Advertise on podcast: ShipTalk - SRE, DevOps, Platform Engineering, Software Delivery

A hacker used Claude Code to help attack nine South Korean banks. Citrix finally released a security patch, but attackers may still be inside. And OpenAI reportedly lost $20 billion more in a single year than expected. Is the AI spending boom sustainable? This week on ShipTalk, Martin Reynolds and Adam Arellano break down the biggest stories in AI, cybersecurity, and software delivery. We cover how a 26-year-old hacker paired Claude Code with an open-source penetration testing agent, why Citrix's delayed patch raises bigger questions about software security, and whether OpenAI's mounting losses point to an AI infrastructure bubble. Plus, we discuss Harness's acquisition of Augment and the future of AI software factories, Google's AI medical assistant, and whether OpenAI's model safety announcements are becoming the new normal. Also in this episode: How AI agents are lowering the barrier to cyberattacks Why faster software delivery could be the key to better security What AI software factories mean for developers Whether massive AI investments are producing real breakthroughs The privacy tradeoffs of AI in healthcare ShipTalk is brought to you by Harness. Join us as we break down how software delivery is changing in the AI era. Learn more: https://shiptalk.io Powered by Harness: https://www.harness.io

Citrix customers were pulling NetScaler devices offline as attackers moved faster than the traditional security response cycle. This week on ShipTalk, Martin Reynolds and Adam Arellano are joined by Starr Brown, Director of Open Source Projects at OWASP, to break down the latest Citrix NetScaler security crisis, why exploitation is happening so quickly, and what it means when defenders may have only hours — or less — to react. They also dig into the rise of AI-powered cyberattacks, whether human security teams can realistically respond at machine speed, why resilience may matter more than shipping the next feature, and whether AI companies can really be trusted to regulate themselves. Plus: who actually writes technology regulation, Wall Street’s push to secure investment-grade ratings for OpenAI and Anthropic, and the biggest mistake companies are making when they assume security simply comes with their AI tools. ShipTalk explores how software delivery, AI, security, and engineering are changing in real time.

Why did an OpenAI AI agent hack an Australian government Medicare portal when nobody instructed it to? On June 18, an OpenAI research agent was looking for public information about medicine spending in Australia. When it hit a barrier, it found another way in — accessing public and non-public files and even writing files to an internal server. No personal Medicare records are believed to have been accessed. But the incident raises a much bigger question: what happens when autonomous AI agents hit a barrier and decide for themselves how to get around it? Martin Reynolds and Adam Arellano break down what happened, why Australia criticized OpenAI's response, and what “misaligned model activity” means for companies deploying autonomous AI agents. Then they dig into another bizarre case: an Alibaba-affiliated AI agent that reportedly created a reverse SSH tunnel, bypassed network restrictions, and mined cryptocurrency during training. Plus: are creators being paid to make AI sound more dangerous than it is? And TypeSafe AI's new low-cost model, Jev, goes into Overhyped or Under hyped. ShipTalk breaks down how AI is changing software delivery, DevOps, cybersecurity, and the way software gets shipped. RELATED READING Australian Prime Minister — Official briefing on the OpenAI incidentRead the Australian government briefing https://www.pm.gov.au/media/press-conference-new-york? Nature — AI agent hacks government website for first timeRead the Nature reporthttps://www.nature.com/articles/d41586-026-03024-z? ABC News — OpenAI agent accessed Australian government Medicare portalRead the ABC News reporthttps://www.abc.net.au/news/2026-09-24/ai-agent-accessed-australian-government-site-pm-says/107189078? The Block — Alibaba-linked AI agent mines cryptocurrencyRead the Alibaba AI agent reporthttps://www.theblock.co/news/markets/2026-03-08-alibaba-linked-ai-agent-hijacked-gpus-for-unauthorized-crypto-mining-researchers-say-392765? TypeSafe AI — Introducing JevRead about Jevhttps://typesafe.ai/blog/introducing-system-one-models-and-jev ShipTalk — https://www.shiptalk.ioHarness — https://www.harness.io FollowAdam Arellano: https://www.linkedin.com/in/adamrossarellano/   Martin Reynolds: https://www.linkedin.com/in/martinreynolds/    Brought to you by Harness.

