<p>This week, we discuss how security gets sold to execs, where agentic coding and security collide, and Cloudflare vs. Datadog&#39;s diverging paths. Plus, Coté weighs in on sugar cookies.</p>

<p><a href="https://www.youtube.com/live/XdTKgHgmClo?si=mf79IiLuolhuuveb" rel="nofollow">Watch the YouTube Live Recording of Episode</a> <a href="https://www.youtube.com/live/XdTKgHgmClo?si=mf79IiLuolhuuveb" rel="nofollow">572</a></p>

<h2>Runner-up Titles</h2>

<ul>
<li>Sugar Kingdom</li>
<li>Bastard Sugar</li>
<li>Choose butter</li>
<li>It’s just AI now</li>
<li>People don’t like paying for software</li>
<li>It’s an exciting time to be writing software</li>
<li>Are we going to start funding open source?</li>
<li>Speaking of that, but not that, it’s totally unrelated</li>
<li>We’re leaving the table</li>
<li>Weird network stuff</li>
<li>That box of cables on GitHub</li>
</ul>

<h2>Rundown</h2>

<ul>
<li>Security

<ul>
<li><a href="https://www.aikido.dev/blog/mini-shai-hulud-is-back-tanstack-compromised" rel="nofollow">Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages</a></li>
<li><a href="https://www.redhat.com/en/about/press-releases/fedora-hummingbird-linux-brings-agentic-linux-builders" rel="nofollow">Fedora Hummingbird Linux Brings Agentic Linux to Builders</a></li>
<li><a href="https://www.redhat.com/en/about/press-releases/red-hat-hardened-images-accelerates-cloud-native-development-and-zero-cve-strategies" rel="nofollow">Red Hat Hardened Images</a></li>
<li><a href="https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-to-acquire-portkey-to-secure-the-rise-of-ai-agents" rel="nofollow">Palo Alto Networks to Acquire Portkey to Secure the Rise of AI Agents</a></li>
<li><a href="https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/?utm_source=substack&utm_medium=email" rel="nofollow">Mythos finds a curl vulnerability</a></li>
<li><a href="https://lobste.rs/s/oznirn/redis_cost_ambition#c_dzrja0" rel="nofollow">Redis and the Cost of Ambition</a></li>
</ul></li>
<li>AI is restructuring the software industry — winners and losers

<ul>
<li><a href="https://siliconangle.com/2026/05/07/datadogs-stock-jumps-31-crushing-earnings-beat-showing-theres-still-hope-software/" rel="nofollow">Datadog&#39;s stock jumps 31% on crushing earnings beat</a></li>
<li><a href="https://www.cnbc.com/2026/05/07/cloudflare-net-q1-2026-stock-earnings-layoffs.html" rel="nofollow">Cloudflare stock sinks 24% after earnings as company cuts 1,100 employees</a></li>
<li><a href="https://x.com/artman/status/2052657017370661346?s=46" rel="nofollow">Linear increases workforce</a></li>
</ul></li>
</ul>

<h2>Relevant to your Interests</h2>

<ul>
<li><a href="https://cote.pizza/shit-people-say/" rel="nofollow">Laws, anecdotes, idioms, and other shit people say - cote.pizza</a></li>
<li><a href="https://www.theverge.com/tech/885002/aliro-smart-lock-standard-launches-apple-google-samsung-promise-support" rel="nofollow">The smart lock standard that could replace your keys is finally here</a></li>
<li><a href="https://github.com/V4bel/dirtyfrag/blob/master/README.md" rel="nofollow">dirtyfrag/README.md at master · V4bel/dirtyfrag · GitHub</a></li>
<li><a href="https://www.redhat.com/en/about/red-hat-summit-newsroom" rel="nofollow">Red Hat Summit Newsroom</a></li>
<li><a href="https://techcrunch.com/2026/05/11/finally-texts-between-android-and-iphone-users-can-be-end-to-end-encrypted/" rel="nofollow">Finally, texts between Android and iPhone users can be end-to-end encrypted</a></li>
<li><a href="https://emirb.github.io/blog/microvm-2026/" rel="nofollow">Your Container Is Not a Sandbox</a></li>
<li><a href="https://openai.com/index/openai-launches-the-deployment-company/" rel="nofollow">OpenAI launches the OpenAI Deployment Company</a></li>
<li><a href="https://apple.news/AkI23Ue1vT7G-uHl6AGMIkA" rel="nofollow">Corporate Card Startup Ramp Raising Funds at $40 Billion Valuation</a></li>
<li><a href="https://www.cbsnews.com/news/cyberattack-shutters-canvas-learning-platform-for-schools-across-us/" rel="nofollow">Cyberattack shutters Canvas learning platform for schools across the U.S.</a></li>
<li><a href="https://www.theregister.com/off-prem/2026/05/08/aws-warns-of-ec2-impairment-as-power-loss-hits-notorious-us-east-1-region/5235509" rel="nofollow">AWS warns of EC2 &#39;impairment&#39; as power loss hits notorious US-EAST-1 region</a></li>
<li><a href="https://theagileadmin.com/2026/05/07/ai-and-devops-maturity/" rel="nofollow">AI and DevOps Maturity</a></li>
<li><a href="https://arstechnica.com/ai/2026/05/anthropic-raises-claude-code-usage-limits-credits-new-deal-with-spacex/" rel="nofollow">Anthropic raises Claude Code usage limits, credits new deal with SpaceX</a></li>
<li><a href="https://aws.amazon.com/about-aws/whats-new/2026/05/agent-toolkit/" rel="nofollow">Announcing Agent Toolkit for AWS</a></li>
<li><a href="https://www.threads.com/@benedictevans/post/DYOpAimjIOM?xmt=AQG0tT5HiqGUD0_govo-ybcgVNMQAg9DfD-lwbI4wYT3kxcZ2N84Df1FITvi0IvOo7EAzcw&slof=1" rel="nofollow">He&#39;s not wrong, but what can they do? How are those Microsoft foundation models going?</a></li>
</ul>

