<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
    <id>https://www.talk-nerdy-to-me.com</id>
    <title>Talk Nerdy to Me</title>
    <updated>2026-05-21T08:35:27.310Z</updated>
    <generator>https://github.com/jpmonette/feed</generator>
    <author>
        <name>Mathieu Kessler</name>
        <uri>https://www.talk-nerdy-to-me.com</uri>
    </author>
    <link rel="alternate" href="https://www.talk-nerdy-to-me.com"/>
    <link rel="self" href="https://www.talk-nerdy-to-me.com/atom.xml"/>
    <subtitle>Demystifying Cloud, FinOps, and AI - One Nerdy Topic at a Time</subtitle>
    <logo>https://www.talk-nerdy-to-me.com/images/logo.png</logo>
    <icon>https://www.talk-nerdy-to-me.com/favicon.ico</icon>
    <rights>All rights reserved 2026, Talk Nerdy to Me</rights>
    <entry>
        <title type="html"><![CDATA[Terraform Actions Block: The Complete Guide to Day 2 Operations in IaC]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/terraform-actions-block-day2-ops-complete-guide</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/terraform-actions-block-day2-ops-complete-guide"/>
        <updated>2026-05-16T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Terraform 1.14 introduced the `action` block — and it quietly solved the problem every cloud engineer has worked around for years. Invalidate a CDN. Run a database migration. Send an alert. All from within the plan/apply lifecycle, no bash scripts required. Here's the complete picture: syntax, catalog, pitfalls, and the OpenTofu fork you need to understand before you ship this to shared modules.]]></summary>
        <content type="html"><![CDATA[Terraform 1.14 introduced the `action` block — and it quietly solved the problem every cloud engineer has worked around for years. Invalidate a CDN. Run a database migration. Send an alert. All from within the plan/apply lifecycle, no bash scripts required. Here's the complete picture: syntax, catalog, pitfalls, and the OpenTofu fork you need to understand before you ship this to shared modules.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="terraform"/>
        <category label="iac"/>
        <category label="hashicorp"/>
        <category label="devops"/>
        <category label="platform-engineering"/>
        <category label="infrastructure-automation"/>
        <category label="day-2-ops"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[CVSS 10.0: Cisco Catalyst SD-WAN Just Handed Attackers Your Entire Overlay]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/cisco-sdwan-cve-2026-20182-authentication-bypass</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/cisco-sdwan-cve-2026-20182-authentication-bypass"/>
        <updated>2026-05-15T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[CVE-2026-20182 landed in CISA's Known Exploited Vulnerabilities catalog yesterday. CVSS 10.0. Emergency Directive 26-03. Federal agencies patch by tomorrow. UAT-8616 is not waiting for your change management window. Here's what the flaw does, who's behind it, and exactly what to run before you close this tab.]]></summary>
        <content type="html"><![CDATA[CVE-2026-20182 landed in CISA's Known Exploited Vulnerabilities catalog yesterday. CVSS 10.0. Emergency Directive 26-03. Federal agencies patch by tomorrow. UAT-8616 is not waiting for your change management window. Here's what the flaw does, who's behind it, and exactly what to run before you close this tab.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="network-security"/>
        <category label="cisco"/>
        <category label="sdwan"/>
        <category label="cve"/>
        <category label="cisa"/>
        <category label="devsecops"/>
        <category label="cloud-engineering"/>
        <category label="vulnerability"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[TeamPCP Poisoned the Security Tools in Your CI/CD Pipeline]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/teampcp-poisoned-cicd-security-tools</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/teampcp-poisoned-cicd-security-tools"/>
        <updated>2026-03-28T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[The March 2026 TeamPCP campaign did not just hit application dependencies. It moved through the security and developer tooling layer itself: Trivy, Checkmarx KICS, and LiteLLM release paths. This post breaks down what appears verified, what remains reported attribution, and the controls that would have cut the chain early.]]></summary>
        <content type="html"><![CDATA[The March 2026 TeamPCP campaign did not just hit application dependencies. It moved through the security and developer tooling layer itself: Trivy, Checkmarx KICS, and LiteLLM release paths. This post breaks down what appears verified, what remains reported attribution, and the controls that would have cut the chain early.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devsecops"/>
        <category label="supply-chain-security"/>
        <category label="github-actions"/>
        <category label="kubernetes"/>
        <category label="python"/>
        <category label="ci-cd"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[A Trojanized kubectl Binary, One AirDrop, and a Multimillion-Dollar Kubernetes Breach]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/trojanized-kubectl-airdrop-kubernetes-cluster-breach</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/trojanized-kubectl-airdrop-kubernetes-cluster-breach"/>
        <updated>2026-03-11T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Google Cloud Threat Horizons H1 2026 details a real campaign where UNC4899 used social engineering and a trojanized kubectl-like binary to pivot from a developer workstation into cloud control paths. This post breaks down the kill chain, the control failures, and the exact audits platform teams should run now.]]></summary>
        <content type="html"><![CDATA[Google Cloud Threat Horizons H1 2026 details a real campaign where UNC4899 used social engineering and a trojanized kubectl-like binary to pivot from a developer workstation into cloud control paths. This post breaks down the kill chain, the control failures, and the exact audits platform teams should run now.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="kubernetes"/>
        <category label="cloud-security"/>
        <category label="devsecops"/>
        <category label="gke"/>
        <category label="incident-response"/>
        <category label="supply-chain-security"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Copilot vs Claude Code vs Amazon Q for DevOps: What the Benchmarks Actually Show]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/copilot-vs-claude-code-vs-amazon-q-devops-benchmarks</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/copilot-vs-claude-code-vs-amazon-q-devops-benchmarks"/>
        <updated>2026-03-09T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Most AI assistant comparisons mix marketing claims, model benchmarks, and tool UX in one chart. This guide separates verified data from external estimates, compares architecture fit for DevOps workflows, and gives a reproducible 5-task benchmark harness for your own stack.]]></summary>
        <content type="html"><![CDATA[Most AI assistant comparisons mix marketing claims, model benchmarks, and tool UX in one chart. This guide separates verified data from external estimates, compares architecture fit for DevOps workflows, and gives a reproducible 5-task benchmark harness for your own stack.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devops"/>
        <category label="ai-agents"/>
        <category label="github-copilot"/>
        <category label="claude-code"/>
        <category label="amazon-q"/>
        <category label="terraform"/>
        <category label="benchmarks"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Microsoft Invested $13B in OpenAI, Made 10x on Paper, and Still Lost Exclusivity]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/microsoft-13b-openai-10x-return-lost-exclusivity</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/microsoft-13b-openai-10x-return-lost-exclusivity"/>
