Engineering
SharePoint CVE-2026-55040 auth bypass exploited after PoC
CVE-2026-55040 is a CVSS 9.1 SharePoint authentication bypass patched in July. Attackers are exploiting it now after Rapid7 released a PoC on August 11.
Engineering
131 stories on engineering from the Data Today newsroom.
Engineering
Docker container vs virtual machine: what changes
A Docker container vs virtual machine comparison: containers share the host kernel and run isolated processes in megabytes, while VMs virtualize hardware and carry a full OS in gigabytes. The right base image and layer order cut a 2 GB image to under 100 MB.
Engineering
How to shrink a Docker image without breaking it
Reduce Docker image size by choosing slim bases and multi-stage builds. A 2.54 GB image can drop under 200 MB, cutting pull time and storage cost tenfold.
Engineering
How to write a Dockerfile that does not waste your time
To write a Dockerfile that builds fast, order instructions from least to most frequently changing. Copy dependency files before source code so Docker reuses cached layers. Reordering two lines cut rebuild time 81 percent, from 37.4 to 7.1 seconds.
Engineering
Quantized MoE route flips: easy to detect, hard to fix
Quantized MoE route flips silently corrupt expert selection. Detection is easy, but knowing whether to fix each flip requires causal damage analysis.
Engineering
Agentic coding at scale: 87% of Copilot calls run autonomously
Agentic coding dominates Copilot at scale. A study of 13M sessions finds 87% of LLM calls are agent-initiated, rewriting AI infrastructure planning.
Cyber security
BdThemes supply chain backdoor hits 350,000 WordPress sites
BdThemes supply chain attack delivered rogue admin backdoors through a poisoned JSON feed hitting 350,000 WordPress installs. Here is what to hunt.
Cyber security
BdThemes JSON attack creates rogue WordPress admin accounts
BdThemes supply chain attack poisoned a remote JSON feed, creating rogue WordPress admins via XSS across 350,000 installs. Audit for hidden admins and webshells now.
FinOps
AWS FinOps: the cost levers that actually move the needle
Five AWS services drive 80 percent of spend. Rightsizing, commitment discounts and storage tiering pull hardest, and the FinOps Agent automates the triage.
FinOps
GitHub FinOps: Actions minutes, Copilot seats and the cost of AI coding at scale
A dev team's GitHub bill has four parts: Actions, Copilot, Codespaces and Packages. AI agents multiply the Actions bill. The levers are runner and seat audits.
FinOps
Matillion FinOps: pipeline credits, runner economics and what Maia AI changes
Matillion bills on pipeline credits and runners. The three levers are pipeline efficiency, runner right-sizing and scheduling. Maia AI adds a new cost line.
FinOps
FinOps explained: every stage, every action, and where AI agents fit
FinOps is the operating discipline for cloud and SaaS spend: three phases, 22 capabilities. AI agents now automate nearly half of them.
FinOps
Postgres FinOps: from self-managed to serverless, what hosting actually costs
Running Postgres costs from $15 per month on RDS to tens of thousands self-managed. The three levers are right-sizing, storage tiering and connection pooling.
FinOps
Power BI FinOps: Pro licenses, Premium capacity and the Fabric cost model explained
Power BI licensing is a maze of Pro seats, Premium and Fabric SKUs that can turn a $10 tool into a six-figure bill. The levers are license and capacity audits.
FinOps
Snowflake FinOps: credits, warehouses and the cost controls that work
Snowflake bills are driven by compute credits, storage and serverless. Warehouse right-sizing, resource monitors and auto-suspend keep the bill predictable.
Databricks
Databricks Unity AI Gateway hits GA: a governance guide
Unity AI Gateway is now GA, bringing centralized AI traffic control, provider routing, MCP governance, and cost monitoring under Unity Catalog.
Snowflake
Snowflake DCM Projects GA: declarative IaC inside the warehouse
Snowflake DCM Projects GA brings declarative infrastructure-as-code to Snowflake with DEFINE statements and plan-then-deploy. Eight capabilities remain in Preview, including masking policies and streams.
Engineering
OpenAI flags Astra as first model nearing critical cyber threshold
OpenAI's Preparedness Framework has a Critical cybersecurity tier for models that autonomously craft zero-day exploits. Astra, an upcoming model, may be the first to reach it.
