Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

What Happens to a VM's IP When It Moves During Migration?

A KubeVirt VM runs inside a pod. That is the trick that lets Kubernetes schedule a VM like any other workload. It also means the VM and the pod have different lifecycles. The VM is long-lived and has a stable identity. The pod is disposable. When the VM reboots, gets evicted, or live-migrates, the pod underneath is destroyed and a new one is created.

Send DNS Spy Alerts to Your SIEM: Introducing Webhook Alerts

Enterprise teams can now add a Webhook alert channel that POSTs every DNS Spy alert — DNS record changes, domain outages, security check failures, WHOIS updates, phishing look-alike detections — to any HTTPS endpoint as structured JSON. Requests are optionally HMAC-signed, every delivery is logged and retried, and a Send Test button verifies your integration end to end.

The secure path should be the default path - nothing more

Asking developers to take extra steps to pull securely is a policy that won't hold. The only approach that scales is making the private registry the default – a buffer between the developer and public registries that applies policy automatically at the global level. No extra steps, no security theater, no cognitive overhead at the point of pull. Automation and global policy configuration are what turn good intentions into a default secure posture.

Why Cloud Security Pays Off: Key Benefits Explained for Decision-Makers

Every new app, user, workload and connection creates value, yet it can also create another opening for disruption. One weak password, a missed update or an exposed setting can lead to downtime, lost data and difficult questions from customers and leadership. For decision-makers, the issue is not whether cloud security costs money. It is whether the business can afford the cost of operating without proper safety. Powerful cloud security helps you reduce risk, improve visibility, support compliance and give teams the trust to grow without looking over their shoulders.

5 SPF Flattening Tools To Help Fix Too Many DNS Lookups

Maintaining secure and efficient email authentication is a foundational element of corporate email infrastructure, but managing the Sender Policy Framework (SPF) comes with unique challenges-chief among them, the DNS lookup limit. The IETF's RFC 7208 defines a hard ceiling: a single SPF record may trigger no more than 10 DNS lookups per SPF evaluation, or risk an immediate Too Many Lookups Error that can result in SPF failures and lost email.

Feature Flag Security in your CI/CD Pipeline | Harness Blog

Incorporating robust security measures into feature flag management is critical to protecting sensitive data and maintaining compliance. Harness FME security features, like remote evaluations in Thin SDKs and governed AI flag cleanup, let you practice security by design and standardize solid security practices across your teams.

Post-Quantum Cryptography and How to Prepare Your Organization

Do you actually know where encryption lives inside your infrastructure? Not the vendor's answer. The full map: every TLS handshake, every signed software update, every VPN tunnel, every certificate your systems trust. That map is where post-quantum cryptography starts to matter. The technology has moved from a research topic into a compliance deadline, and the algorithms protecting your data today were built for a world without quantum computers.

Building a Control Framework for the AI SDLC

Since November, Kosli’s own engineering team has been running a live experiment: what happens to code review when the thing generating the code - and increasingly, the thing reviewing it - is an AI, not a person. Alex Kantor, Kosli’s Director of Technology, walked through that experiment in this webinar: what broke, what it cost to fix, and what four “obvious” assumptions in a standard code review control turned out not to hold once you took the human out of the loop.

7 Essential Things to Know Before Using an SPF Flattening Tool

TL;DR: If you're considering an SPF flattening tool to manage your organization's sender policy framework, you must understand what SPF flattening does, why DNS lookup limits are critical, the risks to dynamic SPF updates, potential security tradeoffs, the need for automated monitoring, DNS and SPF record formatting restrictions, and regular testing. Properly managed, a flattened SPF record can ensure SPF compliance and avoid errors, but improper use can lead to maintenance burden, rejected emails, and security holes.