https://theplatformradar.com/blogOne engineering story at a time, read from its primary source and explained for CTOs and platform leads. Drafted with AI, edited and approved by Mat Caniglia.enhttps://theplatformradar.com/blog/github-agentic-workflows-ga-security-controlshttps://theplatformradar.com/blog/github-agentic-workflows-ga-security-controlsFri, 30 Oct 2026 12:00:00 GMTGitHub Agentic Workflows went GA on October 28, 2026. The permissions, safe outputs, prompt injection risks and cost checks to set before any repo opts in.https://theplatformradar.com/blog/python-security-releases-emudhra-tarfilehttps://theplatformradar.com/blog/python-security-releases-emudhra-tarfileWed, 28 Oct 2026 12:00:00 GMTPython 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 block compromised eMudhra CA keys and fix a tarfile bypass. What it means for base images this week.https://theplatformradar.com/blog/rotate-static-vercel-ci-secrets-after-trivy-litellmhttps://theplatformradar.com/blog/rotate-static-vercel-ci-secrets-after-trivy-litellmMon, 26 Oct 2026 12:00:00 GMTMalicious Trivy and LiteLLM releases in March 2026 hunted CI secrets. Rotate the Vercel tokens, deploy hooks and bypass secrets your pipelines hold this week.https://theplatformradar.com/blog/ecs-gateway-vs-alb-ingresshttps://theplatformradar.com/blog/ecs-gateway-vs-alb-ingressFri, 23 Oct 2026 12:00:00 GMTECS Gateway shares ALBs and automates certs and DNS for ECS services. Here is who should migrate, what it saves, and the immutable settings that carry the risk.https://theplatformradar.com/blog/php-critical-rce-php2shell-patchhttps://theplatformradar.com/blog/php-critical-rce-php2shell-patchFri, 23 Oct 2026 12:00:00 GMTPHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two unauthenticated RCE flaws. Find PHP in hosts, images and vendor apps, then patch within the week.