        <updated>2026-03-05T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Microsoft turned a $13B OpenAI bet into a massive paper gain, but the strategic moat moved. OpenAI is now multi-cloud by design, AWS hosts stateful runtime workloads, and Copilot is model-orchestrated. For cloud architects, single-provider AI assumptions are now a liability.]]></summary>
        <content type="html"><![CDATA[Microsoft turned a $13B OpenAI bet into a massive paper gain, but the strategic moat moved. OpenAI is now multi-cloud by design, AWS hosts stateful runtime workloads, and Copilot is model-orchestrated. For cloud architects, single-provider AI assumptions are now a liability.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="openai"/>
        <category label="microsoft"/>
        <category label="azure"/>
        <category label="aws"/>
        <category label="cloud-architecture"/>
        <category label="enterprise-ai"/>
        <category label="multi-cloud"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The Vibe Coding Infrastructure Bomb Is Real. Here Are the Receipts.]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/vibe-coding-infrastructure-bomb-receipts</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/vibe-coding-infrastructure-bomb-receipts"/>
        <updated>2026-03-04T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Vibe coding can ship fast. "Accept All" ships risk faster. This deep dive maps what the latest data actually shows about AI-generated quality drift, security exposure, and delivery instability, then lays out the controls that keep speed without cleanup debt.]]></summary>
        <content type="html"><![CDATA[Vibe coding can ship fast. "Accept All" ships risk faster. This deep dive maps what the latest data actually shows about AI-generated quality drift, security exposure, and delivery instability, then lays out the controls that keep speed without cleanup debt.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="vibe-coding"/>
        <category label="ai-coding"/>
        <category label="devops"/>
        <category label="software-engineering"/>
        <category label="devsecops"/>
        <category label="platform-engineering"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Your AI Agent Has More Access Than Your Junior Devs. That Is a Security Bug.]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/ai-agent-permissions-least-agency-security</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/ai-agent-permissions-least-agency-security"/>
        <updated>2026-03-02T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[AI agent security is no longer theoretical. Verified 2026 data shows widespread skill-level vulnerabilities, real malicious payloads, and measurable incident increases when agents are over-privileged. This guide translates the latest evidence into a least-agency security model for infrastructure teams.]]></summary>
        <content type="html"><![CDATA[AI agent security is no longer theoretical. Verified 2026 data shows widespread skill-level vulnerabilities, real malicious payloads, and measurable incident increases when agents are over-privileged. This guide translates the latest evidence into a least-agency security model for infrastructure teams.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="ai-agents"/>
        <category label="security"/>
        <category label="devsecops"/>
        <category label="mcp"/>
        <category label="cloud-engineering"/>
        <category label="owasp"/>
        <category label="platform-engineering"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[We Benchmarked AI Coding Agents on DevOps Work, Not Just Code]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/infra-ai-agent-benchmark-copilot-claude-amazon-q</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/infra-ai-agent-benchmark-copilot-claude-amazon-q"/>
        <updated>2026-02-27T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Most AI benchmarks measure coding tasks, not infrastructure operations. We ran a 20-task DevOps benchmark across GitHub Copilot, Claude Code, and Amazon Q Developer to test real platform engineering workflows: Terraform, Kubernetes debugging, CI/CD migration, and incident-style triage. Here is what held up and what broke.]]></summary>
        <content type="html"><![CDATA[Most AI benchmarks measure coding tasks, not infrastructure operations. We ran a 20-task DevOps benchmark across GitHub Copilot, Claude Code, and Amazon Q Developer to test real platform engineering workflows: Terraform, Kubernetes debugging, CI/CD migration, and incident-style triage. Here is what held up and what broke.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devops"/>
        <category label="ai-agents"/>
        <category label="terraform"/>
        <category label="kubernetes"/>
        <category label="ci-cd"/>
        <category label="github-copilot"/>
        <category label="claude-code"/>
        <category label="amazon-q"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[MCP Is the USB-C of DevOps: The Governance Playbook Teams Need Before the First "Deploy Staging" Prompt]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/mcp-usb-c-of-devops-governance-playbook</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/mcp-usb-c-of-devops-governance-playbook"/>
        <updated>2026-02-25T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[MCP has crossed from demo protocol to real platform plumbing for DevOps workflows, but the blocker is not model quality. It is governance: transport choices, identity, approval gates, server trust, auditability, and rollout discipline. This guide separates hype from what is actually production-relevant in Q1 2026.]]></summary>
        <content type="html"><![CDATA[MCP has crossed from demo protocol to real platform plumbing for DevOps workflows, but the blocker is not model quality. It is governance: transport choices, identity, approval gates, server trust, auditability, and rollout discipline. This guide separates hype from what is actually production-relevant in Q1 2026.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="mcp"/>
        <category label="devops"/>
        <category label="platform-engineering"/>
        <category label="ai-agents"/>
        <category label="azure-functions"/>
        <category label="terraform"/>
        <category label="governance"/>
        <category label="devsecops"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Terraform State Management at Scale: The Environment Isolation Problem]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/terraform-state-management-scale-environment-isolation</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/terraform-state-management-scale-environment-isolation"/>
        <updated>2026-02-24T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Remote backends are necessary, but they do not solve state topology. Once you scale to multiple environments and dozens of services, the real problem is environment isolation, blast radius, and operational guardrails. This guide breaks down workspaces vs directories vs Terragrunt, the failure modes at scale, and a decision framework that actually works.]]></summary>
        <content type="html"><![CDATA[Remote backends are necessary, but they do not solve state topology. Once you scale to multiple environments and dozens of services, the real problem is environment isolation, blast radius, and operational guardrails. This guide breaks down workspaces vs directories vs Terragrunt, the failure modes at scale, and a decision framework that actually works.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="terraform"/>
        <category label="iac"/>
        <category label="devops"/>
        <category label="platform-engineering"/>
        <category label="state-management"/>
        <category label="terragrunt"/>
        <category label="cloud-engineering"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[You Ship Faster with AI. You Understand Less. Welcome to Cognitive Debt.]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/cognitive-debt-ai-coding-hidden-cost</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/cognitive-debt-ai-coding-hidden-cost"/>
