Tootfinder

In a supply chain attack on the popular LiteLLM library in March this year, around 434,000 build pipelines – which were in use at more than 2,500 companies – are believed to have been compromised: https://www.cloudsek.com/blog/ai-supply-chain-breach-2500-c…

2,500+ Companies and 434,000 CI/CD Pipelines Exposed in the Largest AI Supply Chain Breach of 2026 | CloudSEK
CloudSEK’s latest research examines the LiteLLM AI supply-chain attack, which potentially exposed 2,500+ organisations and 434,000 CI/CD pipelines worldwide. The report details the risks to cloud credentials, source-code repositories, Kubernetes environments and AI infrastructure, while highlighting how compromised AI dependencies can create enterprise-wide security exposure.

#Kubernetes v1.37: Garhwal
https://kubernetes.io/blog/2026/08/26/kubernetes-v1-37-release/

As open-weight models become the next AI ecosystem's foundation, a US ban on Chinese models would risk ceding the neutral substrate where innovation compounds (Tobi Knaup)
https://tobi.knaup.me/2026-07-25-open-weight-ai-is-having-its-kubernetes-moment/

Open-weight AI is having its Kubernetes moment. Let's not ruin it. | Tobi Knaup
Open-weight models are becoming the foundation for the next AI ecosystem. The US should compete in it, not wall itself off.

mstack: OCI-Container mit systemd ausführen
OCI ist das Format, das Docker, Kubernetes und Konsorten verwenden. systemd bietet nun eine direktere und einfachere Integration von OCI-Containern.
https://www.

mstack: OCI-Container mit systemd ausführen
OCI ist das Format, das Docker, Kubernetes und Konsorten verwenden. systemd bietet nun eine direktere und einfachere Integration von OCI-Containern.

OpenTelemetry Collector Troubleshooting: 15 Common Problems
#opentelemetry

OpenTelemetry Collector Troubleshooting: 15 Common Problems
Troubleshoot OpenTelemetry Collector issues including OTLP, TLS, exporters, processors, queues, memory pressure, Elasticsearch, and Kubernetes networking.

Wie nennt man das, was man häufig in deutschen Diskursen antrifft - dieses zwanghafte Beschwichtigen "nur die Ruhe, ich habe das immer schon vorhergesehen und wenn man drüber nachdenkt, ist es wahnsinnig logisch".
Welches dann aber gepaart wird mit völliger Unkenntnis der eigentlichen Vorgänge. Der OpenAI Swarm hatte den kubernetes-Cluster von Huggingface befallen und dort mehrere redundante Pods mit sich selbst gestartet. HF musste das gesamte Cluster löschen und neu aufset…

just had my great deal of fun with #Kubernetes patch operations 🫠

Enterprise-Schwenk: Portainer friert Community Edition ein
Portainer fokussiert sich ab Version 3.0 auf Kubernetes, Docker spielt nur noch die zweite Geige. Die Community Edition bleibt auf der 2.x-Codebasis.
http…

Enterprise-Schwenk: Portainer friert Community Edition ein
Portainer fokussiert sich ab Version 3.0 auf Kubernetes, Docker spielt nur noch die zweite Geige. Die Community Edition bleibt auf der 2.x-Codebasis.

cooool, Hashi Nomad 2.0.4 broke half of our cluster in a fucking point release again 🥲
i'm really gonna have to learn kubernetes don't i
https://github.com/hashicorp/nomad/issues/28224

Issue · hashicorp/nomad
Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and...

Lumping together behemoth projects like Kubernetes with VLC and XZ Util is a mistake that confuses users and customers: the differences cannot be ignored. https://www.getgrist.com/blog/stop-saying-open-source-sustainability/

Stop saying "open source sustainability" | Grist
Why we need to ask if open source projects have a way to thrive, and if so, who's paying for it?

Check out today's Metacurity for the most critical infosec developments you may have missed since Friday, including
--OpenAI missed rogue agent,
--Hugging Face breach reshapes open-v-closed AI,
--Firms abandon AI lab loyalty,
--Open-weight AI's Kubernetes moment
--China pushes open-weight AI,
--Washington splits on Chinese AI,
--N. Korea expands its intelligence apparatus,
--Hackers hijack hotel Wi-Fi to steal Microsoft 365 accounts,
--DOJ tests privacy limits with GrapheneOS prosecution,
--Malware found in Steam’s biggest indie game,
--Google unveils a simpler threat actor naming scheme,
--Dutch Olympic speed skating venue hit by The Gentlemen,
--Tribeca Festival leak exposed celebrity contact information,
--Companies return to entry-level human hiring in the AI era,
--Comic-Con bans Meta smart glasses,
--AI guardrails fail on mass-casualty prompt
https://www.metacurity.com/ai-watch-openais-hacking-agent-breach-signals-a-fracturing-ai-order/