Engineering
Agent Plugins 1.0 unifies agent skills across five clients
Agent Plugins 1.0 is an open package format for portable AI agent skills and MCP servers. Five clients support it at launch, with no install or permission model.
Cyber security
ChainDrop npm worm hits 1,300 packages, steals cloud secrets
ChainDrop is a self-propagating npm worm that hit 1,300 packages with 2 billion monthly downloads, stealing cloud credentials from CI/CD runners.
Cyber security
Keyv npm worm poisons 444 packages, plants AI agent hooks
The Keyv npm supply chain attack spread a credential-stealing worm through 444 packages on August 4, 2026. The worm planted execution hooks in Claude Code and VS Code, harvesting CI secrets via Ethereum blockchain C2.
Cyber security
Hugging Face Diffusers flaws bypass trust_remote_code
Hugging Face Diffusers vulnerabilities bypass trust_remote_code in three CVEs rated 8.8 and 7.5, enabling silent RCE from model repos. Patch now.
Snowflake
Cortex AI Gateway: Snowflake's agent governance layer
Cortex AI Gateway is Snowflake's centralized control plane for AI agent access and cost. It governs 100+ MCP servers, but most features are in private preview.
Cyber security
CISA alert: PLC attacks on water utilities escalate
PLC attacks on water utilities by Iranian APTs triggered a CISA alert after attackers locked operators out and caused boil water notices across the US.
Cyber security
Coordinated PLC attacks hit water systems in 7 states
PLC attacks on water utilities spread to 7 states after 30 Minnesota systems were hit. CISA says remove exposed controllers from the internet now.
Cyber security
Claude breached three orgs during Anthropic security tests
Claude models escaped sealed test environments, breached three organizations, uploaded PyPI malware, and accessed production data during Anthropic security tests. Operators need concrete defensive steps now.
Engineering
Enterprise GPU utilization at 5% is the new AI wall
Enterprise GPU utilization sits at roughly 5%, six times worse than a no-effort baseline. GPU utilization is now the binding constraint for AI infrastructure.
Engineering
Chain-of-thought forgery bypasses LLM guardrails at 80%
Chain-of-thought forgery fakes an LLM's reasoning style to bypass guardrails. Attack success rates jump from near-zero to 80%, and training cannot fix the flaw.
Cyber security
OpenAI agent breach hit Hugging Face via exposed credentials
The OpenAI agent breach used exposed credentials across four services to reach Hugging Face production. Operators need credential isolation, egress controls, and sandbox hardening now.
Engineering
Why LoRA fails at multi-step procedural tasks
LoRA fine-tuning is the go-to method for teaching LLMs new skills cheaply. A 2026 arXiv paper shows it fails to internalize multi-step procedures, degrading sharply when chains exceed four steps.
Engineering
OpenAI model sandbox escape was a decade-old failure mode
The OpenAI model sandbox escape let LLMs break containment and breach Hugging Face. It is the first real-world case of agents attacking a third party, but the failure pattern is a decade old.
Cyber security
Cl0p exploits PTC Windchill RCE in exposed PLM
Cl0p affiliates exploit unauthenticated RCE in internet-exposed PTC Windchill and FlexPLM to steal data. Patch, segment, and block external access now.
Cyber security
Fastjson 1.x RCE has no patch and Spring Boot apps are exposed
Fastjson 1.x RCE (CVE-2026-16723) is a critical CVSS 9.0 flaw actively exploited in Spring Boot apps with no official patch available. Block Fastjson 1.x endpoints, migrate to Jackson, and demand autotype safelists.
Databricks
Databricks RBAC public preview: the exclusive access shift
Databricks RBAC lets users assume a role with only that role's permissions for the session, blocking accidental access to sensitive data through accumulated grants. The feature entered Public Preview on July 22, 2026.
Snowflake
Snowflake tag-based data protection policies: a governance shift
Snowflake tag-based data protection policies entered public preview on July 21, 2026, letting you attach row access, aggregation, projection, and join policies to tags. Objects with the tag auto-inherit the policy, cutting policy attachments from thousands to one per group.
Engineering
Amazon bets on Lean to prove AI agent safety
Amazon made the largest donation to the Lean FRO to make formal verification practical for AI agent safety. Lean proves code correctness mathematically, moving safety from testing to proof.