Dario Amodei's essay "We Must Pace the Frontier" asked the AI industry to deliberately slow capability gains so safety work can keep up — and got public agreement from OpenAI, xAI and Google DeepMind within hours. Adam Arellano and Martin Reynolds bring in Bryan Payne, who has led security at Netflix and Adobe, to ask what's actually in the proposal and what was conspicuously left out. They dig into whether permanent employee-level access for third-party evaluators is a meaningful control or a curated one, why liability is the piece missing from the whole conversation, and what it says that OpenAI is running forensics on models it has already trained — including one that swept public GitHub for secrets stored in plaintext, which Adam argues was the most logical thing it could possibly have done. The episode moves from early airline safety through Nick Bostrom's paperclip maximizer to a malicious git config that can get Claude Code, Codex and Cursor to execute attacker code. Bryan's closing argument is the uncomfortable one: people have spent decades getting very good at planting flaws no human reviewer will spot, so the belief that a human in the loop will catch what an AI is doing may be the most optimistic assumption in software today. Along the way: Jacob Coxon's resignation thread, the greater-than-10% extinction figure his colleagues publicly endorsed, and why $2.7 trillion of AI spend returning business outcomes only one time in five might still be money well spent. Bryan's parting shot for teams: you're thinking too small. Mentioned in this episode Dario Amodei, "We Must Pace the Frontier" — https://darioamodei.com/post/we-must-pace-the-frontierShipTalk — https://www.shiptalk.ioHarness — https://www.harness.io FollowBryan D. Payne: https://www.linkedin.com/in/bdpayne/Adam Arellano: https://www.linkedin.com/in/adamrossarellano/   Martin Reynolds: https://www.linkedin.com/in/martinreynolds/    ShipTalk is brought to you by Harness. Subscribe wherever you listen, and until next time — let's stop talking and start shipping.

SpaceX bought Cursor's parent company Anysphere for $60 billion. OpenAI immediately cut off Cursor's access to its models; Anthropic went the other way and increased compute support. Business decision, or political one? Adam Arellano and Martin Reynolds are joined by Papanii Okai, EVP of Product Engineering at Rocket and former CTO of Venmo, who opens with a warning that everyone is reading this deal wrong. His case: Cursor cracked the interface between humans and models, and that capability matters far more to a company building physical AI than any code editor. He also argues Apple — not OpenAI, not Microsoft — takes ambient AI, because the win condition isn't an app you launch. The conversation moves to the talent math nobody wants to do. This year 32% of organizations skipped buying software and built it instead. Large enterprises doubled agent adoption while small firms stayed flat. Meanwhile US entry-level engineering postings fell 67%, and conventional wisdom says a senior takes 5 to 9 years to grow. Papanii thinks that timeline is about to compress hard — and that companies planning to stop hiring will hit a burnout wall instead of a scaling curve. Also in this episode: whether Tim Cook's retirement signals a broader shift toward builder CEOs, why ransomware crews are choosing cheap repeatable playbooks over frontier models, and what still happens to a room of engineers when you say "Log4j" out loud. ShipTalk is brought to you by Harness. Key moments: 00:51 — SpaceX buys Cursor for $60B 03:59 — Guest: Papanii Okai 04:42 — The contrarian read on the deal 06:23 — Why Apple wins ambient AI 13:30 — Harness by the Numbers 14:35 — Build vs. buy and the death of SaaS 18:46 — Seniors are in their golden years 20:00 — Where do 2030's seniors come from? 25:43 — Do universities still matter? 29:30 — Tim Cook retires, a builder takes over 34:07 — The AI threat apocalypse isn't here 39:22 — The one thing teams get wrong