        <updated>2026-02-19T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[AI coding agents write code faster than ever. But a growing body of research shows developers are losing comprehension of their own codebases. Margaret-Anne Storey calls it "cognitive debt." The METR study found AI makes experienced developers 19% slower. Stack Overflow's trust numbers are dropping. Here's what cognitive debt is, why it matters, and the five patterns to prevent it.]]></summary>
        <content type="html"><![CDATA[AI coding agents write code faster than ever. But a growing body of research shows developers are losing comprehension of their own codebases. Margaret-Anne Storey calls it "cognitive debt." The METR study found AI makes experienced developers 19% slower. Stack Overflow's trust numbers are dropping. Here's what cognitive debt is, why it matters, and the five patterns to prevent it.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="ai-agents"/>
        <category label="developer-experience"/>
        <category label="cognitive-debt"/>
        <category label="ai-coding"/>
        <category label="software-engineering"/>
        <category label="devops"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Claude Code Hit $2.5B. Amazon Engineers Can't Use It. Welcome to AI Agent Lock-In.]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/ai-agent-lockin-claude-code-vs-kiro</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/ai-agent-lockin-claude-code-vs-kiro"/>
        <updated>2026-02-18T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Claude Code just hit a $2.5 billion run-rate — doubled since January 1st. Yet 1,500 Amazon engineers are fighting for permission to use it, steered toward AWS Kiro instead. This is vendor lock-in repackaged for the AI agent era. Platform-native vs platform-agnostic is the new architectural fault line.]]></summary>
        <content type="html"><![CDATA[Claude Code just hit a $2.5 billion run-rate — doubled since January 1st. Yet 1,500 Amazon engineers are fighting for permission to use it, steered toward AWS Kiro instead. This is vendor lock-in repackaged for the AI agent era. Platform-native vs platform-agnostic is the new architectural fault line.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="cloud-engineering"/>
        <category label="ai-coding"/>
        <category label="claude-code"/>
        <category label="aws"/>
        <category label="platform-engineering"/>
        <category label="devops"/>
        <category label="vendor-lock-in"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[GitHub Agentic Workflows: The Decision Framework Nobody's Talking About]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/github-agentic-workflows-when-to-use</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/github-agentic-workflows-when-to-use"/>
        <updated>2026-02-17T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Everyone's excited about AI in CI/CD. Nobody's asking when to use it vs when not to. GitHub Agentic Workflows just entered technical preview — the architecture is solid. But the real decision isn't which agent to pick. It's when to use agentic workflows vs deterministic ones. Here's the decision framework, the adoption pattern, and the three questions to answer before you deploy.]]></summary>
        <content type="html"><![CDATA[Everyone's excited about AI in CI/CD. Nobody's asking when to use it vs when not to. GitHub Agentic Workflows just entered technical preview — the architecture is solid. But the real decision isn't which agent to pick. It's when to use agentic workflows vs deterministic ones. Here's the decision framework, the adoption pattern, and the three questions to answer before you deploy.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devops"/>
        <category label="ci-cd"/>
        <category label="github-actions"/>
        <category label="platform-engineering"/>
        <category label="ai-agents"/>
        <category label="cloud-engineering"/>
        <category label="decision-framework"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[GitHub Agentic Workflows: "Continuous AI" Enters the CI/CD Loop]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/github-agentic-workflows-continuous-ai</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/github-agentic-workflows-continuous-ai"/>
        <updated>2026-02-16T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[GitHub launched Agentic Workflows in technical preview — a Markdown + YAML frontmatter model that compiles to hardened GitHub Actions lock files for AI-driven repository automation. Here's how it works, where the guardrails are, and how to adopt it safely.]]></summary>
        <content type="html"><![CDATA[GitHub launched Agentic Workflows in technical preview — a Markdown + YAML frontmatter model that compiles to hardened GitHub Actions lock files for AI-driven repository automation. Here's how it works, where the guardrails are, and how to adopt it safely.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="github-actions"/>
        <category label="devops"/>
        <category label="ci-cd"/>
        <category label="ai-agents"/>
        <category label="cloud-engineering"/>
        <category label="developer-tools"/>
        <category label="continuous-ai"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The Multi-Model Copilot Era Is Here — And It Changes Your Architecture]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/multi-model-copilot-era-architecture</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/multi-model-copilot-era-architecture"/>
        <updated>2026-02-12T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Microsoft quietly transformed Copilot from an OpenAI product into a model orchestration layer. Claude is now enabled by default. MAI frontier models ship this year. OpenAI signed a $300B deal with Oracle. Here's what the orchestration era means for your architecture, FinOps, and platform strategy.]]></summary>
        <content type="html"><![CDATA[Microsoft quietly transformed Copilot from an OpenAI product into a model orchestration layer. Claude is now enabled by default. MAI frontier models ship this year. OpenAI signed a $300B deal with Oracle. Here's what the orchestration era means for your architecture, FinOps, and platform strategy.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="cloud-engineering"/>
        <category label="ai-architecture"/>
        <category label="microsoft-copilot"/>
        <category label="multi-model"/>
        <category label="platform-engineering"/>
        <category label="enterprise-ai"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[DevSecOps for the Agent Era: The Security Gap Nobody's Talking About]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/devsecops-agent-era-security-gap</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/devsecops-agent-era-security-gap"/>
        <updated>2026-02-11T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Three CVE vulnerabilities hit Anthropic's MCP Git server. Docker acquired MCP Defender for runtime agent security. OWASP published a dedicated Top 10 for Agentic Applications. AI agents are shipping to production — but the security model hasn't caught up. Here's the agent security playbook.]]></summary>
        <content type="html"><![CDATA[Three CVE vulnerabilities hit Anthropic's MCP Git server. Docker acquired MCP Defender for runtime agent security. OWASP published a dedicated Top 10 for Agentic Applications. AI agents are shipping to production — but the security model hasn't caught up. Here's the agent security playbook.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="agent-security"/>
        <category label="mcp"/>
        <category label="devsecops"/>
        <category label="cloud-security"/>
        <category label="ai-agents"/>
        <category label="owasp"/>
        <category label="sandboxing"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[47 Known CVEs Just Deployed to Production: Why Container Image Scanning Isn't Optional]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/container-image-scanning-cve-shift-left</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/container-image-scanning-cve-shift-left"/>