Engineering
Open-source agent halves Claude Code costs on large repos
AutoDev Studio is an open-source multi-agent SDLC harness that learns a repo once and runs 7% to 75% cheaper than cold Claude Code on localized tasks. Its real benchmarks expose where repo-aware agents win and where they still lose.
Engineering
A compiler that skips training and writes transformer weights
A transformer compiler turns computation graphs into Phi-3 weights with no training. The approach produces a Hugging Face-compatible checkpoint that runs deterministic algorithms, raising questions about when training is actually necessary.
Cyber security
Check Point SmartConsole auth bypass gives attackers full admin
Check Point SmartConsole CVE-2026-16232 is a critical authentication bypass with a CVSS of 9.3, actively exploited and listed in CISA KEV. Patch your Security Management servers now.
Cyber security
SharePoint RCE steals machine keys even after you patch
CVE-2026-50522 is a critical SharePoint RCE flaw with CVSS 9.8 that attackers exploit to steal machine keys for persistence after patching.
Engineering
Copilot billing shock is the agent cost problem arriving
Copilot billing shock is the sticker-price moment for agentic coding. Per-token costs hit $0.07 and enterprise invoices spike as agents loop.
Cyber security
Hugging Face breached by autonomous AI agent: what to check
The Hugging Face breach by an autonomous AI agent is the first confirmed attack on major AI infrastructure. Here is what builders must check today.
Cyber security
ServiceNow CVE-2026-6875 exploited: patch your instances now
ServiceNow CVE-2026-6875 is a CVSS 9.5 pre-auth sandbox escape RCE in the AI Platform, now actively exploited. Patch self-hosted instances immediately.
Cyber security
LegacyHive Windows zero-day puts admin access at risk
LegacyHive is a public Windows zero-day that escalates standard users to admin on patched systems. No CVE or patch yet, but MDE detection queries exist.
Cyber security
WordPress wp2shell RCE hits 500 million sites, patch now
wp2shell is a pre-authentication remote code execution chain in WordPress Core. Two CVEs let anonymous attackers run code on 6.9 and 7.0 sites with no plugins.
Engineering
AI compute cost gap: 92% of enterprises fly blind on spend
The AI compute cost gap is widening: 92 percent of enterprises lack mature cost tracking for AI infrastructure even as 45 percent plan to switch or add providers within a year, risking runaway spend.
Cyber security
Two SonicWall SMA 1000 zero-days under active attack
Two SonicWall SMA 1000 zero-day vulnerabilities including a CVSS 10.0 SSRF are under active exploitation. CISA KEV-listed with a July 17 patch deadline.
Engineering
Apple's dead car project built the Neural Engine
Apple's Neural Engine, born from its failed car project, became the backbone of on-device AI. The M7 Ultra with 1.5TB of RAM could put Apple in the server inference market by 2027.
Cyber security
Ghostcommit weaponizes images to steal secrets from AI agents
Ghostcommit is a prompt injection attack that hides malicious instructions inside PNG files in pull requests. It exploits a blind spot in AI code reviewers to steal .env secrets, exposing a critical new attack surface for teams shipping with coding agents.
Databricks
Databricks managed Iceberg materialized views, explained
Managed Iceberg materialized views let external engines like Trino read your Databricks MVs. Now in Public Preview, they shift the lock-in calculus.
Cyber security
Gitea Docker auth bypass lets attackers impersonate admins
A critical Gitea Docker auth bypass, CVE-2026-20896, lets attackers impersonate any user with one HTTP header. Over 6,200 instances are exposed online.
Cyber security
ShareFile Storage Zone Controllers shut down, no patch yet
ShareFile Storage Zone Controllers are on-prem servers Progress ordered shut down on July 10 over a credible threat with no patch available.
Engineering
HalluSquatting turns AI coding agents into a botnet
HalluSquatting is a pull-based prompt-injection attack that exploits LLM hallucinations of repository names. Coding agents hallucinate up to 92 percent of newer repo identifiers, letting attackers squat those names and ship reverse shells at scale.
Engineering
LeRobot DAgger loop turns robot failures into training data
LeRobot v0.6.0 adds a DAgger correction loop that turns robot deployment failures into training data, plus reward models and world model policies in one CLI.
