Ship It Weekly - DevOps, SRE, Platform and Cloud Engineering News · Teller's Tech - DevOps, SRE and Cloud Podcast

Hackerbot-Claw Grows, Xygeni Tag Poisoning, GitHub Search HA, Windows SID Failures, and AI Skills Supply Chain

March 27, 2026·15 min·1 clip

OpenSSF warned about HackerBot-Claw hitting Microsoft and Datadog, with remote code execution in five of seven targeted repositories.

This episode explores how convenience in DevOps tools—like GitHub Actions, mutable tags, cloned images, and agent skills—often masks serious trust and security risks. It covers real incidents like the HackerBot-Claw campaign and Zygeny tag poisoning, alongside platform engineering fixes and supply chain warnings, urging teams to treat automation as part of the control plane.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Ship It Weekly - DevOps, SRE, Platform and Cloud Engineering News