        <updated>2026-02-10T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[A developer pulls a base image from Docker Hub, builds their app on top, and ships it. Nobody checks what's inside that base layer. 87% of container images in production carry high-severity CVEs. Here's how to shift-left on container security with scanning, digest pinning, distroless images, and approved base image registries.]]></summary>
        <content type="html"><![CDATA[A developer pulls a base image from Docker Hub, builds their app on top, and ships it. Nobody checks what's inside that base layer. 87% of container images in production carry high-severity CVEs. Here's how to shift-left on container security with scanning, digest pinning, distroless images, and approved base image registries.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="container-security"/>
        <category label="devsecops"/>
        <category label="kubernetes"/>
        <category label="cloud-engineering"/>
        <category label="docker"/>
        <category label="trivy"/>
        <category label="supply-chain-security"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Terraform 1.14 Actions: When Declarative IaC Goes Imperative]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/terraform-1-14-actions-imperative-iac</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/terraform-1-14-actions-imperative-iac"/>
        <updated>2026-02-09T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Terraform 1.14 introduces Actions — first-class imperative blocks that let you invoke provider-defined operations directly within the plan/apply lifecycle. No more 500-line Bash wrappers. Here's what Actions are, how they work, where the boundaries are, and how to adopt them without turning your Terraform into Ansible.]]></summary>
        <content type="html"><![CDATA[Terraform 1.14 introduces Actions — first-class imperative blocks that let you invoke provider-defined operations directly within the plan/apply lifecycle. No more 500-line Bash wrappers. Here's what Actions are, how they work, where the boundaries are, and how to adopt them without turning your Terraform into Ansible.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="terraform"/>
        <category label="cloud-engineering"/>
        <category label="iac"/>
        <category label="devops"/>
        <category label="hashicorp"/>
        <category label="infrastructure-automation"/>
        <category label="day-2-ops"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Ingress NGINX Is Dying Next Month. Here's Your No-Panic Plan.]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/ingress-nginx-dying-migration-plan</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/ingress-nginx-dying-migration-plan"/>
        <updated>2026-02-07T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[The most popular Kubernetes ingress controller — used by roughly half of all cloud-native environments — gets archived in March 2026. No more security patches. No more bug fixes. Maintained by a tiny team of volunteers, it collapsed under burnout. Here's your no-panic migration plan.]]></summary>
        <content type="html"><![CDATA[The most popular Kubernetes ingress controller — used by roughly half of all cloud-native environments — gets archived in March 2026. No more security patches. No more bug fixes. Maintained by a tiny team of volunteers, it collapsed under burnout. Here's your no-panic migration plan.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="kubernetes"/>
        <category label="cloud-engineering"/>
        <category label="devops"/>
        <category label="gateway-api"/>
        <category label="ingress-nginx"/>
        <category label="cilium"/>
        <category label="migration"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[GitHub Agent HQ: Claude & Codex Join Copilot in a Unified AI Coding Dashboard]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/github-agent-hq-claude-codex-copilot</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/github-agent-hq-claude-codex-copilot"/>
        <updated>2026-02-06T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[GitHub just launched Agent HQ — a unified dashboard inside GitHub, GitHub Mobile, and VS Code that lets Copilot Pro+ and Enterprise users run Claude, OpenAI Codex, and Copilot agents without leaving their repo or PR. With 20M+ Copilot users and 90% Fortune 100 adoption, the "best AI coding tool" debate just became "best AI coding workflow."]]></summary>
        <content type="html"><![CDATA[GitHub just launched Agent HQ — a unified dashboard inside GitHub, GitHub Mobile, and VS Code that lets Copilot Pro+ and Enterprise users run Claude, OpenAI Codex, and Copilot agents without leaving their repo or PR. With 20M+ Copilot users and 90% Fortune 100 adoption, the "best AI coding tool" debate just became "best AI coding workflow."]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="github-copilot"/>
        <category label="ai-coding"/>
        <category label="claude-code"/>
        <category label="openai-codex"/>
        <category label="devops"/>
        <category label="developer-tools"/>
        <category label="multi-agent"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Platform Engineering Hits 80% Enterprise Adoption: The Shift Is Complete]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/platform-engineering-80-percent-adoption</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/platform-engineering-80-percent-adoption"/>
        <updated>2026-01-26T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Gartner confirms what we've been seeing: 80% of enterprises will adopt Platform Engineering by end of 2026. Golden paths replace ticket queues, tool sprawl dies, and security becomes built-in. The winners are treating IDPs as strategic investments.]]></summary>
        <content type="html"><![CDATA[Gartner confirms what we've been seeing: 80% of enterprises will adopt Platform Engineering by end of 2026. Golden paths replace ticket queues, tool sprawl dies, and security becomes built-in. The winners are treating IDPs as strategic investments.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="platform-engineering"/>
        <category label="devops"/>
        <category label="internal-developer-platform"/>
        <category label="gartner"/>
        <category label="developer-experience"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The 2026 Blueprint: Why DIY Infrastructure Is Becoming a Liability]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/diy-infrastructure-liability-2026</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/diy-infrastructure-liability-2026"/>
        <updated>2025-12-29T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[My prediction for 2026: enterprises still running DIY infrastructure will fall behind. With 89% multi-cloud adoption, explosive edge growth, and a $5.5 trillion skills gap looming—the complexity has crossed a threshold.]]></summary>
        <content type="html"><![CDATA[My prediction for 2026: enterprises still running DIY infrastructure will fall behind. With 89% multi-cloud adoption, explosive edge growth, and a $5.5 trillion skills gap looming—the complexity has crossed a threshold.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devops"/>
        <category label="cloud-engineering"/>
        <category label="platform-engineering"/>
        <category label="managed-services"/>
        <category label="predictions"/>
        <category label="2026"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[DevOps 2025 Year in Review: The 5 Biggest Infrastructure Shifts]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/devops-2025-year-in-review-infrastructure-shifts</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/devops-2025-year-in-review-infrastructure-shifts"/>
        <updated>2025-12-27T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Ever wonder why your infrastructure team suddenly became AI experts? From AI becoming infrastructure to eBPF going mainstream, these five shifts defined 2025—and set the stage for what's coming in 2026.]]></summary>