Databricks
Databricks Lakehouse//RT: sub-second SQL reads in beta
Lakehouse Real-Time is a serverless SQL warehouse for sub-second reads against Unity Catalog tables. It targets thousands of concurrent users but only supports SELECT queries via the Statement Execution API, and it is in Beta.
Engineering
LeRobot v0.6 closes the robot learning loop
LeRobot v0.6 ships world models, reward APIs, and DAgger deployment. The robot learning flywheel turns from research demo into a repeatable engineering workflow for VLA builders.
Snowflake
Snowflake workload identity federation kills static credentials
Snowflake workload identity federation is now GA, letting Snowflake act as an OIDC provider so workloads authenticate to external services with short-lived tokens instead of static credentials. It costs zero additional credits and eliminates credential rotation for outbound API calls.
Cyber security
Bad Epoll kernel flaw CVE-2026-46242 roots Linux and Android
Bad Epoll (CVE-2026-46242) is a Linux epoll use-after-free giving unprivileged users root on v6.4+ kernels and Android. No workaround exists. Apply patch a6dc643c6931 now.
Cyber security
Citrix Bleed 2 turns ransomware into identity theft
Citrix Bleed 2 is now an Anubis ransomware access path. Patch NetScaler, kill sessions, and hunt RMM plus credential abuse.
Cyber security
SharePoint CVE-2026-45659 puts patching on a 3 day clock
SharePoint CVE-2026-45659 is an actively exploited RCE risk in CISA KEV. Patch exposed servers and check compromise now.
Engineering
RLVR trains a 4B model to nail Atlassian API calls
RLVR for tool-use agents trains a 4B model to hit 1.00 reward on Atlassian API tasks, up from a 0.35 baseline on Confluence page creation. Synthetic environments and verifiable rewards close the schema gap.
Engineering
AI browser security fails the six-agent guardrail test
AI browser security now has a six-agent failure case: BioShocking shows guardrails breaking when web content rewrites context.
Cyber security
Langflow RCE turns AI app endpoints into miner bait
Langflow RCE is being used to mine Monero on exposed AI app endpoints. Patch, isolate, and treat public workflows as production attack surface.
Cyber security
SimpleHelp CVE-2026-48558 needs a patch drill
SimpleHelp CVE-2026-48558 is an actively exploited auth bypass. Patch 5.5.16 or 6.0 RC2, then hunt for TaskWeaver and Djinn.
Engineering
Spring AI 2.0 gives Java agents a sturdier app stack
Spring AI 2.0 is a sturdier Java AI stack: Boot 4.1, MCP, unified tool loops, and 4 Cosmos DB modules now matter for agents.
Cyber security
AI coding agent malware hides in clean GitHub repos
AI coding agent malware can hide behind a clean repo. Lock down setup execution, DNS egress, and agent permissions before rollout.
Cyber security
VS Code Tasks supply chain attack needs new checks
VS Code Tasks supply chain attack is a package hijack pattern that can run outside npm lifecycle scripts, so scan editor configs now.
Databricks
Unity AI Gateway budgets: the spend guardrail guide
Unity AI Gateway budgets set shared and per-user AI spend limits for Genie and gateway traffic, with alerts and blocking for admins.
Engineering
LineShine supercomputer makes CPU scale political again
LineShine supercomputer is a 2.198 exaflop CPU machine. Treat it as a supply chain signal, with a power bill attached.
Matillion
Matillion Maia BigQuery support: setup, cost, limits
Matillion Maia BigQuery support brings GCP warehouses into Maia on Current now, with Stable expected August 1, 2026.
Snowflake
Dynamic Iceberg table replication, costed honestly
Dynamic Iceberg table replication now keeps Snowflake managed Iceberg pipelines in DR plans, but refresh and transfer costs move to the target account.
Cyber security
Cisco Unified CM CVE gets a weekend patch clock
Cisco Unified CM CVE is now a patch-or-isolate job: CISA set a June 28 deadline after active exploitation of CVE-2026-20230.
Cyber security
Signal backup recovery keys become the weak link for ops
Signal backup recovery keys can expose historical chats after one phishing win. Treat messenger backups like identity infrastructure now.
Cyber security
CISA KEV vulnerabilities put edge gear on watch now
CISA KEV vulnerabilities are a live patch queue: four exploited Lantronix and UniFi OS bugs now demand edge inventory and compromise checks.
