InfoQ

Shopify Overexposed Scans GKE Ingresses and Cloud Run for Exposure

Claudio Masolo — Mon, 02 Nov 2026 09:00:00 GMT

Shopify has introduced Overexposed. This internal scanner locates Kubernetes Ingresses on GKE and Cloud Run services. It checks for those that are accessible from the internet without authentication

By Claudio Masolo

AWS Capacity Largely Sold Out Through 2027, With On Demand Headroom Reserved

Steef-Jan Wiggers — Sun, 01 Nov 2026 08:03:00 GMT

Amazon CEO Andy Jassy says AWS’s large committed cloud capacity is largely sold out through 2027, with part of 2028 already allocated, while the company continues to reserve headroom for On Demand, EC2 and Bedrock. Practitioners discussing the remarks report difficulty obtaining On Demand capacity for ordinary EC2 instances, and similar constraints at other providers.

By Steef-Jan Wiggers

File Mover Express: AWS Releases Open-Source Tool for S3 File Transfers

Renato Losio — Sun, 01 Nov 2026 06:32:00 GMT

AWS has recently released File Mover Express, an open-source application under the Apache 2.0 license for transferring large files between local systems and Amazon S3. Available for macOS, Windows, and Linux, it supports parallel transfers, automatic performance tuning, retries, pause and resume, and file integrity verification.

By Renato Losio

Cloudflare’s Post-Quantum GeoKey Manager Enters Closed Beta Without Attribute-Based Encryption

Steef-Jan Wiggers — Sat, 31 Oct 2026 19:56:00 GMT

Cloudflare has moved a post-quantum rebuild of GeoKey Manager into closed beta, guarding geo-fenced keys with hybrid ML-KEM-768 and X25519 instead of the attribute-based encryption used since 2022. Keys live only in kernel memory on verified regional servers, and any failed check rejects the request, a fail-closed choice practitioners ask could cause a regional outage. GA is planned for Q1 2027.

By Steef-Jan Wiggers

OpenBSD 8.0 Brings Expanded Hardware Support, Security Enhancements, and Virtualization Improvements

Sergio De Simone — Sat, 31 Oct 2026 17:00:00 GMT

OpenBSD 8.0 is a substantial upgrade bringing broader hardware compatibility, enhanced security, an expanded virtual address space, and support for modern architectures, including Intel Arc A-Series graphics support, ARM64 hibernation, RISC-V improvements, and enhanced virtual machine support.

By Sergio De Simone

Spring News Roundup: First Release Candidates of Boot, Framework, Data, Security, Modulith, AI

Michael Redlich — Sat, 31 Oct 2026 13:30:00 GMT

There was a flurry of activity during the week of October 19th, 2026, highlighting: first release candidates of: Spring Boot, Spring Framework, Spring Data, Spring Cloud, Spring Security, Spring for GraphQL, Spring Session, Spring Integration, Spring HATEOS, Spring Modulith, Spring REST Docs, Spring AI, Spring Batch, Spring AMQP, Spring for Apache Kafka, Spring LDAP and Spring Web Services.

By Michael Redlich

Kubernetes Confidential Containers Get Fortanix Attestation and Key Management

Mark Silvester — Sat, 31 Oct 2026 08:18:00 GMT

Fortanix's CoCo integration connects workload attestation to decryption-key release for Kubernetes AI workloads. GPU-verification settings affect protection, while upstream Trustee and Azure Secure Key Release offer alternative routes to attestation-based key release.

By Mark Silvester

LocalStack for Azure Enters Public Preview with Security Settings Stored but Not Enforced

Steef-Jan Wiggers — Sat, 31 Oct 2026 07:57:00 GMT

LocalStack has opened its Azure emulator to a free public preview, running Azure services locally and accepting existing ARM, Bicep, and Terraform without rewrites. Its own documentation reports partial operation coverage per service and a consistent pattern: configuration is stored and returned, while enforcement of access restrictions, TLS, and network rules is not implemented.

By Steef-Jan Wiggers

Google Discloses PageBreak AI Security Agent That Found 500+ XSS Bugs

Renato Losio — Sat, 31 Oct 2026 06:20:00 GMT

According to a paper published by Google, its AI-powered security agent has uncovered more than 500 XSS vulnerabilities across its web applications since entering full operation in January. PageBreak uses Gemini models to autonomously investigate potential vulnerabilities, but reports them only after deterministic validators successfully reproduce the exploit against a running application.

By Renato Losio

DoorDash Cuts Grocery Reorder Latency from 16 to 2 Seconds with AI Agents

Leela Kumili — Fri, 30 Oct 2026 13:31:00 GMT

DoorDash reduced grocery reorder latency from 16 to 2 seconds by precomputing recurring purchase needs using batch LLM inference and deterministic validation. Live catalog resolution keeps product selections current, while an editable shopping interface avoids unnecessary model calls. The company reports that shopping list views doubled and the flow’s order rate increased by approximately 34%

By Leela Kumili

Netflix Treats GPU Reliability as a Distributed Systems Problem

Craig Risi — Fri, 30 Oct 2026 12:00:00 GMT

Netflix has detailed how it is building a reliability platform for large-scale GPU training and inference, using layered health checks, automated remediation, and fault-tolerant training to keep jobs running despite hardware failures.

By Craig Risi

Presentation: The Ladder Is Missing Rungs: Engineering Progression When AI Ate the Middle

Alasdair Allan — Fri, 30 Oct 2026 11:00:00 GMT

Alasdair Allan discusses empirical research from METR and Anthropic on AI coding adoption. He explains the "supervision paradox," where reliance on AI tools disrupts junior skill development, risks institutional context loss, and threatens the long-term engineering pipeline needed to oversee autonomous systems effectively.

By Alasdair Allan

Netflix Titus Adds Single-Tenant VM Isolation for Containers

Claudio Masolo — Fri, 30 Oct 2026 10:00:00 GMT

Netflix has added single-tenant Titus, a mode that runs one task alone on its own right-sized EC2 instance. The Compute/Platform team still owns and patches the host, so application teams keep the same API and deployment path

By Claudio Masolo

Article: InfoQ AI, ML and Data Engineering Trends Report - 2026

Srini Penchikala, Chip Huyen, Daniel Dominguez, Hien Luu, Arthur Casals — Fri, 30 Oct 2026 09:00:00 GMT

This InfoQ Trends Report offers readers a comprehensive overview of emerging trends and technologies in the areas of AI, ML, and Data Engineering. This report summarizes the InfoQ editorial team’s and external guests' view on the current trends in AI and ML technologies and what to look out for in the next 12 months.

By Srini Penchikala, Chip Huyen, Daniel Dominguez, Hien Luu, Arthur Casals

Podcast: AI, ML, and Data Engineering InfoQ Trends Report 2026

Chip Huyen, Daniel Dominguez, Hien Luu, Arthur Casals — Fri, 30 Oct 2026 09:00:00 GMT

In this episode, members of the InfoQ AI and ML editorial staff and friends of InfoQ discuss the current trends in the domain of AI, ML and Data Engineering. One of the regular features of InfoQ are the trends reports, which each focus on a different aspect of software dev. These reports provide the InfoQ readers and listeners with a high-level overview of the topics to pay attention to this year.

By Chip Huyen, Daniel Dominguez, Hien Luu, Arthur Casals