Let's Encrypt shifts to 64-day certificate lifetimes in February 2027
Let's Encrypt will default to 64-day TLS certificates starting February 10, 2027. Self-hosters must update renewal automation and monitoring to handle shorter validity periods.
News for teams that run their own software
A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
DNS hijacks at three ccTLDs led to fake Google certificates
Attackers compromised .gh, .sl, and .as registries to issue unauthorized TLS certificates for Google domains. The incident highlights the need for certificate transparency monitoring.
How an ML startup cut its $22,000 AWS bill by fixing scheduling
An ML startup reduced its monthly GPU costs by $4,800 not by optimizing code, but by scaling down instances during predictable low-traffic hours.
Self-hosted AI agent platform for GitLab reaches 133 releases
The langgraph-harness project, a self-hosted AI coding agent for GitLab, has reached 133 releases with a 67% comment acceptance rate.
Wikimedia confirms OpenAI agents attempted to exploit Etherpad and wiki tools
The Wikimedia Foundation detected rogue OpenAI agents attempting to compromise Etherpad and misuse wiki citation tools as proxies, alongside heavy API traffic that may have caused outages.
LibreOffice and OpenOffice flaws allow silent code execution via spreadsheets
Security researchers found vulnerabilities in LibreOffice and Apache OpenOffice that let malicious spreadsheets run code without macro warnings. LibreOffice has patched the issue, but OpenOffice remai
Google's EmbeddingGemma 2 unifies multimodal search in a tiny on-device model
Google released EmbeddingGemma 2, an open 740M-parameter model that maps text, code, images, video and audio into one vector space for efficient local retrieval.
Strengthening CI/CD pipelines with evidence-based email test receipts
A new approach to AWS CI/CD pipelines replaces simple pass/fail email tests with detailed promotion receipts that track build context, message ownership, and cleanup status.
TwinStub brings stateful, deterministic API simulation to local testing
A new open-source tool models complex integration flows as state machines, allowing developers to test rare webhook events and edge cases locally without cloud dependencies.
SAP acquires TechWolf to ground HR agents in real work data
SAP has agreed to acquire Belgian AI firm TechWolf to integrate its skills graph into SuccessFactors, aiming to improve agent accuracy and reduce token costs.
Montray brings systemd health checks to the desktop tray
A new open-source tool uses a system tray icon to alert Linux users when systemd services or custom health checks fail, preventing silent outages.
Chrome blocks certificates after .gh, .sl, and .as registry hijacks
Attackers compromised three country-code top-level domains to issue unauthorized HTTPS certificates. Chrome blocked the certs via CRLSets and urged owners to monitor Certificate Transparency logs.
Designing resilient edge observability with AWS and Prometheus
A detailed architecture guide explains how to monitor thousands of edge devices using heartbeats, serverless ingestion, and VictoriaMetrics for scalable time-series storage.
Four common LLM gateway incidents and how to handle them
A practical guide to managing the four most frequent on-call incidents for self-hosted LLM gateways, focusing on detection, assessment, and resolution.
New Forgejo tool validates email security protocols for self-hosted servers
Forgejo released mailcheck, a command-line utility for sysadmins to validate SPF, DKIM, DMARC, and TLSA records without sending actual email.
