AWS has announced general availability of native vector search in DynamoDB, where embeddings live alongside operational data and a SearchVectors API returns nearest neighbors. If your data already lives in DynamoDB, this is the end of the sync pipeline to a dedicated vector store.

GitLab extends its OpenBao-powered Secrets Manager to the External Secrets Operator, Terraform, and a direct API, beyond CI/CD alone. The pitch: replace scattered secret stores across CI/CD, Kubernetes, and IaC with a single audited source of truth.

Over six months, Tailscale hit nineteen corruption incidents caused by a sixteen-year-old data race in SQLite’s WAL-reset path. If you self-host SQLite-backed apps, check the bundled version and stay on the beaten path.

RPKI validates the origin of a BGP announcement, never its path. PeerCortex measurements from August 2026 show 99% of route leaks detected over 90 days traveled paths with no ASPA coverage, deployed on just 3% of ASNs. Publishing your ASPA records takes thirty minutes.

Patched by Apple on August 6, 2026, the Screen Sharing authentication bypass (CVE-2026-65400) is being actively exploited on Macs exposed on port 5900: attackers gain root and deploy Monero miners. Disable Screen Sharing or apply the update, and never expose port 5900 to the internet.

On August 11, 2026, NVIDIA released Nemotron 3.5 Lightning, an open 31.6B-parameter MoE model (3.6B active) that matches a 120B model’s Intelligence Index while serving nearly 670 tokens per second. For high-volume agentic workloads, it is a concrete cost lever.

The Human-Centered Computing Foundation has filed its application with ICANN for the .self top-level domain, a namespace designed for self-hosted, human-centered projects. Behind the symbol, the real question is what a domain name can actually guarantee — and whether .self will serve self-hosters or mark them as targets.

CVE-2026-73678, scored CVSS 10, lets an attacker with no account run system commands on the MindsDB platform through the Anton agent’s scratchpad tool. If you expose a MindsDB instance, cut public access before even waiting for a patch.

On August 13, 2026, the PostgreSQL project released 18.6, 17.11, 16.15, 15.19, 14.24 and 19 Beta 3, fixing 28 security vulnerabilities — a record — including a dozen memory bugs exploitable for code execution. Apply the minor release now, and if you are still on version 14, plan the major upgrade before November 12, 2026.

On August 14, 2026, AWS added preconfigured, read-only managed dashboards to Billing and Cost Management, at no extra cost. It is the baseline FinOps visibility the vendor is finally offering natively — and direct pressure on third-party tools whose entry price starts at 5% of spend.

The GNOME 51 beta, released on August 15, 2026, locks in the feature freeze and delivers Wayland background blur, fingerprint management and systemd-homed support. For extension developers and teams preparing Ubuntu 26.10, this is the moment to test — the stable release lands September 16.

On August 14, 2026, Google showcased HEIR, an open-source MLIR-based compiler that converts a trained model so it runs on homomorphically encrypted inputs. For regulated sectors that currently cannot send their data to a model at all, this removes the blocking constraint — provided you accept narrow workloads and latency still far above plaintext.