InfoQ

eMudhra Intermediate CA Compromise

Chris Swan — Wed, 21 Oct 2026 17:30:00 GMT

Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys were revealed due to low entropy, not through a known breach. Browsers blocked them using revocation lists, but other software had to remove the emSign ECC G3 root. Unpatched systems remain exposed to forged certificates, including client auth and mTLS.

By Chris Swan

Netflix Bridges AWS IAM and Internal Identity with Workload Attestation

Leela Kumili — Wed, 21 Oct 2026 13:45:00 GMT

Netflix has developed a workload attestation mechanism for Apache Spark jobs running on Amazon EMR. The design combines AWS IAM identity with signed claims from Netflix’s control plane before issuing short-lived internal X.509 certificates, allowing managed compute workloads to authenticate to internal services without directly injecting credentials.

By Leela Kumili

Article Series: Agentic AI Architecture

Rafał Gancarz — Wed, 21 Oct 2026 11:30:00 GMT

In this article series, we try to establish agentic AI architecture as a new type of software architecture that will likely dominate the industry for years to come. The articles, written by industry experts, cover various elements and aspects of agentic AI architecture. We aim to present the latest trends and developments shaping the new type of architecture as it enters the mainstream.

By Rafał Gancarz

Presentation: AI is an Amplifier: Scale High Performance, Not Dysfunction

Nathen Harvey — Wed, 21 Oct 2026 11:00:00 GMT

Nathen Harvey shares insights from DORA research on AI adoption in software delivery. He explains why AI acts as an amplifier, how the DORA AI Capabilities Model drives outcomes, and why engineering leaders must evolve beyond bottlenecks like code reviews to achieve sustainable productivity, reduce delivery instability, and empower developers without burning out their teams.

By Nathen Harvey

Google SynthID Detector Simplifies Watermark Detection and Expands Support to Other AI Providers

Sergio De Simone — Wed, 21 Oct 2026 10:00:00 GMT

Google DeepMind announced the global availability of SynthID Detector, a tool designed to help identify AI-generated content, including media created using AI tools from SynthID partners such as OpenAI, NVIDIA, and Kakao, with Apple support expected soon.

By Sergio De Simone

Article: Distributed Spring Batch Without a Message Broker

Janardhan Reddy Chejarla — Wed, 21 Oct 2026 09:00:00 GMT

Distributed Spring Batch partitioning already needs a shared, persistent job repository. This article makes that database the whole coordination plane and drops the message broker, sizing work to the live node count, a per-job master with no standing coordinator, compare-and-set claiming that prevents double-execution, two-phase heartbeat failover, and where a broker is still the right choice.

By Janardhan Reddy Chejarla

Cilium 1.20 Expands Gateway API and Opens eBPF Datapath for Kubernetes

Matt Saunders — Wed, 21 Oct 2026 09:00:00 GMT

Cilium 1.20 has been released with broader Kubernetes Gateway API support, an extensible eBPF datapath and further work on sidecarless mutual TLS. The release also makes the newer netkit network device easier to introduce across Kubernetes fleets that run different Linux kernel versions.

By Matt Saunders

Microsoft Previews dotnetup: Toolchain Manager for .NET SDKs and Runtimes

Almir Vuk — Wed, 21 Oct 2026 08:15:00 GMT

Microsoft has released a public preview of dotnetup, a cross-platform toolchain manager that installs and updates .NET SDKs and runtimes in the user’s own directory without admin rights. It tracks channels such as latest, lts, preview, and daily, reads global.json, and removes unused installs. Commands may still change before general availability.

By Almir Vuk

TornadoVM 7 Enables GPU-Native Workloads From Java Applications

Ben Evans — Wed, 21 Oct 2026 03:00:00 GMT

TornadoVM, an open-source heterogeneous programming framework for Java has reached version 7.0. It automatically accelerates Java programs on multi-core CPUs and GPUs and provides a rich GPU programming ecosystem in Java that can be used with any mainstream JDK distribution e.g. Temurin, Red Hat OpenJDK, Coretto, Oracle, GraalVM or Zulu.

By Ben Evans

GitHub Actions Runner Controller 0.15.0 Targets Reliability at Scale

Craig Risi — Tue, 20 Oct 2026 12:00:00 GMT

GitHub has released Actions Runner Controller (ARC) 0.15.0, introducing reliability, scalability, and observability improvements for organisations running self-hosted GitHub Actions runners on Kubernetes.

By Craig Risi

Presentation: Beyond the Prototype: Scaling Framework Agnostic AI Agent Infrastructure with Ray

Deepak Mohanakumar Chandramouli, Bhumik Vinodkumar Thakkar — Tue, 20 Oct 2026 11:00:00 GMT

The speakers discuss transitioning AI agents from local FastAPI prototypes to resilient production systems on Kubernetes using Ray. They share operational insights on RayCluster topology, stateful memory handling, auto-scaling on dynamic traffic, and robust control plane designs, while highlighting critical guardrails, multi-region setups, and LLM-as-a-judge evaluation pipelines.

By Deepak Mohanakumar Chandramouli, Bhumik Vinodkumar Thakkar

Java News Roundup: JEPs for JDK 28, Azul Payara, Gatherers4j, Google ADK, Yupiik, Apache Camel CVEs

Michael Redlich — Mon, 19 Oct 2026 20:00:00 GMT

This week's Java roundup for October 12th, 2026, features news highlighting: three OpenJDK JEPs targeted for JDK 28; the October 2026 edition of Azul Payara; point releases of Gatherers4j, Yupiik Fusion, Google ADK for Java and Google ADK for Kotlin; and 38 CVEs resolved in Apache Camel.

By Michael Redlich

Pinterest Uses Event Time Watermarks to Finalize Petabyte Scale Data Partitions

Leela Kumili — Mon, 19 Oct 2026 14:37:00 GMT

Pinterest has introduced event time-based partition finalization for its database ingestion framework. The mechanism uses Apache Flink to track event time and Apache Iceberg metadata to publish a non-regressing watermark, helping downstream jobs determine when continuously ingested CDC data is sufficiently complete for processing.

By Leela Kumili

JEP 543 Finalizes Structured Concurrency in JDK 28, Ending Seven Preview Rounds

A N M Bazlur Rahman — Mon, 19 Oct 2026 14:30:00 GMT

JDK 28 finalizes structured concurrency through JEP 543, with no API changes from JDK 27. Teams on JDK 27 only need to drop --enable-preview and recompile. Code written for JDK 25 or 26 must adapt to the R_X exception type parameter, ExecutionException wrapping, and the abstract timeout() joiner callback.

By A N M Bazlur Rahman

Article: From Microservices to Agents: the Next Evolution of Distributed Systems

Mallika Rao — Mon, 19 Oct 2026 11:00:00 GMT

The article examines the transition from microservices to agentic AI architecture in distributed systems. Microservices allow for functional decomposition, while agentic systems focus on decision decomposition. This shift introduces new complexities in observability, reliability, and system design, highlighting the need for updated architectural patterns and practices.

By Mallika Rao