<h2>Must know</h2>
<ul>
<li><strong>Cloud DNS outages hit UK government and major enterprises</strong>: A significant AWS outage in US-East-1 on November 2, 2025, caused widespread disruption to UK government online services, including the HMRC tax website, and major enterprises like Heathrow Airport and NatWest Bank. This incident, along with recent Microsoft Azure outages, highlights the critical vulnerability of centralized DNS within hyperscaler cloud platforms, raising concerns about systemic risk and data sovereignty, as reported by Dot Com Press. The reliance on US-based cloud infrastructure for national critical services is increasingly seen as insufficient in its current state.</li>
<li><strong>AI-driven shifts in software architecture and pricing models</strong>: The industry is moving from API-first to AI-first architectures, with a hybrid approach often recommended for balancing adaptability and control. This shift is also making seat-based pricing models obsolete, as AI agents automate human workflows, pushing businesses towards usage- or outcome-based pricing, similar to early AWS patterns. Architectural debt is expanding beyond technical code to include business and strategic levels, requiring proactive management from enterprise architects, according to industry expert analyses.</li>
<li><strong>First malicious MCP server found, exposing AI ecosystem flaws</strong>: Security researchers identified ‘postmark-mcp’ as the first malicious Model Context Protocol (MCP) server, backdooring version 1.0.16 to secretly BCC all outbound emails to an attacker. This compromise, affecting an npm package with 1,500 weekly downloads, exposed structural insecurities in the MCP ecosystem, specifically the unrestricted permissions of AI assistants and the lack of tool sandboxing. While npm removed the package, existing installations remain compromised, continuing to leak sensitive data.</li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cloud provider AI FinOps: a cost attribution comparison</strong>: AWS Bedrock, Google Vertex AI, and Azure OpenAI each offer different approaches to AI financial operations, with AWS strong in per-application attribution, Google relying on strict labeling, and Azure providing predictable capacity via PTU reservations, though all lack granular token-level usage transparency.</li>
<li><strong>Homelab complexity: burnout vs. simplification</strong>: Developers are finding that applying enterprise-grade practices to personal homelabs leads to burnout, with some simplifying setups to FreeBSD for enjoyment, while others recommend starting small with Docker and focusing on backups and documentation.</li>
<li><strong>Windows and <a href="http://X.Org" target="_blank" rel="noopener nofollow">X.Org</a> vulnerabilities patched</strong>: Microsoft patched five critical Windows GDI vulnerabilities enabling remote code execution, and <a href="http://X.Org" target="_blank" rel="noopener nofollow">X.Org</a> issued advisories and patches for three critical use-after-free and value overflow flaws in X server and Xwayland, some dating back to X11R6.</li>
<li><strong>AWS account compromise highlights secret management failures</strong>: A cloud architect’s AWS account was compromised due to a leaked access key in a NextJS application, leading to crypto-mining, spamming, and phishing attempts, underscoring the need for better secret management and GuardDuty deployment.</li>
<li><strong>BULKHEAD: a new approach to Linux kernel security</strong>: NDSS 2025 introduced BULKHEAD, a compartmentalization method using Intel’s PKS hardware to isolate Linux kernel components, reducing exploit risk with minimal system overhead.</li>
<li><strong>Jabber Zeus cybercrime group member extradited to US</strong>: Ukrainian national Yuriy Rybtsov, alias MrICQ, was extradited to the US for his role in the Jabber Zeus cybercrime group, which stole tens of millions by targeting US businesses with banking trojans from 2009-2013, as reported by Krebs on Security.</li>
<li><strong>HyperRogue: a roguelike in hyperbolic geometry</strong>: HyperRogue is a unique roguelike puzzle game built on hyperbolic geometry, offering 72 distinct lands and serving as an educational tool for non-Euclidean math, available across multiple platforms.</li>
</ul>
<h2>Bullshit police</h2>
