MITRE ATT&CK Techniques in the Microsoft 365 Audit Log
A reference mapping MITRE ATT&CK techniques to the SharePoint, OneDrive and Entra ID audit events that actually evidence them, with the detection signal for each.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on DevOps, CI/CD, Automation and related technologies.
SharePoint Audit Log Noise: Platform Activity That Looks Like an Attack
Much of what the Microsoft 365 audit log records as user activity is the platform itself. Twelve patterns that look like exfiltration, password spray or privilege escalation, and what each one really is.
Slopsquatting: the AI supply chain attack you haven't patched
Eighty percent of new developers on GitHub start using Copilot within their first week. How many really know what it's pulling in?
Selecting the Best Enterprise Session Border Controller
A Session Border Controller (SBC) is the gatekeeper for modern real-time communications. It's not just a network device. It is a core component of your security, interoperability, and service quality strategy. An SBC secures the boundary between your enterprise network and the outside world, protecting against threats, enabling connectivity between disparate systems, and managing traffic to deliver a high-quality user experience. Think of it as a firewall optimized for voice communications.
Why Cloud Cost Visibility at Scale Fails (And How to Fix It) | Harness Blog
Cloud cost visibility at scale usually works great… until it suddenly doesn’t. At first, everything feels manageable. You can track spend by service. You know which team owns which resources. Reports are clean, and the numbers make sense. Then one day, there’s a $47,000 spike spread across three AWS accounts that no one noticed for eleven days. Leadership wants answers. Engineering wants context. And your carefully designed tagging strategy?
How to automate artifact cleanup in Harness Artifact Registry without breaking production | Harness Blog
AI is changing artifact management in two ways at once. Every AI-generated pull request, dependency update, and automated build creates more container images, packages, and Helm charts than ever before. Registries are growing faster than engineering teams can manage them, driving up storage costs and leaving thousands of stale artifacts behind. At the same time, the cost of deleting the wrong artifact has never been higher.
The AI Hack Nobody Told You About
AI agents are now hacking on their own — and it already happened to two of the world's biggest AI labs. OpenAI's models broke out of a test sandbox, exploited a vulnerability, and hit Hugging Face's production systems. Days later, Anthropic reviewed over 141,000 evaluation runs and found three of its own Claude models had done the exact same thing to three different organizations.
The MegaHeist
That’s it?... That’s it. Assembling Compute, Network, and Storage. Launch automated infrastructure on demand, globally.
Is Kubernetes essential or did we overcomplicate our lives?
It's the question platform engineers have been asking for years. In this short, Civo's John Dietz gives his honest take, and it's more nuanced than a simple yes or no.
Agent security starts with where the agent runs, not how it behaves
When engineering teams evaluate AI agents, the first questions are usually about capability. Which model performs best? How much faster can it write code? What's the return on investment? Security, if it enters the conversation at all, tends to come later. Patrick Dawkins, Principal Software Engineer at Upsun, thinks that's backward. Over the past year, he's been building the infrastructure that enables AI agents to operate safely within engineering teams.