<h2>Sponsors</h2>

<ul>
<li><a href="https://webrtc.ventures/sdt" rel="nofollow">WebRTC.ventures – Real-time communication &amp; Voice AI integration</a></li>
</ul>

<h2>Conferences</h2>

<ul>
<li><a href="https://www.wearedevelopers.com/world-congress-north-america" rel="nofollow">WeAreDevelopers Europe</a>, July 8-10, 2026 Berlin, Coté speaking.</li>
<li><a href="https://www.devopsdays.at/" rel="nofollow">DevOpsDays Graz</a>, Sept 4-5, 2026</li>
<li><a href="https://tickets.devopsdays.org/devopsdays-denver/2026/redeem?voucher=26DODSWEDEFTALK" rel="nofollow">DevOpsDays Rockies</a>, Sept. 22 – 23, 2026, Discount Code: <strong>26DODSWEDEFTALK</strong></li>
<li><a href="https://www.wearedevelopers.com/world-congress-north-america" rel="nofollow">WeAreDevelopers NA</a>, Sept 23-25, 2026, Discount Code: <strong>DEVPOD26</strong></li>
<li><a href="https://devopsdays.org/events/2026-dallas/welcome/" rel="nofollow">DevOpsDays Dallas</a>, Sept 28-29, 2026</li>
<li><a href="https://devopsdays.org/events/2026-vilnius/welcome/" rel="nofollow">DevOpsDays Vilnius</a>, Sep 30 - Oct 1. 2006</li>
<li><a href="https://devopsdays.istanbul" rel="nofollow">DevOpsDays Istanbul</a>, October 24th, 2026 - <a href="https://www.linkedin.com/feed/update/urn:li:activity:7445353113265516545/" rel="nofollow">Coté keynoting</a>.</li>
<li>VMware User Groups (VMUGs):

<ul>
<li>Dallas (June 9-11, 2026)</li>
<li>Orlando (October 20-22, 2026)</li>
</ul></li>
</ul>

<h2>SDT News &amp; Community</h2>

<ul>
<li><a href="https://softwaredefinedtalk.slack.com/join/shared_invite/zt-1hn55iv5d-UTfN7mVX1D9D5ExRt3ZJYQ#/shared-invite/email" rel="nofollow">Join our Slack community</a></li>
<li>Email the show: <a href="mailto:questions@softwaredefinedtalk.com" rel="nofollow">questions@softwaredefinedtalk.com</a></li>
<li>Free stickers: Email your address to <a href="mailto:stickers@softwaredefinedtalk.com" rel="nofollow">stickers@softwaredefinedtalk.com</a></li>
<li>Follow us on social media: <a href="https://twitter.com/softwaredeftalk" rel="nofollow">Twitter</a>, <a href="https://www.threads.net/@softwaredefinedtalk" rel="nofollow">Threads</a>, <a href="https://hachyderm.io/@softwaredefinedtalk" rel="nofollow">Mastodon</a>, <a href="https://www.linkedin.com/company/software-defined-talk/" rel="nofollow">LinkedIn</a>, <a href="https://bsky.app/profile/softwaredefinedtalk.com" rel="nofollow">BlueSky</a></li>
<li>Watch us on: <a href="https://www.twitch.tv/sdtpodcast" rel="nofollow">Twitch</a>, <a href="https://www.youtube.com/channel/UCi3OJPV6h9tp-hbsGBLGsDQ/featured" rel="nofollow">YouTube</a>, <a href="https://www.instagram.com/softwaredefinedtalk/" rel="nofollow">Instagram</a>, <a href="https://www.tiktok.com/@softwaredefinedtalk" rel="nofollow">TikTok</a></li>
<li>Book offer: <a href="https://leanpub.com/digitalwtf/c/sdt" rel="nofollow">Use code SDT for $20 off &quot;Digital WTF&quot; by Coté</a></li>
<li><a href="https://www.softwaredefinedtalk.com/ads" rel="nofollow">Sponsor the show</a></li>
<li><a href="https://failovermedia.com/" rel="nofollow">Sponsor more podcasts with Failover Media</a></li>
</ul>

