Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

Golden paths: how to ship securely without slowing developers

Jul 28, 2026 By Cloudsmith In Cloudsmith
The secure path and the easy path should be the same path. Ralph McTeggart (Principal Engineer), Alex Franzmann (Customer Onboarding Team Lead), and Claire McDyre (Product Manager) at Cloudsmith lay out how platform teams can deliver supply chain security as a capability rather than a checklist. The argument runs from first principles: make a private registry the default, automate policy enforcement at the global level, and extend that same logic to compliance – so SBOM generation happens in the pipeline, not as a developer's manual task.
View Video
tigera

Bring Your Own VLAN: Moving VMs to Kubernetes Without Changing a Single IP

Jul 28, 2026 By Veronika Smolik In Tigera
For many organizations, modernizing their VMs before migrating them is not a realistic option, especially when external events trigger the migration. Mapping dependencies and refactoring network configurations before the deadline is impractical, forcing VMs to move as they are. The mechanics of moving a VM are largely solved.
Read Post
Best Practices for Designing Secure Entry Management Across Multiple Facilitiesse

Best Practices for Designing Secure Entry Management Across Multiple Facilitiesse

Jul 28, 2026 By OpsMatters In OpsMatters
Managing who gets in and who doesn't across several locations is genuinely complicated. One overlooked entry point can unravel security across an entire organization. As companies expand into new sites, the need for secure entry management intensifies quickly. In fact, more than 75% of multi-location organizations now treat digital visitor management and centralized access control as a top budgetary priority. Getting the architecture right from the start? That changes everything downstream.
Read Post
Avantra

Are You Audit-Ready? SecOps for SAP in the Age of Constant Change

Jul 27, 2026 By Avantra Team In Avantra
Drift Happens. Six months ago, your SAP landscape passed audit cleanly. Today? You couldn’t say for certain without a manual scramble across Basis, security, and infrastructure teams to reconstruct what’s true right now. You did exactly that for the audit, after all. That gap between “was compliant” and “is compliant” is where most SAP security programs quietly fail.
Read Post
canonical

Ubuntu's virtualization hardware enablement (HWE) stack: a new model for confidential computing enablement

Jul 27, 2026 By Ijlal Loutfi In Canonical
Confidential computing is moving quickly. The foundation is already here: AMD SEV-SNP and Intel TDX have made it possible to run confidential virtual machines (VMs) with stronger protection for data in use. Ubuntu 26.04 Long Term Support (LTS) brings integrated host and guest support for both of these technologies, making confidential computing a native part of the Ubuntu virtualization offering..
Read Post
certkit

Public mTLS client-auth certificates stop renewing in October

Jul 27, 2026 By Todd H. Gardner In CertKit
Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.
Read Post
tigera

Why eBPF Is Useful for Watching and Sandboxing AI Agents

Jul 27, 2026 By Peter Kelly In Tigera
Most of our runtime security habits were built for deterministic workloads. A service does what its code says: review the code, sign the image, and its behavior is bounded. Agents are different. An agent’s behavior emerges from a model reasoning over whatever lands in its context window, and some of that context comes from places we don’t fully control — a retrieved document, a tool’s output, a user’s prompt.
Read Post

Supply chain hit: the first hours are about "am I affected?"

Jul 27, 2026 By Cloudsmith In Cloudsmith
The first two to three hours after a supply chain compromise aren't about remediation – they're about figuring out whether you're affected at all. That requires two things: a feed of compromised packages you can cross-reference against what you're using, and an audit trail showing which developers pulled which packages and when. Teams that can answer "are we affected?" in 30 minutes have that data pre-built into their platform. Teams that don't are still piecing it together at hour three. Protect your supply chain with Cloudsmith.
View Video
Tier 1 SOC Automation Options Explained

Tier 1 SOC Automation Options Explained

Jul 27, 2026 By OpsMatters In OpsMatters
In 2026, like in every other year, tier 1 is the front line of the SOC. It's where alerts land, where triage happens, and where most of the repetitive work lives. Unsurprisingly, it is also where automation is moving fastest. There is a lot of skepticism around how much of tier 1 can be reliably automated. If you want to see some, just have a look on Reddit or other forums. But there is definitely a growing market and capability for AI-enabled tools to learn, guide and automate tier 1 workflows.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.