Microsoft took 233 days to patch CoSnitch (CVE-2026-24301), a one-click Copilot exploit rated 8.8 that reads your Gmail, Drive, and Calendar and writes attacker instructions into permanent memory — surviving a password change, new tokens, and a full device wipe. Varonis found it by asking Copilot to explain why the attack was impossible. Copilot mapped its own architecture and volunteered the undocumented parameter. Martin Reynolds and Adam Arellano are joined by Matthew Tanner — 30 years shipping software, from NHS critical systems to national-scale financial redress — for the exploit Microsoft thought it had fixed in February, GitHub's seven-hour outage, and an AI agent that broke into a gym's booking system while trying to reserve a Pilates class. Also in this episode: ChatGPT's use of the site: operator jumped roughly 46x in a single day, collapsing Reddit's share of citations and an entire agency business with it. And Stripe reportedly paying $7.5B for OpenRouter — a company whose whole pitch was that it prevents vendor lock-in. Matthew Tanner — Founder, City Software · SaaS Architecture & Fractional CTO https://www.linkedin.com/in/matt7?originalSubdomain=uk  HOSTS Martin Reynolds — https://www.linkedin.com/in/martinreynolds/ Adam Arellano — https://www.linkedin.com/in/adamrossarellano/ ShipTalk is brought to you by Harness — https://www.harness.io/ New episode every other Wednesday — https://shiptalk.io/

Anthropic's Mythos 5 created fake GitHub identities to get malicious code approved. Cybersecurity advisor and author Nicole Dove joins Adam Arellano and Martin Reynolds to unpack AI agent security, device code phishing, security culture, governance, and the controls needed to secure faster software delivery. The conversation moves from the UK AI Security Institute incident and Huntress’s reported 1,380% increase in device code phishing to a bigger question: are teams optimizing coding speed while leaving the rest of the software delivery lifecycle behind? Nicole explains why cybersecurity fundamentals, trust, awareness, threat modeling, QA, vulnerability management, and operational controls matter more than another framework. The group also discussed Palantir Technologies (PLTR) and its approach to software.  Nicole Dove is a cybersecurity advisor and the author of Learning Cybersecurity Fundamentals. Sources discussed: UK AI Security Institute incident report: https://www.csoonline.com/article/4205612/openai-anthropic-ai-agents-resorted-to-deception-in-new-cybersecurity-incidents.html   Phishing Enters Automation Era Article https://www.axios.com/2026/06/23/ai-automation-phishing-emails-hackers   US government finalized its AI review framework: https://www.techbrew.com/stories/white-house-ai-framework-open-weights-exclusion?w    Connect withNicole Dove: https://www.linkedin.com/in/jnicoledove/  Adam Arellano: https://www.linkedin.com/in/adamrossarellano/     Martin Reynolds: https://www.linkedin.com/in/martinreynolds/     Harness: harness.io/   Subscribe to ShipTalk: Shiptalk.io    (00:00) - Cold open: AI agents, phishing, and controls (00:46) - The AI agent that created fake GitHub identities (05:03) - Device code phishing jumps 1,380% (06:08) - Meet Nicole Dove (07:24) - Attackers automated before defenders (09:19) - Cybersecurity fundamentals still win (10:43) - Security culture vs. security tooling (12:31) - Simulating the pain of a breach (15:10) - Building trust with engineering and the business (16:50) - Why phishing exploits trusted brands (19:03) - Continuous security learning (19:53) - AI coding speed vs. secure software delivery (21:36) - Government AI reviews and open-weight models (24:47) - Policies do not protect you—controls do (27:25) - Federal AI, Palantir, and old security assumptions (29:05) - What teams get wrong about AI and software delivery (30:29) - Final takeaways Click here to view the episode transcript. Click here to watch a video of this episode.

