Explore weekly curated summaries and expert analyses highlighting the latest trends in cloud technology.

  • 180 million lines of proof: Claude verified 123 open-source libraries at the assembly level

    Formal verification has always been the thing everyone agrees is worthwhile and nobody can afford. Anthropic and a startup called Theorem just made a serious dent in that, and the numbers are absurd in the best way: Claude wrote and proved formal guarantees for 239 fuzz-test entry points across 123 open-source libraries from OSS-Fuzz, at…

  • Agent 365 meets Azure API Management: a control plane for your MCP servers

    Microsoft has put a governance layer in front of MCP servers. Microsoft Agent 365 integration with Azure API Management entered public preview on October 8, and it connects the Agent 365 control plane in the Microsoft 365 admin center with runtime policy enforcement in Azure API Management (APIM). In plain terms: the compliance people get…

  • LiteLLM’s release pipeline got hit again, and this time the payload logged your keys

    If you ran pip install litellm or pulled a LiteLLM Docker image on October 21, your machine was almost certainly compromised. Attackers took over the release pipeline of LiteLLM, the widely used Python proxy library that sits in front of LLM providers, and published a poisoned version 1.107.0 that steals credentials and installs a remote…

  • Stop asking your LLM for a confidence score

    Ask a large language model how confident it is and it will happily answer. 0.85. 0.92. Whatever number sounds right for the conversation so far. Plenty of agent designers route work based on those numbers: above 0.8, send it; below, escalate to a human. Amrut Joshi’s recent essay on LLM confidence takes that pattern apart,…

  • DuckDB 2.0 goes client-server: Quack, CONNECT and the biggest release yet

    DuckDB 2.0 shipped on October 21, and it is the release that ends the database’s most familiar limitation. The engine that has spent a decade running inside your process, no server required, now speaks a native network protocol called Quack, and it ships a CONNECT statement that points a session at a remote database in…

  • TiDB Cloud breach: what PingCAP confirmed and what the attacker claims

    A group calling itself FulcrumSec has published a leak page claiming it exfiltrated 10.6 TB of data from TiDB Cloud, the managed database service operated by PingCAP. The scale of that claim is disputed, but the intrusion itself is not: PingCAP has published an incident report on its trust hub confirming an unauthorized party used…

See All