<h2>Recommendations</h2>

<ul>
<li>Brandon: <a href="https://developer.apple.com/documentation/xcode/giving-external-agents-access-to-xcode" rel="nofollow">Xcode MCP</a></li>
<li>Matt: <a href="https://www.whatcable.uk" rel="nofollow">whatcable</a></li>
<li>Coté: <a href="https://www.rottentomatoes.com/tv/shogun_2024" rel="nofollow"><em>Shogun</em></a>.</li>
</ul><p>Sponsored By:</p><ul><li><a rel="nofollow" href="https://webrtc.ventures/sdt">WebRTC</a>: <a rel="nofollow" href="https://webrtc.ventures/sdt">WebRTC.ventures – Real-time communication &amp; Voice AI integration</a></li></ul>

Software Defined Talk

[email protected] (Software Defined Talk LLC)

Episode 572: The world isn’t curl

MAY 15, 202660 MIN
Software Defined Talk

Episode 572: The world isn’t curl

MAY 15, 202660 MIN

Description

This week, we discuss how security gets sold to execs, where agentic coding and security collide, and Cloudflare vs. Datadog's diverging paths. Plus, Coté weighs in on sugar cookies. Watch the YouTube Live Recording of Episode 572 Runner-up Titles Sugar Kingdom Bastard Sugar Choose butter It’s just AI now People don’t like paying for software It’s an exciting time to be writing software Are we going to start funding open source? Speaking of that, but not that, it’s totally unrelated We’re leaving the table Weird network stuff That box of cables on GitHub Rundown Security Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages Fedora Hummingbird Linux Brings Agentic Linux to Builders Red Hat Hardened Images Palo Alto Networks to Acquire Portkey to Secure the Rise of AI Agents Mythos finds a curl vulnerability Redis and the Cost of Ambition AI is restructuring the software industry — winners and losers Datadog's stock jumps 31% on crushing earnings beat Cloudflare stock sinks 24% after earnings as company cuts 1,100 employees Linear increases workforce Relevant to your Interests Laws, anecdotes, idioms, and other shit people say - cote.pizza The smart lock standard that could replace your keys is finally here dirtyfrag/README.md at master · V4bel/dirtyfrag · GitHub Red Hat Summit Newsroom Finally, texts between Android and iPhone users can be end-to-end encrypted Your Container Is Not a Sandbox OpenAI launches the OpenAI Deployment Company Corporate Card Startup Ramp Raising Funds at $40 Billion Valuation Cyberattack shutters Canvas learning platform for schools across the U.S. AWS warns of EC2 'impairment' as power loss hits notorious US-EAST-1 region AI and DevOps Maturity Anthropic raises Claude Code usage limits, credits new deal with SpaceX Announcing Agent Toolkit for AWS He's not wrong, but what can they do? How are those Microsoft foundation models going? Sponsors WebRTC.ventures – Real-time communication & Voice AI integration Conferences WeAreDevelopers Europe, July 8-10, 2026 Berlin, Coté speaking. DevOpsDays Graz, Sept 4-5, 2026 DevOpsDays Rockies, Sept. 22 – 23, 2026, Discount Code: 26DODSWEDEFTALK WeAreDevelopers NA, Sept 23-25, 2026, Discount Code: DEVPOD26 DevOpsDays Dallas, Sept 28-29, 2026 DevOpsDays Vilnius, Sep 30 - Oct 1. 2006 DevOpsDays Istanbul, October 24th, 2026 - Coté keynoting. VMware User Groups (VMUGs): Dallas (June 9-11, 2026) Orlando (October 20-22, 2026) SDT News & Community Join our Slack community Email the show: [email protected] Free stickers: Email your address to [email protected] Follow us on social media: Twitter, Threads, Mastodon, LinkedIn, BlueSky Watch us on: Twitch, YouTube, Instagram, TikTok Book offer: Use code SDT for $20 off "Digital WTF" by Coté Sponsor the show Sponsor more podcasts with Failover Media Recommendations Brandon: Xcode MCP Matt: whatcable Coté: Shogun. Sponsored By:WebRTC: WebRTC.ventures – Real-time communication & Voice AI integration