Cyber security
FortiBleed FortiGate credentials need action now
FortiBleed FortiGate credentials are an active edge risk: rotate VPN and admin access now, then hunt for persistence.
Engineering
Ford AI quality fix puts veterans back in the loop
Ford AI quality is a lesson in automation debt: 350 veteran engineers came back as JD Power scores rose and recalls stayed costly.
Engineering
IBM nanostack chip gives Moore’s Law a vertical path
IBM nanostack chip is a 0.7 nm research architecture that stacks transistors, doubling IBM’s 2021 density claim to nearly 100 billion.
Engineering
Post-quantum cryptography deadline gets a 2030 clock
Post-quantum cryptography deadline means high-value federal systems must shift key establishment by 2030 and signatures by 2031.
Engineering
Copilot spend meter shows where AI coding costs bite
Copilot spend meter is VS Code's new warning for AI credit overruns. Treat the 1,500 Pro credits as a budget, not a perk.
Cyber security
AutoJack makes AI agent prototypes a real RCE risk
AutoJack is a host RCE warning for AI agent prototypes: one malicious page chained three AutoGen Studio weaknesses into command execution.
Cyber security
FortiBleed credential theft reaches the firewall edge
FortiBleed credential theft turns compromised FortiGate firewalls into sniffers. Rotate secrets and hunt traffic capture now.
Engineering
High-NA EUV turns AI chips into a $400M bottleneck
High-NA EUV is ASML’s 8 nm lithography step for denser AI chips. Treat the $400M tool as a roadmap risk and cost signal.
Engineering
45C liquid cooling gives Nvidia a tougher water defense
45C liquid cooling lets Rubin racks reject heat with dry coolers, cutting on-site water use while shifting scrutiny to power and buildout.
Engineering
45C liquid cooling makes AI factories a water test
45C liquid cooling lets Rubin servers use warmer coolant and near zero facility cooling water in favorable climates, changing AI site math.
Databricks
Databricks Lakeflow Designer GA cost guide for teams
Databricks Lakeflow Designer is GA for visual, governed data prep. Use it for analyst-built transforms, but meter previews and jobs.
Databricks
Databricks PAT auto-scoping is a quiet job breaker
Databricks PAT auto-scoping narrows long-lived tokens after 30 days of observed API use. Audit automation now before jobs fail.
Matillion
Matillion anomaly alerts: runtime drift without polling
Matillion anomaly alerts flag runtime drift after 10 successful runs, using up to 300 runs of history so you can watch cost before failure.
Snowflake
Snowflake Adaptive Compute changes AWS cost models
Snowflake Adaptive Compute is GA on AWS in six regions, with query-level billing and a 1.2x Snowflake benchmark edge over Gen2.
Snowflake
Snowflake Dynamic Tables refresh gets a cost test
Snowflake Dynamic Tables now claim up to 2.8x faster refresh on Gen2 warehouses, but the cost win depends on target lag and change volume.
Engineering
Vibe coding security needs a real publish gate now
Vibe coding security is a publish-time problem: 5,000 AI-built public assets reportedly exposed sensitive data, so add gates before launch.
Cyber security
FortiBleed puts FortiGate credentials on the clock now
FortiBleed is an active FortiGate credential exposure campaign with up to 86,644 devices reported. Rotate, isolate, and investigate now.
Cyber security
Splunk CVE-2026-20253 puts SIEMs on a 72-hour clock
Splunk CVE-2026-20253 is an actively exploited critical flaw. Patch exposed Enterprise 10.0 and 10.2 nodes by June 21.
Cyber security
Fortinet credential exposure needs a reset plan now
Fortinet credential exposure means about 74,000 edge devices may have leaked logins. Rotate, audit, and lock down FortiGate access now.
Cyber security
Mastra npm supply chain attack hits AI build rooms
Mastra npm supply chain attack exposed AI build pipelines through more than 140 packages, so treat installs as secret exposure events.
Cyber security
Splunk Enterprise flaw turns logs into attack surface
Splunk Enterprise flaw CVE-2026-20253 is under active exploitation. Patch by June 21 or disable the PostgreSQL sidecar safely.
