Curated Industry News

1. 01Identity & access

   Google Adopts DPoP to Strengthen OAuth 2.0 Against Token Theft and Replay Attacks (Read the original)

   InfoQ · Oct 29, 2026

   Google's OAuth platform now supports DPoP (Demonstrating Proof-of-Possession), which binds access tokens to a client key so stolen tokens cannot be replayed. A practical, standards-based hardening step. DevOps students working with OAuth/OIDC, Keycloak or API security should understand sender-constrained tokens.

2. 02Kubernetes

   The 5 essential layers of AI agent sandboxing on Kubernetes (Read the original)

   The New Stack · Oct 29, 2026

   An article lays out five layers of sandboxing for AI agents that run code on Kubernetes, from container isolation to network and permission limits. It matters because agents execute commands nobody reviewed. Students deploying agents get a concrete checklist for pod security, RBAC and network policies.

3. 03Observability

   Grafana 13.3 release: manage variables across dashboards, share findings with Notebooks, a UI refresh, and more (Read the original)

   Grafana Labs · Oct 29, 2026

   Grafana 13.3 is released. Cross-dashboard variables let you manage shared controls from one place, Notebooks let you share findings, and the UI is refreshed. Worth a look for students who build dashboards and want less duplication across them.

4. 04Linux

   [$] Containers as a recognized kernel object (Read the original)

   LWN.net · Oct 29, 2026

   An LWN article discusses making containers a recognized kernel object. Today the kernel has no container abstraction and instead combines namespaces, cgroups and other components. It helps students understand what a container really is under Docker and Kubernetes, and where Linux may be heading.

5. 05Secrets & security

   What happens when the agent is long gone, but its access key lives on? (Read the original)

   The New Stack · Oct 28, 2026

   An article examines an AI agent's access key that stayed active long after the agent was gone, and argues for credential ownership, expiry and rotation. A practical lesson in IAM hygiene: every key needs an owner and a lifetime, whether the user is a person, a CI job or an agent.

6. 06Terraform

   OpenTofu 1.13 Lets Module Authors Reduce Unknown Values at Plan Time (Read the original)

   InfoQ · Oct 26, 2026

   OpenTofu 1.13 adds functions with type and value hints that reduce unknown values at plan time. It helps students see why plans contain unknowns and how module authors can design modules so plans are clearer and more predictable.

7. 07AWS

   Amazon Aurora now supports post-quantum TLS key exchange (Read the original)

   AWS What's New · Oct 29, 2026

   Amazon Aurora PostgreSQL now supports post-quantum TLS key exchange, protecting database connections against future decryption of recorded traffic. A concrete example of encryption in transit on AWS and of how cryptography changes reach managed services. Useful for students learning AWS databases and security basics.

8. 08AI agentsAI

   Why MCP servers should tell agents what to do next (Read the original)

   The New Stack AI · Oct 29, 2026

   An AWS engineer argues that MCP servers should do more than return data: they should also tell agents what to do next. It matters for students building agent tooling, since good tool design guides agents toward correct workflows and cuts wasted calls and errors.

9. 09Local LLMsAI

   Build specialized multimodal models with LFM3 (Read the original)

   Hugging Face · Oct 27, 2026

   Liquid AI released LFM3 on Hugging Face, a family of compact open models for specialized multimodal systems. Small open weights make self-hosting realistic, so students exploring local inference can learn how to match a model to a workload instead of defaulting to the biggest one.

10. 10AI industryAI

    API credits benefit for eligible ChatGPT subscriptions (Read the original)

    Simon Willison · Oct 29, 2026

    Simon Willison covers API credits now bundled with eligible ChatGPT subscriptions, following a similar benefit Anthropic announced for its Max and Team plans. It shows how vendors blur subscription and API billing, which matters when students budget for AI coding tools and agent experiments.

Summaries are generated automatically from the linked articles; always check the original.