DevOps

November’s Patch Tuesday brought critical zero-days being actively exploited, reminding us that patch management is still the unglamorous foundation of security.

Kubernetes 1.32 arrives with improvements to sidecar containers, resource management, and the continued push to simplify the platform for operators.

CISA’s Secure by Design initiative is moving from voluntary pledges to measurable industry impact, and software vendors are starting to feel the pressure.

A viral post about Slack’s massive price increase highlights the growing problem of SaaS cost escalation and what engineering teams can do about it.

Broadcom’s deletion of Bitnami images from Docker Hub is a wake-up call about depending on container registries you don’t control.

The push to bring QUIC protocol support into the Linux kernel marks a significant shift in how we think about transport-layer networking.

With OpenTelemetry’s logging signal reaching GA status, the project now covers all three pillars of observability with stable APIs, fulfilling a long-standing promise to the industry.

A year and a half after forking from Terraform, OpenTofu is proving that community-driven infrastructure tooling can thrive — but challenges remain.

Docker’s new Model Runner feature brings local AI model execution into the Docker Desktop workflow, blurring the line between containers and inference.

New US tariffs on technology imports are sending ripples through hardware supply chains, cloud pricing, and software infrastructure planning.

A surge of active exploitation targeting Fortinet and Ivanti edge devices highlights the persistent vulnerability of network perimeter infrastructure.

CVE-2025-1974 and related vulnerabilities in the Kubernetes ingress-nginx controller allow unauthenticated remote code execution, affecting an estimated 40% of Kubernetes clusters.