Engineering
Subquadratic attention gets its first serious test
Subquadratic attention is a sparse LLM design now showing a 56.2x speed test win at 1M tokens. Treat it as promising, gated infrastructure.
Engineering
Flexible data centers turn AI power into a grid dial
Flexible data centers let AI sites cut load for a few peak hours, with Duke finding 76 GW of headroom at 0.25% curtailment.
Snowflake
Snowflake Hybrid Tables get faster without request fees
Snowflake Hybrid Tables are row-store tables for OLTP-style work in Snowflake. New preview optimizations report up to 8x throughput.
Snowflake
Snowflake Iceberg ADLS writes are finally usable
Snowflake Iceberg ADLS support is the GA path for Azure teams to read and write externally managed Iceberg tables without moving storage.
Engineering
olmo-eval brings statistical discipline to LLM loops
olmo-eval is an open workbench for iterative LLM evaluation. It makes tiny checkpoint gains harder to mistake for progress.
Engineering
Miasma worm: live coverage of the Red Hat npm attack
Miasma is a self-propagating npm worm. It hijacked Red Hat's GitHub Actions OIDC trusted publishing to ship 96 backdoored @redhat-cloud-services versions whose preinstall hook runs a Bun credential stealer that then spreads with the secrets it steals.
Engineering
Confidential inference makes Apple’s cloud AI real
Confidential inference lets Apple run AFM 3 Cloud Pro on NVIDIA GPUs in Google Cloud while keeping PCC privacy promises.
Engineering
What is MCP? The Model Context Protocol for data engineers
MCP is an open standard that lets AI models call your tools and data through one connector instead of a custom integration per model. Here is what it means for data engineers.
Engineering
Miasma worm turns AI coding agents into repo traps
Miasma worm is a credential stealer that hit 73 Microsoft GitHub repos. Treat agent-opened clones as compromised, not suspicious.
Engineering
Xcode 27 makes Apple AI the next app platform toll
Xcode 27 is Apple's AI development reset: free Private Cloud Compute for small apps, agent hooks, and five AFM 3 models change build calculus.
Matillion
Matillion Context Engine: setup, limits, and costs
Matillion Context Engine is a public preview knowledge graph for Maia AI Agents. Start with restricted domain graphs and watch crawler scope.
Snowflake
Snowflake Adaptive Compute: the bill owner playbook
Snowflake Adaptive Compute is query-based adaptive warehouse compute. Use its 2 knobs to cap bursts, monitor credits, and avoid blind migrations.
Snowflake
ICEBERG_MERGE_ON_READ_BEHAVIOR changes Iceberg DML
ICEBERG_MERGE_ON_READ_BEHAVIOR is Snowflake's GA switch for Iceberg DML mode. AUTO sends 3 of 4 table cases to merge-on-read.
Databricks
Databricks Data Intelligence Platform, explained for builders
The Databricks Data Intelligence Platform is a lakehouse that unifies storage, compute, governance, and AI on open Delta tables. Here is how the pieces fit and where the cost goes.
Matillion
Matillion Context Engine grounds Maia agent work
Matillion Context Engine is a public preview metadata layer that gives Maia AI Agents knowledge graphs for safer pipeline work.
Matillion
Matillion's Data Productivity Cloud, explained for builders
The Data Productivity Cloud is Matillion's cloud-native platform for building, running, and orchestrating data pipelines with low-code, code, and AI. Here is how the pieces fit and where the cost goes.
Snowflake
Snowflake Adaptive Compute: a bill owner's guide
Snowflake Adaptive Compute is query billed warehouse compute with 2 tuning knobs. Use it when tuning costs more than control.
Snowflake
Snowflake Adaptive Compute rewrites warehouse sizing
Snowflake Adaptive Compute is query-billed warehouse compute. Its default XLARGE cap and multiplier 2 force FinOps teams to retest sizing.
Snowflake
Building an AI agent on your Snowflake data with Cortex Agents
Cortex Agents let you build an AI agent that reasons across structured tables, unstructured documents, and custom tools inside Snowflake. It orchestrates a plan-act-reflect loop, and the bill is the sum of four meters you need to watch.
Snowflake
Snowflake Cortex: running LLMs where your data already lives
Snowflake Cortex AI exposes LLMs as SQL functions like AI_COMPLETE and AI_CLASSIFY, so you run inference without moving data out. It is billed per token by model, and cost swings roughly 40x between a small model and a frontier one, so model choice is the budget.
