Tag: DevSecOps

  • The Kubernetes Security Checklist

    The Kubernetes Security Checklist

    ~ 5 MIN READ

    A field guide to Kubernetes security in 2026, with the checklist that actually matters, the order to apply the items, and the items that are pure theatre.

  • Password Reuse Is Still Winning in 2026

    Password Reuse Is Still Winning in 2026

    ~ 5 MIN READ

    Password reuse is still winning in 2026. People reuse passwords. They reuse the same password across work and personal accounts. They reuse the same password across the work accounts of every job they have ever had. The advice to use unique passwords is good advice. The advice is not being followed. The attackers know.

  • What Cloud Storage Egress Actually Costs in 2026

    What Cloud Storage Egress Actually Costs in 2026

    ~ 5 MIN READ

    Cloud storage egress in 2026 sits as the line item that surprised the budget in 2020, that surprised the budget in 2023, and that will surprise the budget in 2026. The egress fee for moving data out of AWS, or Azure, or GCP runs at $0.05 to $0.12 per gigabyte, the typical enterprise moves 100+…

  • A Field Guide to the DevSecOps Pipeline

    A Field Guide to the DevSecOps Pipeline

    ~ 5 MIN READ

    A field guide to the DevSecOps pipeline in 2026, with the gates that actually catch the real bugs, the gates that are pure theatre, and the order that the gates should fire in without slowing the team down.

  • What osquery Tables Actually Tell You in 2026

    What osquery Tables Actually Tell You in 2026

    ~ 5 MIN READ

    osquery in 2026 amounts to the most underused endpoint visibility tool in the typical enterprise. The enterprise deploys the EDR, the EDR catches the known threats, the EDR misses the unknown threats, the unknown threats sit on the endpoint unobserved. The osquery tables expose the endpoint state in a way the EDR cannot. The guide…

  • Vibe Coding and the Hiring Pipeline

    Vibe Coding and the Hiring Pipeline

    ~ 5 MIN READ

    Vibe coding changed the hiring pipeline for the entry level software engineer in 2026. The entry level jobs that existed in 2024 do not exist in 2026. The entry level skills that mattered in 2024 do not matter in 2026. The hiring pipeline that worked in 2024 does not work in 2026. The state of…

  • Multi-Cloud Is Not the Answer (But You Will Do It Anyway)

    Multi-Cloud Is Not the Answer (But You Will Do It Anyway)

    ~ 5 MIN READ

    Multi-cloud sits as the strategy the consulting firm sold the board in 2019 and the operations team has been trying to make work since. The pitch was vendor lock in avoidance, the cost optimisation, the resilience. The reality sits as the second cloud account nobody can fully account for, the second identity system nobody wants…

  • The Shadow Cloud Problem Nobody Is Mapping

    The Shadow Cloud Problem Nobody Is Mapping

    ~ 5 MIN READ

    Shadow cloud refers to the cloud accounts, cloud workloads, and cloud services that the enterprise has lost track of. The lost cloud accounts, the cloud workloads that the enterprise does not know exist, the cloud services the team signed up for with a credit card and forgot. The shadow cloud problem in 2026 ranks as…

  • The Cloud Misconfiguration Tax You Are Paying

    The Cloud Misconfiguration Tax You Are Paying

    ~ 5 MIN READ

    The cloud misconfiguration tax shows up in three places. Most organisations do not see all three. Here is what you are actually paying, and what the fix costs.

  • Backups: The One Thing That Will Save You, and Why Most People Set Them Up Wrong

    Backups: The One Thing That Will Save You, and Why Most People Set Them Up Wrong

    ~ 5 MIN READ

    We have backups is often the last reassuring sentence spoken before an organization discovers the backups were incomplete, online, encrypted with everything else, or impossible to restore in time.