GovCloud (US-West/East) for regulated workloads
  • New 'step' and 'wait' primitives enable state checkpointing and pausing
  • Automatic recovery from failures without incurring compute charges during waits
  • Supports complex AI workflows and order processing under compliance constraints
HOW IT WORKSDurable Function Lifecycle1Execute step logic2Checkpoint state automatically3Wait for external event4Resume without compute billing5Recover from failures
Read at source →
AWS What's New awsdatabase ↺ since 10-16

AWS Lambda Durable Execution SDK for Go hits GA

AWS has released the general availability of the Durable Execution SDK for Go, allowing developers to build long-running, resilient workflows directly within Lambda. The SDK automates progress checkpointing and supports pausing execution for up to a year while waiting for external events. This enables Go-native implementation of complex multi-step processes, such as deployment pipelines with human-in-the-loop approval gates, without custom state management code.

  • Eliminates need for custom progress tracking in long-running Go workflows
  • Supports pausing execution for up to one year on external events
  • Enables native Go implementation of human-in-the-loop approval gates
  • Simplifies building resilient infrastructure automation and AI pipelines
HOW IT WORKSDurable Execution Workflow Steps1Start Go Lambda function2Checkpoint progress automatically3Pause for external events4Wait up to one year5Resume with human approval
Read at source →
InfoQ generaldevops ↺ since 10-19

Buildkite adds pipeline-scoped secrets and MCP diagnostic tools

Buildkite has released pipeline-scoped secrets to tighten access control within CI workflows. The update also integrates Model Context Protocol tools that allow agents to validate pipelines, diagnose build failures, and repair webhooks. Additionally, the platform now supports Linux arm64 in its GitHub Actions compatibility layer and expanded OpenTelemetry metrics in Agent v4.1.0.

  • Pipeline-scoped secrets limit credential exposure to specific workflow contexts
  • New MCP tools enable automated pipeline validation and failure diagnosis
  • Linux arm64 support extends GitHub Actions compatibility to ARM infrastructure
  • Agent v4.1.0 delivers deeper OpenTelemetry observability for CI runs
Read at source →
↑