On September 23, 2026, Mike Hulme, Azure’s GM of product marketing, describes the shift from request-response applications to continuously acting multi-agent systems, and Microsoft’s answer: govern the agent on Foundry, execute it in an isolated Azure Container Apps sandbox. For platform teams, it is a concrete framework for what must change when the agent replaces the request.
On September 24, 2026, Docker extended its Sandboxes to the cloud: the same microVM environment, running on Docker-managed compute, with a single command to move a project between a laptop and the cloud. Teams handing multi-hour tasks to coding agents no longer have to choose between a laptop that sleeps and isolation they would have to rebuild.
On September 21, 2026, Hugging Face detailed version 1 of its tokenizers library: the same output as v0.23, but encoding 3 to 30 times faster single-threaded on an Apple M4 Max, thanks to SIMD bitstream splitting and a word cache. Teams serving LLMs now have a measured reason to look at the tokenizer — the new bottleneck as models get faster.
watchTowr has documented two remote-code-execution zero-days in Citrix NetScaler ADC and Gateway, already exploited before any fix existed. With nothing published by Citrix, the only defense is isolation: preserve evidence, cut the appliance off the network and keep management off the internet.
A patch series by Yuan Liu (Intel), queued in mm/core.git ahead of the Linux 7.4 merge window, replaces page-by-page zone scans with an optimized contiguity check. Measured: up to 81% less time to hot-add memory to a VM and 75% to hot-remove it, with Samsung also reporting CXL gains.
Google has documented a fresh wave of exploitation of CVE-2026-35273 (CVSS 9.8) by UNC6240, a ShinyHunters-linked actor: the group URL-encodes a single character in the path to bypass WAFs and drop web shells on Oracle PeopleSoft. Patch, disable the EMHub, and hunt for /PSEMHUB/ in every encoded form.
Anthropic opened a Claude Marketplace on 27 September 2026, gathering plugins, connectors, agents, and consulting partners, with more than 2,000 integrations live at launch. Vendors see a distribution channel, developers a reason to learn MCP and Agent Skills.
The actions-cool/issues-helper and maintain-one-comment actions, compromised on 18 May 2026 in the Mini Shai-Hulud campaign, were re-enabled on 16 September with tags still pointing at malicious code, according to Socket. The lesson is blunt: in CI/CD, a mutable tag is a door left open.
Schneider Electric announced a €1.2 billion voluntary takeover bid for Bulgaria’s Shelly Group on 24 September 2026, at €70 a share. For self-hosters who run Shelly relays over MQTT and Home Assistant without any cloud, the question is whether the open APIs outlive the industrial buyer.
On September 25, 2026, Kiteworks CISO Frank Balonis asked every customer to power down their servers for six hours on Saturday after federal intelligence authorities warned of an imminent attack. If you run a managed file transfer appliance, read this as a signal: MFT appliances remain the top target of extortion gangs.
On September 24, 2026, maintainer Sasha Levin proposed adding an AGENTS.md file to the Linux kernel repository to fix attribution mistakes made by AI agents that generate patches. The proposal, debated on LKML, raises a real question: steer agents with a single file or with purpose-built documentation.
A 2026 survey shows interoperability between OpenTelemetry and Prometheus has improved markedly: the ease-of-use score climbed from 3.1 to 3.6, and the share who find them hard to combine fell from 29% to 10%. For an SRE team still on the fence, now is the time to consolidate on the OTel Collector without abandoning Prometheus.
