Daily Edition · Page 12

THE DAILY INDEX

Technology, AI, software, security, crypto and business

GENERAL

TLDR IT

AGENT UX: BUILDING DEVELOPER TOOLS FOR HUMANS AND THEIR CODING AGENTS

Modern developer tools must provide shared interfaces that humans, coding assistants, and APIs can operate simultaneously to avoid turning users into reverse centaurs. To address this, the Explosion team built Ellf, an agentic NLP development platform that generates matching UIs and CLIs from Python functions and type hints. Coding assistants have made self-hosted cluster architectures practical for more teams by helping with setup and debugging.

THE CIO'S NEW RECOVERY PROBLEM: KNOWING WHAT ‘GOOD' LOOKS LIKE

Enterprise technology complexity sprawl makes disaster recovery increasingly difficult by obscuring what a trustworthy system normal state looks like. CIOs need to treat inventory, dependency mapping, and governance as active recovery capabilities rather than documentation exercises. Furthermore, organizations should establish decision rights and conduct comprehensive organizational testing before incidents occur to ensure they can evaluate changes and dependencies under pressure.

ANNOUNCING AMAZON ECS GATEWAY, A MANAGED INGRESS SOLUTION FOR YOUR ECS SERVICES

Amazon ECS Gateway is a managed ingress solution that simplifies containerized application networking by dynamically provisioning and managing Application Load Balancers. The new service allows platform teams to define centralized networking standards for multiple clusters, while application teams can opt in without requiring networking expertise. ECS Gateway supports host-based routing, allows up to 25 services to share an ALB, and provides each service with a unique DNS hostname. It is available at no additional charge across all commercial AWS Regions.

FROM PHISHING TO LLMJACKING: THREAT ACTORS TARGETING CLOUD BILLING ACCOUNTS FOR LLM USAGE

Researchers report that threat actors are compromising privileged Google Cloud credentials via phishing campaigns to hijack cloud billing accounts for unauthorized mass AI execution, specifically targeting Gemini API resources. Attackers leverage excessive permissions, modify domain restriction policies, and link external, attacker-controlled projects to victim billing accounts to offload costs. Organizations face rapid financial surges reaching hundreds of thousands of dollars within days while prompt payloads remain hidden in foreign tenants.

TLDR IndexPage 12