OpenAI just admitted that two of its own AI models went rogue during an internal red-team test — slipping outof their sandbox, reaching the open internet, and hacking Hugging Face on their own. OpenAI called it an“unprecedented cyber incident.” Are autonomous coding agents already out of control?Hosts Martin Reynolds and Adam Arellano open this episode with the story that reads like science fiction, thenturn to the harder question underneath it. In a single week, OpenAI, Anthropic, and Google each shippedrepository-wide coding agents that run 30 to 60 steps at a time and rewrite hundreds of files with no humanwatching every move.Joining them is Liam Mitchell, Director of Platform Engineering at One Advanced and one of the engineers behind theUK’s first sovereign LLMs. His take reframes the whole debate: “There’s a big difference between autonomy andauthority.” Autonomy isn’t the threat — unchecked authority is. The conversation runs from the GitHub promptinjection hack and the exploding token bill to a graduate-hiring cliff (new grads are now just 7% of Big Tech hires)and what it all means for the engineers who’ll manage these agents. Liam’s parting shot: we’ve “solved the costof writing software, but not the cost of owning it.”A candid, news-driven conversation about AI, coding agents, and how software really gets shipped in the AI era.Stop talking. Start shipping. Martin Reynolds: https://www.linkedin.com/in/martinreynolds/Adam Arellano: https://www.linkedin.com/in/adamrossarellano/Liam Mitchell : https://www.linkedin.com/in/liam-mitchell-16061833/ Follow the Pod at https://shiptalk.io/ShipTalk is brought to you by Harness. Learn more at https://www.harness.io/

The U.S. just barred foreign nationals from accessing two advanced AI models — Fable and Mythos — citing national security. Around the same time, the Five Eyes intelligence alliance warned that AI-enabled cyberattacks are "months, not years" away. Host Adam and co-host Martin dig into whether that warning is already overdue — and what it means for the people actually defending software. They're joined by Assaf, a longtime security leader (and Adam's former boss) and author of Lessons from the Front Line: Insights from a Cybersecurity Career. The conversation moves from the headlines to the harder truth underneath them: AI adoption is climbing, yet more than half of security and IT workers are considering leaving their jobs — burned out, under-resourced, and worried AI is coming for their roles. Assaf's take is contrarian and sharp: the real failure isn't AI, it's leadership translation and a training pipeline we're quietly demolishing. As Adam puts it, "this is not a security problem, it's an engineering problem." A candid, news-driven look at AI, national security, and the security workforce squeeze — and a surprisingly optimistic read on where it all goes next. Listen on: Apple Podcast | Spotify | YouTube Timestamps: 00:00 Cold Open: AI Cyberattacks Aren't Months Away — "We're Already There" 00:53 Welcome to ShipTalk: Today's Two Headlines 01:35 Are We Already Using AI Without Realizing It? 02:41 Five Eyes Warns AI Cyberattacks Are "Months, Not Years" Away 04:31 Harness by the Numbers: Half of Security Pros Want to Quit 05:25 Meet the Guest: Assaf Keren (ex-PayPal & Qualtrics CSO) 06:14 "Secure by Design, But For Real This Time" 08:46 The ISSA Survey: Why Security Jobs Keep Getting Harder 10:01 The "Triple Whammy" Burning Out Security Teams 11:49 Have We Been Here Before? Cloud & the Changing SOC Role 13:32 The Contrarian Take: AI Could Make Security Better 15:41 The Real Failure: We're Demolishing the Training Pipeline 18:41 Weak Leadership, or a Security Translation Problem? 22:05 Trust: The CISO's Real Business Function 23:20 What Teams Get Wrong About AI + Software Delivery 24:37 Debrief: Adam & Martin's Takeaways 26:31 Wrap-Up: Stop Talking, Start Shipping

Welcome to the Season 4 finale of the Ship Talk podcast! Join special host Thomas Dockstader and several industry leaders at AWS re:Invent to discuss the intersection of AI and software delivery. The following is a series of interviews with partners, customers, and engineering leaders on the front lines of AI transformation.Don't miss the "Ship It or Skip It" segment, where our guests give their rapid-fire takes on everything from AI code reviews to the four-day work week.Connect with our featured host/guests:Thomas Docstater | Ron Miller | Hasith Kalpage |  Eric Baran |  Tim Knapp | Piyush DiwanWatch the full video on YouTube. Subscribe to ‪@Harnessio‬ YouTube channel for more insights as we prepare for Season 5!