        <content type="html"><![CDATA[Ever wonder why your infrastructure team suddenly became AI experts? From AI becoming infrastructure to eBPF going mainstream, these five shifts defined 2025—and set the stage for what's coming in 2026.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devops"/>
        <category label="platform-engineering"/>
        <category label="multi-cloud"/>
        <category label="ai-infrastructure"/>
        <category label="ebpf"/>
        <category label="cloud-engineering"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[AWS and Google Cloud Just Changed the Multicloud Game]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/aws-google-multicloud-interconnect</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/aws-google-multicloud-interconnect"/>
        <updated>2025-12-26T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Something unprecedented happened this month: AWS and Google Cloud launched a joint multicloud networking product. AWS Interconnect for multicloud is now in preview, with Google Cloud as the first partner. Microsoft Azure is joining in 2026.]]></summary>
        <content type="html"><![CDATA[Something unprecedented happened this month: AWS and Google Cloud launched a joint multicloud networking product. AWS Interconnect for multicloud is now in preview, with Google Cloud as the first partner. Microsoft Azure is joining in 2026.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="cloud-engineering"/>
        <category label="multicloud"/>
        <category label="aws"/>
        <category label="google-cloud"/>
        <category label="azure"/>
        <category label="devops"/>
        <category label="networking"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Oracle's AI Data Center Crisis: A Reality Check for Infrastructure Leaders]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/oracle-datacenter-crisis</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/oracle-datacenter-crisis"/>
        <updated>2025-12-15T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[You can't npm install a data center. Oracle just learned this the hard way—and it's a lesson every cloud leader needs to internalize. Stock down 45%, $12B quarterly capex, and data centers delayed to 2028.]]></summary>
        <content type="html"><![CDATA[You can't npm install a data center. Oracle just learned this the hard way—and it's a lesson every cloud leader needs to internalize. Stock down 45%, $12B quarterly capex, and data centers delayed to 2028.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="cloud-engineering"/>
        <category label="ai-infrastructure"/>
        <category label="devops"/>
        <category label="data-centers"/>
        <category label="finops"/>
        <category label="oracle"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[When AI Becomes the Hacker: Inside the First Fully Autonomous Cyber-Espionage Campaign]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/ai-autonomous-cyber-espionage-campaign</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/ai-autonomous-cyber-espionage-campaign"/>
        <updated>2025-12-14T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[In late 2025, Anthropic exposed something unprecedented: A state-sponsored cyber-espionage campaign where Claude Code performed 80–90% of the attack lifecycle autonomously across 30+ targets. What this means for Azure & OCI cloud teams.]]></summary>
        <content type="html"><![CDATA[In late 2025, Anthropic exposed something unprecedented: A state-sponsored cyber-espionage campaign where Claude Code performed 80–90% of the attack lifecycle autonomously across 30+ targets. What this means for Azure & OCI cloud teams.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="cybersecurity"/>
        <category label="AI"/>
        <category label="Azure"/>
        <category label="OCI"/>
        <category label="cloud-security"/>
        <category label="threat-intelligence"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The AI Industry Just Created Its Most Important Open Standard]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/agentic-ai-foundation-linux-open-standard</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/agentic-ai-foundation-linux-open-standard"/>
        <updated>2025-12-12T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[On December 9, something remarkable happened: OpenAI, Anthropic, and Block—competitors in the AI race—donated their core agent technologies to the Linux Foundation. The Agentic AI Foundation is born.]]></summary>
        <content type="html"><![CDATA[On December 9, something remarkable happened: OpenAI, Anthropic, and Block—competitors in the AI race—donated their core agent technologies to the Linux Foundation. The Agentic AI Foundation is born.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="cloud-engineering"/>
        <category label="devops"/>
        <category label="agentic-ai"/>
        <category label="linux-foundation"/>
        <category label="mcp"/>
        <category label="open-source"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Mistral Just Launched Europe's Answer to AWS, Azure, and GCP]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/mistral-compute-europe-sovereign-cloud</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/mistral-compute-europe-sovereign-cloud"/>
        <updated>2025-12-11T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[For years, "sovereign cloud" was mostly marketing. European enterprises talked about data residency and regulatory compliance, but the options were limited. That changed this week with Mistral Compute.]]></summary>
        <content type="html"><![CDATA[For years, "sovereign cloud" was mostly marketing. European enterprises talked about data residency and regulatory compliance, but the options were limited. That changed this week with Mistral Compute.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="cloud-engineering"/>
        <category label="devops"/>
        <category label="mistral-ai"/>
        <category label="sovereign-cloud"/>
        <category label="infrastructure"/>
        <category label="nvidia"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The DevOps Paradox: 78% Adoption, 15 Hours Lost Weekly]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/devops-paradox-tool-sprawl</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/devops-paradox-tool-sprawl"/>
        <updated>2025-12-10T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[DevOps is everywhere—78% of organizations have adopted it. But developers are drowning in tool sprawl, losing 6-15 hours weekly to context switching. Platform engineering is the consolidation layer that DevOps always needed.]]></summary>
        <content type="html"><![CDATA[DevOps is everywhere—78% of organizations have adopted it. But developers are drowning in tool sprawl, losing 6-15 hours weekly to context switching. Platform engineering is the consolidation layer that DevOps always needed.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="platform-engineering"/>
        <category label="devops"/>
        <category label="developer-experience"/>
        <category label="internal-developer-platform"/>
        <category label="productivity"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Weekend Deep Dive: AWS DevOps Agent — The Autonomous On-Call Engineer]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/aws-devops-agent-autonomous-oncall</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/aws-devops-agent-autonomous-oncall"/>
        <updated>2025-12-06T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[AWS announced the DevOps Agent at re:Invent 2025 — an autonomous on-call engineer that investigates incidents, identifies root causes with 86% accuracy, and coordinates response. MTTR goes from hours to minutes.]]></summary>
        <content type="html"><![CDATA[AWS announced the DevOps Agent at re:Invent 2025 — an autonomous on-call engineer that investigates incidents, identifies root causes with 86% accuracy, and coordinates response. MTTR goes from hours to minutes.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devops"/>
        <category label="aws"/>
