Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

Kernel-Level Visibility Without Instrumentation: What eBPF Changes for Container Security

Containers have changed how applications are built and deployed, but they have also made security visibility more difficult. Workloads are short-lived, services communicate constantly, and application behavior is distributed across containers, nodes, APIs, processes, and open-source dependencies. This is why many security teams are pairing eBPF with application-level runtime security. eBPF observes activity from the Linux kernel without requiring teams to modify every application, while runtime application security explains which code caused that activity.

How the Vulnerability Management Lifecycle Runs from Discovery to Verified Fix

Who in your organization can say, without opening three separate systems, whether last month's critical findings are actually closed? A deployment record answers half of that. The other half needs a rescan, and the rescan often never happens. The vulnerability management lifecycle is that question written down as a repeatable process. It runs from knowing what you own through to proving a fix landed, and it restarts the moment it closes.

The New MCP Headers Are a Gift to Gateways

In short, buried in the transport section of the MCP 2026-07-28 release candidate are three changes that matter more to infrastructure teams than to anyone else: mandatory Mcp-Method and Mcp-Name headers, cache-control-style ttlMs and cacheScope fields, and standardized W3C Trace Context propagation. Together with the stateless core, they turn MCP from a protocol that gateways had to fight into one that meets them halfway.

Zero Day to Fix: Why Security Response Speed-Not Discovery-Is Your Real Bottleneck | Harness Blog

Here's the uncomfortable truth about the Mythos era: knowing about a vulnerability and being able to neutralize it are two entirely different problems. AI models like Mythos are finding vulnerabilities 10x faster than humans ever could. Project Glasswing participants discovered over 10,000 high and critical vulnerabilities in their applications. Firefox alone had 271 previously unknown zero-days exposed by Mythos. That's the good news.

Optimising IT Operations for Property Management Platforms

The property management industry has undergone a significant transformation, moving from paper-based ledgers and phone calls to sophisticated digital platforms. This shift places immense pressure on IT operations teams to ensure these platforms are reliable, secure and efficient. For modern property management to function effectively, the underlying technology must be reliable and consistently perform well.

What to Save Before Workplace Retaliation Erases Your Access

Picture a worker who reports unpaid wages or a safety concern to human resources. A few days pass, and suddenly the schedule shifts, the manager's tone turns cold, or the HR portal login mysteriously fails. As awareness around workplace retaliation rises in Los Angeles, employees are learning a hard truth about their digital evidence trail. Access to company platforms is only a temporary privilege, and employers control the master switch. Wait until a dispute escalates to save your records, and you may find the proof is already gone.
Sponsored Post

The key to secure transmission: TLS in the Raygun ecosystem

As our lives increasingly move online and data becomes the lifeblood of business, secure data transmission is imperative. From personal conversations to financial transactions, from healthcare records to sensitive business data, nearly everything we do online requires trust that our data is protected. And if you've ever made an HTTPS request, TLS is behind it, providing that trust.

Getting started with Ansible playbooks in CFEngine

Recently, I’ve been playing around with the ansible promise type by Fabio Tranchitella. It’s amazing how easy it is to leverage the benefits of agents with all the existing automation from the ansible community. Hence, I wanted to share it in a blog post, with an emphasis on easy. Let’s start off by creating a new cfbs project in a cfengine-ansible directory. Make sure to answer yes on the prompt to build on top of the default policy set.

VM Migration - What Happens to Your NSX Segments in Kubernetes?

Planning a migration off NSX usually starts with a networking conversation. Segments, VLANs, routing topology and BGP peering are not things that map cleanly to Kubernetes-native constructs the way the NSX distributed firewall maps to Calico’s tiered microsegmentation. NSX virtualizes the network layer in ways that Kubernetes doesn’t replicate by default. There is no native concept of a Layer 2 segment or VLAN, for instance.

What are the Key Features and Evaluation Criteria for Vulnerability Assessment Tools?

How many findings from your last vulnerability scan have been verified as fixed? For most IT functions, the scan report is easy to produce, and the proof of closure takes far longer to assemble. That difference tends to surface at the worst possible moment, usually an audit or a post-incident review. Vulnerability assessment tools are meant to end that uncertainty. They inspect systems, match what they find against public vulnerability databases, and rank each weakness by how dangerous it is.