Operations | Monitoring | ITSM | DevOps | Cloud

The numbers from the 2026 State of the Database Landscape: AI Edition are striking. 99% percent of respondents using AI report at least one measurable benefit for their database work. Automation is up, performance is improving, and three-quarters report significant cost savings. By almost any measure, AI is delivering. However, sitting alongside that near-universal positivity in the same dataset, security and privacy concerns have climbed to 64%. Regulatory compliance anxiety has risen to 40%.

When we launched Autonomous Worker Agents, the message we led with was simple: governance is inherited, not integrated. Agents don't get security bolted on after the fact. They inherit the OPA policies, RBAC, and audit trails already running your production pipelines. This post is about the layer underneath that promise: isolation. We let an Autonomous Worker Agent run shell commands and call APIs inside our pipelines.

Today, we are pleased to announce the release of CFEngine 3.28.0! The code word for this release is introspection. This is a non-LTS, not supported, feature release, with features which will become part of the next LTS scheduled for summer 2027.

In the previous post in this series, we covered why Virtual Machine (VM) Live Migration in Kubernetes is difficult: a VM’s IP is its identity, and the “new” VM on the destination node has to come up with the same IP, this something that Kubernetes is not known for, and on top of that, traffic has to switch over only after network security policies are in place.

An employee's notice period is the highest-risk window for data theft. How to detect and stop SharePoint and Microsoft 365 data exfiltration by departing staff in 2026.

The security data pipeline platform has become the most strategically important layer in the modern SOC, and in the last twelve months, the largest security vendors have paid to own it. CrowdStrike acquired Onum for $290 million, SentinelOne acquired Observo AI for $225 million, and Palo Alto Networks acquired Chronosphere for $3.35 billion. The layer that sits between your data sources and your security tools now decides what every downstream tool receives, at what cost, and in what shape.

The old deployment flow expected a lot from you. You had to know what format your certificate needed to be in. You had to know where it should be stored on the target system. Then you had to review and customize a deployment script in a code editor before anything ran. It turns out most of you don’t want to do that. And fair enough, staring at a script editor when you just want a certificate on your Exchange server is a little intimidating.