Valkey 9.1 vs Redis 8.4: The Cache Fork Grew Up
Valkey 9.1 ships hash field expiration that Redis still lacks. AWS and GCP already made Valkey their default. Here's what the fork war ...
Pulumi Neo Security: AI Scans Your Cloud and Sends a PR to Fix It
Pulumi Neo Security finds exploitable cloud vulnerabilities, traces live attack paths, and opens PRs with ...
Cloudflare Workers Granular Permissions: Lock Down CI and Agents
Cloudflare shipped per-Worker granular authorization on September 15, and if you are running CI/CD pipelines ...
Kubernetes Memory QoS Is Beta: Stop OOM Kills Without Raising Limits
Kubernetes v1.37 makes Memory QoS beta by default on cgroup v2 nodes. Here is the ...
CVE-2026-33186: gRPC-Go Auth Bypass — Patch to 1.79.3 Now
CVE-2026-33186 (CVSS 9.1 Critical) lets attackers bypass gRPC-Go authorization by omitting the leading slash from ...
Grafana 13.2: AI Alerting, Database Observability Now
Grafana 13.2 rebuilds the alert rule list, adds natural-language database observability, and ships alert enrichment GA. Here is what to configure before your ...
Docker CopyEscape CVE-2026-17106: Patch docker cp Now
CopyEscape (CVE-2026-17106) lets malicious containers overwrite host files via docker cp. Patch to Docker Engine ...
GitHub Actions cache-mode: Lock Down Your CI Cache
GitHub Actions cache-mode went GA September 10. One YAML field closes the pull_request_target cache poisoning ...
GitHub Actions Self-Hosted Runners: Fix Before September 25
GitHub Actions brownouts are live today. Self-hosted runners not updated by September 25 stop receiving ...
Helm CVE-2026-35205: Patch Plugin Verification Now
Helm 4.0.0-4.1.3 contains a plugin verification bypass (CVE-2026-35205, CVSS 8.4) and path traversal (CVE-2026-35204, CVSS ...