TLDR DevOps 2026-08-12

Over the past year, AI success has often been measured by higher usage. But as agentic workflows scale and AI spend grows, developers are asking a different question: are we measuring the right things?

Join IBM's webinar to explore the shift from tokenmaxxing to valuemaxxing and learn why AI usage alone is an unreliable indicator of success, how model orchestration is becoming more important than model selection as AI becomes infrastructure and which metrics help maximize AI impact—not just token consumption.

• Register for the webinar
• Learn more

Save your spot

The Cloud Native Computing Foundation has graduated Cloud Native Buildpacks, an open source project that builds OCI-compliant container images directly from application source code. The project was jointly created by Pivotal and Heroku in January 2018 and joined the CNCF later that year. It now has 535 contributors across 164 organizations, with adopters including DigitalOcean, GitLab, Google, and Bloomberg, where the project powers AI infrastructure. To reach graduation, the project completed a third-party security review with Quarkslab and the Open Source Technology Improvement Fund, and received an OpenSSF Best Practices passing badge.

Cloudflare mitigated 23.2 million network-layer and 29.64 trillion HTTP DDoS requests in the first half of 2026, according to the company's 25th DDoS Threat Report. April was the peak month, hitting 6.46 trillion requests and 165 petabytes of volume, with activity declining afterward following Operation PowerOFF, a 21-country action that took down 53 domains and targeted over 75,000 DDoS-for-hire users. Network-layer attacks exceeding 1 terabit per second rose more than six-fold from Q1 to Q2, with Cloudflare recording 805 such attacks in the second quarter alone. Brazil overtook the United States as the top source country for DDoS traffic, accounting for 14.9% of mitigated requests versus 13.4% for the US.

Datadog's APM team cut class-matching overhead during Java startup by 30% over four years, with one key technique being a prefix trie encoded as a JVM string constant called ClassNameTrie.

Code review can improve through deliberate practice, with experienced reviewers learning to spot bugs, design problems, hidden assumptions, and operational risks that automated checks or LLM reviews can miss. Strong reviews draw on system history, invariants, failure modes, and organizational context, making code review useful not only for defect detection but also for knowledge transfer, maintaining norms, and understanding changes.

Homegrown infrastructure-as-code systems offer flexibility and low initial costs but often create hidden expenses through maintenance, scaling challenges, governance gaps, and drift management. Prebuilt IaC orchestration platforms typically provide lower total ownership costs, except for small-scale or highly restricted environments.

According to a 1Password survey, 62% of employees report security gaps in how their company manages AI agents. That means over-privileged and long-lived access without any oversight.

Learn how 1Password Privileged Access fills the gaps in your agent security.

Get started securing agent access

Paperclip is an open-source Node.js server and React UI that orchestrates teams of AI agents to run a business. It supports agents like Claude Code, Codex, Cursor, and Gemini, giving each one roles, budgets, reporting lines, and permissions.

Code-Graph-RAG is an open source tool that parses multi-language codebases using Tree-sitter, stores the resulting structure as a knowledge graph in Memgraph, and lets users query and edit code in plain English. It supports Python, TypeScript, JavaScript, Rust, Go, Java, C, C++, C#, PHP, Lua, Dart, and several others. The tool runs as an MCP server, allowing Claude Code and other MCP clients to query and edit codebases directly.

Datadog Session Replay consolidates session discovery, AI-powered summaries, friction analysis, and timestamped collaboration into one workspace. Teams can quickly identify relevant sessions, jump to key moments, share context through anchored comments, and coordinate troubleshooting and UX improvements from a shared source of evidence.

Cloudflare is advancing bot management by evaluating continuous behavior and trust rather than relying on static human-versus-bot checks, recognizing hybrid human-agent sessions and legitimate automation. Precursor provides session-wide behavioral detection, while upcoming Adaptive Intelligence and advanced mitigations will enable self-adjusting detection and more nuanced bot controls.

Security as an afterthought means patches at midnight. Microsoft Azure helps make protection part of your dev lifecycle with Microsoft Defender for Cloud. Ship fast. Ship safely. Get started with Azure →

AWS IAM Identity Center now offers one-click multi-Region configuration for new organization instances, automatically creating a multi-Region KMS key and replicating the instance to another Region for improved resilience.

Fastly has joined the Experian Agent Trust ecosystem to help enterprises verify, authorize, and monetize legitimate AI agents at the network edge.

Databricks is launching a beta of FILE type, a new column type that stores unstructured data like videos, images, and documents as native columns in lakehouse tables.