Atlassian's August 2026 AI data collection policy will force metadata extraction from 300

GitLab has released Duo Agent Platform 18.8 with seven AI agents that automate software engineering tasks across the entire SDLC. The platform includes Planner and Security Analyst agents with multi-step reasoning capabilities, enabling AI orchestration with traceability and policy controls for enterprise compliance requirements. This positions GitLab as an AI orchestration plane where humans and agents share responsibility for delivery.

Starting August 17, 2026, Atlassian will collect customer metadata and in-app data from Jira and Confluence to train AI models. Free and Standard tier customers cannot opt out of metadata collection, while Enterprise customers retain full opt-out control. This policy affects approximately 300,000 global customers and represents a significant shift in data governance for DevOps tooling.

Microsoft's May 2026 security updates address 265 CVEs including critical vulnerabilities affecting Azure DevOps, SharePoint, and cloud services. The updates impact Azure services, authentication platforms, and business applications with potential for remote code execution and privilege escalation. Organizations should prioritize immediate remediation across all impacted environments.

Microsoft's Azure DevOps integration with Bitbucket Cloud failed in April 2026 due to deprecated APIs (CHANGE-2770). Microsoft deployed a hotfix on April 8 to restore App Service Bitbucket integration, but pipeline configurations may require updates. Teams experienced brownouts before the full API removal, forcing some to consider moving away from Azure DevOps.

Atlassian published its May 19, 2026 Security Bulletin documenting 39 high-severity and 3 critical third-party vulnerabilities fixed in recent product releases. The bulletin covers Jira, Confluence, and other products with recommendations to upgrade to latest versions. Organizations should check the Vulnerability Disclosure Portal for their specific product versions.

AWS announced GA for DevOps Agent and Security Agent on April 6, 2026, after preview. DevOps Agent helps run cloud operations, investigate incidents, and prevent issues before they happen. Early customers like United Airlines and T-Mobile report up to 75% lower MTTR and 3-5x faster resolution times. AWS Security Agent brings continuous, context-aware penetration testing into the development lifecycle.

Microsoft disclosed two critical vulnerabilities in GitHub Copilot and Visual Studio Code on November 11, 2025. CVE-2025-62449 involves path-traversal handling in Copilot Chat Extension, while CVE-2025-62453 affects improper validation of AI output. Research shows 78% of AI-generated code contains exploitable security vulnerabilities, with 6.4% secret leakage rates in Copilot-enabled repositories.

Google Cloud Security Command Center announced new AI Protection capabilities in preview, including agentic workloads support for Gemini Enterprise Agent Platform and Model Context Protocol servers. The update includes Agent Platform Vulnerability Assessment, expanded threat detection for AI agents, and enhanced inventory filtering for agentic resources.