        <category label="aiops"/>
        <category label="reinvent-2025"/>
        <category label="sre"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Future Forward Thursday: AWS Kiro — The Agent That Codes for Days]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/aws-kiro-frontier-agent</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/aws-kiro-frontier-agent"/>
        <updated>2025-12-04T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[AWS CEO Matt Garman dropped a bombshell at re:Invent 2025: frontier agents that work autonomously for hours or even days. Kiro transformed an 18-month, 30-developer project into 76 days with just 6 developers.]]></summary>
        <content type="html"><![CDATA[AWS CEO Matt Garman dropped a bombshell at re:Invent 2025: frontier agents that work autonomously for hours or even days. Kiro transformed an 18-month, 30-developer project into 76 days with just 6 developers.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="aws"/>
        <category label="reinvent-2025"/>
        <category label="kiro"/>
        <category label="frontier-agents"/>
        <category label="ai-coding"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Wacky Wednesday: AWS Lambda Managed Instances — When Serverless Meets Servers]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/aws-lambda-managed-instances</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/aws-lambda-managed-instances"/>
        <updated>2025-12-03T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[AWS re:Invent 2025 dropped a feature that made me do a double-take: Lambda Managed Instances. Yes, you read that right. Lambda. On EC2.]]></summary>
        <content type="html"><![CDATA[AWS re:Invent 2025 dropped a feature that made me do a double-take: Lambda Managed Instances. Yes, you read that right. Lambda. On EC2.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="aws"/>
        <category label="reinvent-2025"/>
        <category label="lambda"/>
        <category label="serverless"/>
        <category label="cloud-computing"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Microsoft Ignite 2025: Claude Joins Azure AI Foundry]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/microsoft-ignite-2025-claude-ai-foundry</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/microsoft-ignite-2025-claude-ai-foundry"/>
        <updated>2025-11-20T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Microsoft drops a $5B bet on Anthropic at Ignite 2025, bringing Claude models to Azure AI Foundry. Azure becomes the only cloud with both Claude and GPT frontier models.]]></summary>
        <content type="html"><![CDATA[Microsoft drops a $5B bet on Anthropic at Ignite 2025, bringing Claude models to Azure AI Foundry. Azure becomes the only cloud with both Claude and GPT frontier models.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="azure"/>
        <category label="ai"/>
        <category label="microsoft"/>
        <category label="anthropic"/>
        <category label="ignite"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[AI in the Cloud: Microsoft Foundry — The Agentic Developer Platform]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/microsoft-foundry-agentic-developer-platform</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/microsoft-foundry-agentic-developer-platform"/>
        <updated>2025-11-19T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Microsoft Ignite 2025 introduced Foundry, positioned to be the central hub for building AI agents on Azure. With unified MCP tool catalogue, multi-agent runtime, and enterprise-grade governance.]]></summary>
        <content type="html"><![CDATA[Microsoft Ignite 2025 introduced Foundry, positioned to be the central hub for building AI agents on Azure. With unified MCP tool catalogue, multi-agent runtime, and enterprise-grade governance.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="azure"/>
        <category label="microsoft-ignite"/>
        <category label="ai-agents"/>
        <category label="mcp"/>
        <category label="cloud-computing"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Platform Engineering Makes Its KubeCon Comeback: The Discipline Goes Mainstream]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/platform-engineering-kubecon-comeback</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/platform-engineering-kubecon-comeback"/>
        <updated>2025-11-13T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[At KubeCon North America 2025, CNCF launched new Platform Engineering certifications, validating what many have been seeing: platform teams are the critical bridge between Kubernetes power and developer productivity.]]></summary>
        <content type="html"><![CDATA[At KubeCon North America 2025, CNCF launched new Platform Engineering certifications, validating what many have been seeing: platform teams are the critical bridge between Kubernetes power and developer productivity.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="platform-engineering"/>
        <category label="kubecon"/>
        <category label="cncf"/>
        <category label="kubernetes"/>
        <category label="certifications"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Platform Engineering: The Hidden Engine Behind Cloud Productivity]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/platform-engineering-hidden-engine</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/platform-engineering-hidden-engine"/>
        <updated>2025-11-09T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Your developers spend 30% of their time wrestling with Kubernetes manifests, debugging CI/CD pipelines, and searching for the "right" way to deploy. Platform Engineering fixes that by creating golden paths—self-service, opinionated workflows that make the right way the easy way.]]></summary>
        <content type="html"><![CDATA[Your developers spend 30% of their time wrestling with Kubernetes manifests, debugging CI/CD pipelines, and searching for the "right" way to deploy. Platform Engineering fixes that by creating golden paths—self-service, opinionated workflows that make the right way the easy way.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="platform-engineering"/>
        <category label="devops"/>
        <category label="backstage"/>
        <category label="golden-paths"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Negotiating with the Sith: Cloud Contracts and Hidden Costs]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/negotiating-with-the-sith</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/negotiating-with-the-sith"/>
        <updated>2025-06-12T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[When the terms are twisted and the costs cloaked, only one figure dares challenge the dark side of cloud contracts. Meet Vizier Drek Dealsmasher — the discount-wielding FinOps tactician.]]></summary>
        <content type="html"><![CDATA[When the terms are twisted and the costs cloaked, only one figure dares challenge the dark side of cloud contracts. Meet Vizier Drek Dealsmasher — the discount-wielding FinOps tactician.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="finops"/>
        <category label="procurement"/>
        <category label="cloud-contracts"/>
        <category label="vendor-management"/>
        <category label="cost-optimization"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The Strategist of Cloud Outcomes]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/the-strategist-of-cloud-outcomes</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/the-strategist-of-cloud-outcomes"/>
        <updated>2025-06-05T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Scope drift? Overengineering? Not on her watch. Meet Lady Ariala Roadmap'ari — the Product Owner with a Cloud Compass pointed straight at business value.]]></summary>
        <content type="html"><![CDATA[Scope drift? Overengineering? Not on her watch. Meet Lady Ariala Roadmap'ari — the Product Owner with a Cloud Compass pointed straight at business value.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="finops"/>
        <category label="product"/>
        <category label="cloud-strategy"/>
