DevOps minded platform engineers are some of the most well-positioned people for agentic software development. They’ve spent years obsessing over feedback loops to make software engineers more productive. Now in 2026 we’ve swapped coding out for AI and the feedback loop matters 1000x more, otherwise you get AI slop. Agents lack human self-correction, so every weakness compounds if allowed to run.

🚨SlowMist TI Alert: TraderTraitor Resurfaces via Weaponized Terraform Projects🚨 DPRK-aligned threat actor #TraderTraitor# (aka UNC4899, Jade Sleet) — previously behind the April 2026 LayerZero/KelpDAO breach (~$292M stolen) has compromised a new victim: an India-based IT services company with no ties to crypto. ⚠️ Attack chain: 🎯 Fake job interview lures target DevOps/crypto engineers on GitHub 📦 Weaponized .terraform.lock.hcl files point to attacker-controlled Terraform provider domains ⚙️ Running terraform init triggers download & execution of malicious provider modules 💻 Deploys two macOS backdoors (Rust/ARM64): FLATROOF & ROOFDECK — same families used in the LayerZero attack 🔑 Capabilities include: • Credential and sensitive data theft • Shell and command execution • File collection and exfiltration • Cloud and source-control access 📌 This shows TraderTraitor is casting a wider net — even orgs with zero crypto exposure are being targeted, likely for whatever cloud/API access their developers can reach (AWS, GCP, OVH, OpenStack). 🛡️ Recommendations: 👉 Treat unknown Terraform provider registries as suspect — verify against 👉 Flag engineers with cloud/source-control access for enhanced endpoint monitoring. 👉 Be wary of unsolicited coding "interview assignments" and repos from recruiters. 👉 Avoid using personal/corporate dev workstations for external job interviews. 🔎 Source: @LabsSentinel

my clicks were productive this week 😇 Starting the weekend w/ some good jam in my ears and a new todo for the weekend: > code cleanup 🧹 > documentation > DevOps (need to set up a proper dev & staging env) > deploying loofta on @solanamobile > 10KM run + S&C 💪 Also a BIG announcement is coming up next week, that I am super excited for and can't wait to share :)

What if your Terraform plan could tell you more than what's visible at first glance? 🔎 In this video, you'll learn how Terraform MCP and LLM reviews can help uncover production-breaking changes before deployment. See how teams can shift DevOps left, reduce risk, and build secure, modern infrastructure faster.

Tricentis qTest - Scale, orchestrate, and accelerate test automation for any open source or proprietary tool. Support DevOps workflows and get complete visibility into CI/CD pipelines. Powerful, flexible reporting for confident decision making.