How a ten-year-old dangling DNS record handed one of our subdomains to spammers
On August 27, Google sent us an email. We did not. We barely recognized the hostname. None of us had thought about dev-docs.trackjs.com in about ten years.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.
SOC automation solution guide 2026 with examples
SOC automation can be a confusing category as there is no single type of SOC automation solution or tool, and most security teams use several different approaches at the same time. However, the need for SOC automation is much clearer with recent data on SOC automation showing that 93% of organizations are using or planning to use automation in their security workflows.
Creating Secure and Reliable Digital Signing Processes
Digital signing works best when it is designed as part of a complete business process. Organizations building signing into their own software can evaluate an esignature API from Blueink, a provider focused on developer-led document workflows with REST API tools, SDK resources, embedded signing, webhooks, tracking, and identity-verification options. Its services are relevant to integrated workflows in areas including government, insurance, education, and healthcare. A signature request is only one moment in a longer journey.
What makes Linux security robust?
Linux security is built for environments where resilience matters. From vulnerability management to long-term maintenance, securing open source at enterprise scale requires a robust approach across the software lifecycle. Robustness comes from how those practices work together and hold up over time.
How are folks managing CVEs at scale? #itsecurity #opensource #vulnerability #sbom
Dog-walk thoughts on vulnerabilities at scale More CVEs are being found, disclosed and weaponised faster than ever. For a small team with one product, that's manageable: a CVE lands, you fix it. But if you're running thousands of applications across tens of thousands of repos, "the teams will handle it" stops working. It becomes a governance problem.
Why Security and Observability Must Work Together in 2026
Modern IT environments generate more data than ever. Every application request, user login, network connection, cloud workload and endpoint action produces signals that can help teams understand what is happening across the business. Yet having more data has not necessarily made organizations more secure, more reliable, or easier to operate.
It takes a hacker 48 hours to exploit a vulnerability. Why does it take 43 days to patch it?
It is not always possible to patch vulnerabilities as quickly as hackers exploit them, but recent figures show just how much this gap has widened. FortiGuard Labs estimates that the time between the disclosure of a critical vulnerability and its active exploitation has dropped sharply to between 24 and 48 hours. By contrast, Verizon’s 2026 Data Breach Investigations Report shows that organizations take a median of 43 days to complete vulnerability remediation.
HITL for autonomous agents: Where does the human go?
Human approval is easy when you are sitting in front of the agent. For an agent running by itself in a cluster, almost none of that holds. You’re in a meeting and your agent is running in a cluster. It has a service account, it has been asked to keep a service healthy, and it has just worked out that the right fix is to roll back a database migration. Nobody is watching it. That was rather the point of deploying it. You want to get notified to approve such an important action.
IT professionals show password sharing the red card
SolarWinds research reveals the biggest own goals, red cards and match-winning moments shaping life in IT.
Installing CFEngine with Ansible
You started with Ansible, and for a long time it was the only thing you needed. With a handful of playbooks and an inventory file, you got the job done. However, as the fleet grew, runs went from taking minutes to hours, and parts of the inventory were unreachable at any given moment. This is not an Ansible flaw. Push-based configuration and continuous state enforcement are simply two different jobs. This blog post is all about getting you started with a hybrid system.