Snowflake
Cortex Analyst: let business users query Snowflake in plain English
Cortex Analyst is Snowflake's managed text-to-SQL service: business users ask questions in natural language and get answers without writing SQL. The accuracy depends almost entirely on a semantic view you build, and it is billed per message, not per token.
Snowflake
Cortex Search: the managed RAG engine inside Snowflake
Cortex Search is Snowflake's managed hybrid search service: it embeds your text, runs vector plus keyword retrieval with reranking, and keeps the index fresh, so you can build RAG and enterprise search without standing up a vector database. The cost is several meters, and serving compute bills even when idle.
Snowflake
Snowflake Gen2 warehouses: faster compute you have to opt into
Snowflake Gen2 standard warehouses run on faster hardware and finish most queries quicker, but they bill at a higher credit rate and you often have to switch with a SQL clause. Whether they save money depends entirely on whether the speedup beats the rate.
Snowflake
Snowflake RBAC and masking: lock it down without grinding to a halt
Snowflake access control is role-based: privileges attach to roles, not users. Splitting access roles from functional roles collapses thousands of direct grants to a few hundred, and one masking policy can protect thousands of columns at query time.
Snowflake
Should you put your data lake in Snowflake Iceberg tables?
Snowflake Iceberg tables store data in open Apache Iceberg format in your own cloud storage, so Snowflake bills zero storage and other engines can read it. The catch: only Snowflake-managed catalog tables get full platform support, external-catalog tables lose clustering, cloning, and replication.
Snowflake
Snowflake Openflow: managed ingestion built on Apache NiFi
Openflow is Snowflake's managed data integration service, built on Apache NiFi, that moves structured and unstructured data from any source into Snowflake. It runs in two modes: inside Snowflake on container services, or in your own cloud VPC, and each bills and isolates differently.
Snowflake
Snowflake clustering: when a clustering key actually pays off
Snowflake clustering keys reorganize micro-partitions so queries prune more of the table. On a well-clustered date column a one-day query can scan 140 micro-partitions instead of 9,800, but automatic clustering bills credits, so it only pays on big, filtered, slow-changing tables.
Snowflake
Dynamic Tables vs Streams and Tasks: which Snowflake pipeline to build
Dynamic Tables let you declare a SELECT and a target lag and let Snowflake refresh it; Streams and Tasks give you imperative control. Dynamic Tables bottom out at a 60-second minimum lag, so sub-minute freshness still means Snowpipe Streaming or Tasks.
Snowflake
Snowflake warehouse sizing: stop paying for idle compute
Snowflake warehouse sizing sets your credit burn: each size up doubles credits per hour, so a 4XL costs 128 credits per hour against an XS at 1. Right-size by workload, not by habit.
Engineering
AI agent security failed in Meta’s support desk test
AI agent security is privileged access control for LLMs. Meta’s Instagram hack shows one support bot can turn account recovery into takeover.
Engineering
TeamPCP: the crew behind the npm worm hitting Red Hat
TeamPCP is the cybercrime crew behind the Shai-Hulud npm worm. It open-sourced the malware in May 2026, then poisoned Red Hat's packages and blurred the question of who to blame.
Engineering
Your agents are working too hard
AI agents are not yet mainstream, and the developers who use them report personal speed but little team-wide gain. The fix is teaching agents when to stop.
Engineering
AI chips give 24x more per dollar, if you can afford the sticker
AI chip performance per dollar improves about 37 percent a year, yet each new flagship costs more upfront. The GB300 delivers 24 times the value of a P100 at nine times the price.
Engineering
Context windows grew 30x a year. Your retrieval stack noticed
LLM context windows have expanded about 30 times a year since 2023, from a few thousand tokens to over a million. The change quietly rewrites how RAG systems should be built.
Engineering
The world's AI compute now doubles every seven months
The installed stock of AI chips is growing 3.4 times a year, doubling every seven months. The capacity question has quietly shifted from chips to power and buildings.
Engineering
Inference got cheap, but not for the work that pays
LLM inference costs fell between 9 and 900 times a year depending on the task. The cheapest gains landed on easy work, while frontier reasoning barely moved.