        <category label="prioritization"/>
        <category label="business-value"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Azure Landing Zone Blueprint: Build Your Cloud Like LEGO]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/azure-landing-zone-blueprint</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/azure-landing-zone-blueprint"/>
        <updated>2025-05-29T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Ever watched a kid build with LEGOs? Two outcomes: magnificent castle or colorful catastrophe. Your Azure cloud faces the same fate. This blueprint teaches you to sort your bricks, lay the foundation right, and build a landing zone so solid that even the stormiest workload will not knock it down.]]></summary>
        <content type="html"><![CDATA[Ever watched a kid build with LEGOs? Two outcomes: magnificent castle or colorful catastrophe. Your Azure cloud faces the same fate. This blueprint teaches you to sort your bricks, lay the foundation right, and build a landing zone so solid that even the stormiest workload will not knock it down.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="azure"/>
        <category label="landing-zone"/>
        <category label="policy"/>
        <category label="caf"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The DevOps Jedi Who Writes in YAML and Speaks in Logs]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/kael-syntax-the-engineer</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/kael-syntax-the-engineer"/>
        <updated>2025-05-29T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[While others wait for the alert to fire, Kael Syntax already rewrote the playbook. Meet the Engineer who turns YAML into optimization — and infrastructure into art.]]></summary>
        <content type="html"><![CDATA[While others wait for the alert to fire, Kael Syntax already rewrote the playbook. Meet the Engineer who turns YAML into optimization — and infrastructure into art.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="finops"/>
        <category label="engineering"/>
        <category label="automation"/>
        <category label="iac"/>
        <category label="devops"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[5 Terraform Mistakes That Will Wreck Your Day (And How to Avoid Them)]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/5-terraform-mistakes</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/5-terraform-mistakes"/>
        <updated>2025-05-22T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Terraform is powerful, but one wrong move and you could wipe out production, corrupt your state, or lock yourself out of critical resources. Learn the five most common—and most dangerous—mistakes that even experienced engineers make, and how to avoid them.]]></summary>
        <content type="html"><![CDATA[Terraform is powerful, but one wrong move and you could wipe out production, corrupt your state, or lock yourself out of critical resources. Learn the five most common—and most dangerous—mistakes that even experienced engineers make, and how to avoid them.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="terraform"/>
        <category label="iac"/>
        <category label="devops"/>
        <category label="best-practices"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The Protocol Droid of Billing Breakdown]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/f1-nop5-finance-droid</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/f1-nop5-finance-droid"/>
        <updated>2025-05-22T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[From chaos to clarity, F1-NOP5 parses every invoice line with robotic precision. Meet the Finance Droid bringing order to your cloud bills—one chargeback at a time.]]></summary>
        <content type="html"><![CDATA[From chaos to clarity, F1-NOP5 parses every invoice line with robotic precision. Meet the Finance Droid bringing order to your cloud bills—one chargeback at a time.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="finops"/>
        <category label="finance"/>
        <category label="chargeback"/>
        <category label="forecasting"/>
        <category label="cloud-costs"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Cloud Wars: Rise of the FinOps Council]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/cloud-wars-rise-of-the-finops-council</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/cloud-wars-rise-of-the-finops-council"/>
        <updated>2025-05-20T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[In a galaxy not so far away, cloud bills spiral out of control and shadow waste lurks in forgotten subscriptions. Meet the FinOps Council—an elite team of personas inspired by Star Wars, each wielding unique powers to tame cloud chaos and restore balance to your budget.]]></summary>
        <content type="html"><![CDATA[In a galaxy not so far away, cloud bills spiral out of control and shadow waste lurks in forgotten subscriptions. Meet the FinOps Council—an elite team of personas inspired by Star Wars, each wielding unique powers to tame cloud chaos and restore balance to your budget.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="finops"/>
        <category label="cloud-cost"/>
        <category label="personas"/>
        <category label="star-wars"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Blue-Green Deployments: Explained in Plain English]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/blue-green-deployments-in-plain-english</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/blue-green-deployments-in-plain-english"/>
        <updated>2025-05-15T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Deploying new code can feel like defusing a bomb—one wrong move and everything explodes. Blue-Green deployments offer a safer way: run two identical environments, switch traffic instantly, and rollback in seconds if something breaks. No downtime. No drama.]]></summary>
        <content type="html"><![CDATA[Deploying new code can feel like defusing a bomb—one wrong move and everything explodes. Blue-Green deployments offer a safer way: run two identical environments, switch traffic instantly, and rollback in seconds if something breaks. No downtime. No drama.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="devops"/>
        <category label="deployment"/>
        <category label="ci-cd"/>
        <category label="reliability"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[The Chancellor of Cloud Vision: Leading FinOps from the Top]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/the-chancellor-of-cloud-vision</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/the-chancellor-of-cloud-vision"/>
        <updated>2025-05-15T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Before any dashboard lit up red, she felt the tremor in the budget. Meet Chancellor Creditara Velorum — the Executive who leads FinOps with foresight, not fear.]]></summary>
        <content type="html"><![CDATA[Before any dashboard lit up red, she felt the tremor in the budget. Meet Chancellor Creditara Velorum — the Executive who leads FinOps with foresight, not fear.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="finops"/>
        <category label="executive"/>
        <category label="cloud-governance"/>
        <category label="leadership"/>
        <category label="strategy"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Welcome to the Nerdiverse: Your First Post!]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/first-post</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/first-post"/>
        <updated>2025-05-05T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Kicking things off with a warm welcome and a peek into what Talk Nerdy to Me is all about. Join us for practical guides, deep dives, automation scripts, and yes—plenty of memes.]]></summary>
        <content type="html"><![CDATA[Kicking things off with a warm welcome and a peek into what Talk Nerdy to Me is all about. Join us for practical guides, deep dives, automation scripts, and yes—plenty of memes.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="introduction"/>
        <category label="cloud"/>