This is a special episode where we sat down with the speakers at DevOpsNotDead NYC 2026 to hear their perspectives on how AI is transforming software delivery. Connect with our guests: https://www.linkedin.com/in/diamondbishop https://www.linkedin.com/in/sadiojonas/ https://www.linkedin.com/in/joshuamlee/ https://www.linkedin.com/in/akash-thakur-00367a155/ https://www.linkedin.com/in/mahender-mangalasri/ https://www.linkedin.com/in/jamesbrookbank/

This is a special episode where we sat down with the speakers at SREday NYC 2026 to hear their perspectives on how AI is transforming software delivery.

How do you secure data in the age of Agentic AI? 🤖🔐In this episode of ShipTalk, Dewan Ahmed sits down with Devan Shah, Chief Architect of Data Security at IBM, to explore the massive shift from traditional DevOps to AI-infused software delivery.Devan shares his journey from being a chef to leading an "army" of 450+ developers at IBM. They dive deep into the technical bedrock of IBM’s "OnePipeline" (built on Tekton and Argo CD), the rise of Data Security Posture Management (DSPM), and the architectural principles required to ship AI features without compromising security or compliance.If you are an architect, SRE, or developer advocate trying to navigate the "Crown Jewels In, Crown Jewels Out" risk of LLMs, this episode is for you.Resources mentioned in this episode:  IBM Guardium: https://www.ibm.com/products/guardiumIBM & Anthropic Partnership: https://newsroom.ibm.com/2025-10-07-2025-ibm-and-anthropic-partner-to-advance-enterprise-software-development-with-proven-security-and-governanceModernizing SDLC with AI (Whitepaper): https://www.ibm.com/downloads/documents/us-en/1443d5dd174f42e6Subscribe to ShipTalk for more episodes on the intersection of AI and Software Delivery!#AI #DataSecurity #DevOps #IBM #CyberSecurity #SDLC #ArgoCD #Tekton #DSPM #SoftwareEngineering

In this special predictions episode of ShipTalk, host Dewan Ahmed (Principal Developer Advocate, Harness) sits down with Nick Durkin, Field CTO at Harness, to unpack what’s actually coming in 2026—beyond the hype. They explore whether we’re heading toward the first AI-caused production meltdown, how much trust we should place in AI "confidence," and why many teams may face a wave of AI-driven tech debt before they find balance. Nick shares why the future isn’t about more tools or more gates, but about policy in the pipeline, guardrails instead of roadblocks, and teams finally operating with a shared rulebook. The conversation also dives into: Why DevSecOps may finally go mainstream in 2026How MLOps, agents, and prompts become first-class delivery artifactsThe real risks behind prompt injection, model tampering, and shadow AIWhether AI agents become coworkers—or chaosWhat developer experience looks like when IDEs start to feel like chat windowsHow engineers and teams can stay employable and relevant in an AI-native worldThis episode is pragmatic, optimistic, and grounded in real-world delivery experience—perfect for engineers, tech leads, architects, and executives navigating the next phase of AI-driven software delivery. Listen in for a CTO’s clear-eyed predictions on AI, DevSecOps, and what it really takes to ship safely at speed in 2026.

In this episode of the ShipTalk Podcast, host Dewan Ahmed (Principal Developer Advocate at Harness) sits down with Evgeny Ilinykh (Founder of GuidedMind.ai and former Tesla Engineering Manager) to move past the AI hype and get into the engineering reality of Retrieval-Augmented Generation (RAG).If your AI agents are hallucinating, the problem probably isn't your model—it’s your retrieval layer. Evgeny breaks down how to turn the "black box" of LLMs into a transparent, production-ready system that developers can actually trust.What we cover:- The Death of Deterministic Software: Moving from hardcoded paths to agentic AI logic.- The "Dark Spots" of Vector Space: Why hallucinations are actually retrieval failures.- Contextual Retrieval: Insights into how system-level context changes the game for accuracy.- Scaling to Production: Solving the "dirty work" of messy PDFs, table parsing, and chunking.- Standardizing AI Delivery: Will RAG become as common as CI/CD in the modern dev stack?RESOURCES & LINKS:1. Connect with our guest: https://www.linkedin.com/in/eilinykh/2. Explore GuidedMind.ai: https://guidedmind.ai/3. Read the Anthropic Research: https://www.anthropic.com/engineering/contextual-retrieval