DEVOPS

The RondoDox botnet started exploiting Ray CVE-2025-62593 two days before the CVE was public, and CISA gave federal agencies just three days to remediate. Here is how to check whether your Ray cluster or dev machine is exposed and what to harden first.

GitHub Enterprise Importer now supports self-serve GitLab to GitHub migrations in GA. gh gl2gh exports GitLab projects, transforms merge requests into pull requests, and stages archives in GitHub or your own blob storage. Here is what actually moves and what you rebuild.

A security researcher found a GitHub personal access token with admin privileges to hundreds of repos baked into Hanwha Vision camera firmware. The cause: a Vite build leaking process.env into production.

A unit conversion bug in AWS billing displayed estimated charges of up to $1.7 trillion, triggering widespread alarm among developers before AWS acknowledged the issue.

A fair comparison of running Claude Code, OpenAI's Codex CLI, Gemini CLI, and opencode in non-interactive CI pipelines: invocation flags, sandboxing, auth, and output formats.

AI-assisted development generates PRs faster than humans can review them. Here are the tools that help - CodeRabbit, DeepSource, Greptile, and others compared on pricing, platform support, and security capabilities.

31 deployed apps. 7 down. Favicons missing on 20 of 24 reachable hosts. Sentry on zero. Here is how a single audit turned into 58 PRs in one afternoon - and what shipped, what didn't, and what the pattern was.

How we ported 38 apps off Replit and onto Coolify in a single day, using parallel Claude Code subagents, gh, and neonctl. The honest stats: stubs, monorepos, false-empties, and ~120 PRs.

Claude Code does not have to call Anthropic's API. Here are five working patterns for running it through your own gateway, on your own models, in your own VPC, with full audit logs and cost control.

One dev, one CLI, 24 subdomains, and a lot of parallel agents. The playbook for shipping an AI app portfolio.