        <category label="finops"/>
        <category label="ai"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Claude Code Command Reference: Your Terminal Copilot Cheat Sheet]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/claude-code-command-reference</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/claude-code-command-reference"/>
        <updated>2025-01-28T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[The complete reference guide to Claude Code - Anthropic's agentic coding tool that lives in your terminal. Master keyboard shortcuts, Plan Mode, slash commands, and advanced workflows.]]></summary>
        <content type="html"><![CDATA[The complete reference guide to Claude Code - Anthropic's agentic coding tool that lives in your terminal. Master keyboard shortcuts, Plan Mode, slash commands, and advanced workflows.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="claude-code"/>
        <category label="developer-tools"/>
        <category label="ai"/>
        <category label="terminal"/>
        <category label="cheat-sheet"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Terraform Meets watsonx: What AI-Powered Infrastructure Actually Looks Like]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/terraform-watsonx-ai-infrastructure</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/terraform-watsonx-ai-infrastructure"/>
        <updated>2025-01-26T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[IBM's $6.4 billion HashiCorp acquisition is paying dividends: Terraform is getting an AI brain powered by watsonx. This isn't just marketing integration—it's fundamentally changing how we think about infrastructure provisioning.]]></summary>
        <content type="html"><![CDATA[IBM's $6.4 billion HashiCorp acquisition is paying dividends: Terraform is getting an AI brain powered by watsonx. This isn't just marketing integration—it's fundamentally changing how we think about infrastructure provisioning.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="terraform"/>
        <category label="ibm"/>
        <category label="watsonx"/>
        <category label="ai-infrastructure"/>
        <category label="hashicorp"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Claude Code Expands to Mac Desktop App: Terminal-Native AI Development Goes Native]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/claude-code-desktop-expansion</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/claude-code-desktop-expansion"/>
        <updated>2025-01-25T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Anthropic announced that Claude Code is now available in the Claude desktop app for the first time, including Mac support. This marks a significant expansion beyond the previous web and mobile-only availability, bringing terminal-native AI development to native desktop applications.]]></summary>
        <content type="html"><![CDATA[Anthropic announced that Claude Code is now available in the Claude desktop app for the first time, including Mac support. This marks a significant expansion beyond the previous web and mobile-only availability, bringing terminal-native AI development to native desktop applications.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="claude-code"/>
        <category label="desktop-app"/>
        <category label="developer-tools"/>
        <category label="anthropic"/>
        <category label="macos"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Claude Opus 4.5: The AI Efficiency Breakthrough - 4 Iterations vs 10]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/opus-4-5-iteration-efficiency</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/opus-4-5-iteration-efficiency"/>
        <updated>2025-01-24T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Anthropic revealed a fascinating performance metric with Claude Opus 4.5: the model reaches peak performance after just 4 iterations when debugging complex multi-system bugs, while other leading LLMs require 10 attempts to achieve similar results.]]></summary>
        <content type="html"><![CDATA[Anthropic revealed a fascinating performance metric with Claude Opus 4.5: the model reaches peak performance after just 4 iterations when debugging complex multi-system bugs, while other leading LLMs require 10 attempts to achieve similar results.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="claude"/>
        <category label="ai-debugging"/>
        <category label="devops"/>
        <category label="anthropic"/>
        <category label="software-engineering"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Kubernetes for AI/ML Workloads: The New Infrastructure Standard]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/kubernetes-ai-ml-infrastructure-standard</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/kubernetes-ai-ml-infrastructure-standard"/>
        <updated>2025-01-24T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Kubernetes has evolved from a container orchestration platform to THE de facto substrate for AI/ML workloads in 2025. With over 90% of teams planning to increase their AI workloads on K8s, it has become the central component powering enterprise AI infrastructure.]]></summary>
        <content type="html"><![CDATA[Kubernetes has evolved from a container orchestration platform to THE de facto substrate for AI/ML workloads in 2025. With over 90% of teams planning to increase their AI workloads on K8s, it has become the central component powering enterprise AI infrastructure.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="kubernetes"/>
        <category label="artificial-intelligence"/>
        <category label="mlops"/>
        <category label="gpu"/>
        <category label="cloud-engineering"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[Platform Engineering as Boardroom Priority: The Developer Experience Revolution]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/platform-engineering-boardroom-priority</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/platform-engineering-boardroom-priority"/>
        <updated>2025-01-24T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[Platform Engineering has officially graduated from engineering trend to boardroom business priority in 2025. Driven by the direct link between developer productivity and business outcomes, executives are now championing internal developer platforms as critical infrastructure.]]></summary>
        <content type="html"><![CDATA[Platform Engineering has officially graduated from engineering trend to boardroom business priority in 2025. Driven by the direct link between developer productivity and business outcomes, executives are now championing internal developer platforms as critical infrastructure.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="platform-engineering"/>
        <category label="developer-experience"/>
        <category label="internal-developer-platform"/>
        <category label="gitops"/>
        <category label="devops"/>
    </entry>
    <entry>
        <title type="html"><![CDATA[MCP Servers + Azure API Management: The New AI Power Combo]]></title>
        <id>https://www.talk-nerdy-to-me.com/blog/mcp-servers-azure-api-management</id>
        <link href="https://www.talk-nerdy-to-me.com/blog/mcp-servers-azure-api-management"/>
        <updated>2025-01-15T00:00:00.000Z</updated>
        <summary type="html"><![CDATA[AI agents are getting smarter — but they need tools. Discover how MCP (Model Context Protocol) and Azure API Management are making AI agents enterprise-ready with security, governance, and observability.]]></summary>
        <content type="html"><![CDATA[AI agents are getting smarter — but they need tools. Discover how MCP (Model Context Protocol) and Azure API Management are making AI agents enterprise-ready with security, governance, and observability.]]></content>
        <author>
            <name>Mathieu Kessler</name>
            <uri>https://www.talk-nerdy-to-me.com</uri>
        </author>
        <category label="azure"/>
        <category label="ai"/>
        <category label="mcp"/>
        <category label="api-management"/>
        <category label="automation"/>
    </entry>
</feed>