InfoQ

GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

Sergio De Simone — Sat, 03 Oct 2026 16:00:00 GMT

CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an unauthenticated remote attacker to read arbitrary files from the GitLab.

By Sergio De Simone

Presentation: Building GenAI Platform at DoorDash

Siddharth Kodwani, Swaroop Chitlur — Sat, 03 Oct 2026 11:00:00 GMT

Swaroop Chitlur and Sidd Kodwani share DoorDash’s journey building an internal GenAI platform. They discuss core architectural bets, transitioning from vendor-first setups to open-weights models, navigating LLM and agent gateways, and balancing accuracy, latency, and cost for over 5,000 internal users.

By Siddharth Kodwani, Swaroop Chitlur

Istio 1.31 Adds Agentgateway Waypoints and Moves Release Artifacts off Google Cloud

Mark Silvester — Sat, 03 Oct 2026 08:30:00 GMT

Istio 1.31 adds agentgateway waypoints in ambient mode, with a canary configuration fix included in 1.31.1. It also ends the publication of images and Helm charts to Google Cloud, requiring repository migration ahead of the 13 October outage test and signing-key updates for teams verifying images.

By Mark Silvester

AI Agents Are Disrupting Open Source Security Disclosure

Renato Losio — Sat, 03 Oct 2026 06:46:00 GMT

A recent article by Anil Madhavapeddy argues that AI agents can turn publicly available clues about software vulnerabilities into working exploits, reducing the effectiveness of traditional disclosure embargoes in open source projects. The author highlights the need for faster patching and release processes as the time between vulnerability disclosure and exploitation shrinks.

By Renato Losio

Uber Eats Rebuilds Search Pipeline to Cut End-to-End Latency by 50%

Leela Kumili — Fri, 02 Oct 2026 14:22:00 GMT

Uber has rebuilt major parts of the Uber Eats search pipeline, reporting a 50% reduction in end-to-end latency. Changes include Above-the-Fold measurement, reduced retrieval work, parallel hydration, advertising data redesign, infrastructure optimizations, and an agentic coding workflow. Uber is also exploring microbatching, product-based retrieval, and HTTP multipart streaming.

By Leela Kumili

Envoy Gateway 1.9.1 Tightens Security and Addresses a Difficult Upgrade Path

Craig Risi — Fri, 02 Oct 2026 12:00:00 GMT

Envoy Gateway has released v1.9.1, a maintenance release that focuses heavily on security, upgrade reliability, and operational correctness following the broader v1.9 release.

By Craig Risi

Presentation: Managing Asynchronous APIs at Scale

Ian Cooper — Fri, 02 Oct 2026 11:00:00 GMT

Ian Cooper discusses managing asynchronous APIs in event-driven architectures at scale. He explains the "ABCs" of messaging (Address, Binding, Contract) and shares how to tackle discovery, governance, and provisioning using AsyncAPI, CloudEvents, schema registries, and automated CI/CD infrastructure pipelines based on real-world engineering practices at Just Eat Takeaway.

By Ian Cooper

OpenAI DevDay 2026 Recap for Developers

Daniel Dominguez — Fri, 02 Oct 2026 10:39:00 GMT

OpenAI announced a series of product and developer updates at DevDay 2026, including GPT-6.1 Sol, computer use for the Agents API, cloud-based Codex environments, a Decisions API, and new plugin capabilities for ChatGPT.

By Daniel Dominguez

Engineering Production Systems for an Agentic Era: QCon San Francisco 2026

Artenisa Chatziou — Fri, 02 Oct 2026 10:00:00 GMT

QCon San Francisco 2026 will bring together practitioners from Airbnb, OpenAI, Netflix, Honeycomb, and other engineering organizations to share how they are building, operating, and evolving production systems as AI agents take on a larger role.

By Artenisa Chatziou

Article: From Reusable to Regeneratable: Rethinking the Shared UI Component Library

Daniel Curtis — Fri, 02 Oct 2026 09:00:00 GMT

Regeneration has changed reuse economics. A model pointed at a solid design system can produce most standard UI on demand, so paying to keep a canonical component package alive is much harder to justify than it used to be. Keep the design system, tokens, guidelines and tests central. They are what actually buy you consistency.

By Daniel Curtis

Docker Sandbox Kit Spec: Packaging AI Agent Permissions as OCI Images

Claudio Masolo — Fri, 02 Oct 2026 09:00:00 GMT

Docker has announced that it is bringing the Sandbox Kit Specification to the CNCF, aiming to make what an AI agent may access as portable as the agent itself.

By Claudio Masolo

DigitalOcean Managed Agents Brings Managed Cloud Infrastructure to AI Agents

Sergio De Simone — Fri, 02 Oct 2026 09:00:00 GMT

DigitalOcean recently launched DigitalOcean Managed Agents in public preview, offering a managed cloud infrastructure layer for AI agents with isolated microVM runtimes, governed tool access, and serverless AI inference.

By Sergio De Simone

Qualcomm Unveils Linux Preview on Snapdragon X2 to Accelerate Upstream ARM Laptops

Olimpiu Pop — Thu, 01 Oct 2026 14:14:00 GMT

Qualcomm has released an early dev preview of Linux for its upcoming Snapdragon X2 Series laptop processors. The initiative focuses on integrating with the mainline Linux kernel ahead of commercial release to reduce software issues historically faced by ARM laptops. The preview includes a functional Debian 13 environment and aims to standardize system initialization and hardware task management.

By Olimpiu Pop

Presentation: Beyond Observability: Evolving Production Operations in the Age of AI

Michael Hausenblas, Sujana Sooreddy, Noam Levi, Renato Losio — Thu, 01 Oct 2026 12:30:00 GMT

The panelists discuss how production operations are evolving with AI, turning operational data into actionable insights for incident response. They explain how automation and new architectural practices help engineering teams build more understandable systems, while exploring how AI reshapes software delivery and changes the historically deterministic nature of production applications.

By Michael Hausenblas, Sujana Sooreddy, Noam Levi, Renato Losio

How to Develop Software Engineering Skills in the Age of AI

Ben Linders — Thu, 01 Oct 2026 11:47:00 GMT

Software engineering skill development requires slowing down. Generative AI has changed the landscape of skill development for software engineering. Tools and AI can accelerate outcomes, but they may not support skill development. Engineers must understand how systems work to learn things. Senior developers can coach juniors by using learning techniques.

By Ben Linders