Security
AhsayCBS: The Backup Server That Mined for the Attacker
Huntress tracked a CVE chain that turned AhsayCBS backup servers into SYSTEM-level webshells and XMRig miners, and the claimed fix never fixed it.
DevOps
Valkey-proxy: Migrating Redis Without the Rewrite
Percona's Valkey-proxy lets old Redis clients talk to clustered Valkey without a rewrite, moving the migration risk from your code to a layer you can test.
Security
CVE-2026-21589: The Double Colon That Became a Slash
Atlassian's CVE-2026-21589 turns a double colon into a slash, and exploitation began two hours after the PoC. The patch window is now measured in hours.
DevOps
The Migration That Locked the Table for Eleven Minutes
The column was added with a default that required a full table rewrite, so the table took an exclusive lock and every write queued behind it until the…
DevOps
The Canary That Received All the Traffic
The weight was set on the route and not on the service, so the one-pod canary took the full load, and the errors were the capacity rather than the code, and…
DevOps
The Volume That Would Not Grow Until the Pod Restarted
The claim was expanded and the filesystem stayed the same size, so the application kept hitting the old limit while the dashboard showed the new capacity…
DevOps
The latest Tag That Deployed Yesterday's Build
The image tag never changed, so the node used its cached layer and the new code never ran, and the deploy reported the new version while the container…
DevOps
The Cron Job That Overlapped Itself and Doubled the Work
The nightly export ran longer than its interval one evening, so two instances ran at once and both wrote to the same output file, and the file was half of…
DevOps
The Migration That Could Not Run in a Blue-Green Deploy
The schema change dropped a column the old version still read, so the two versions could not share the database, and the rollback stopped being a switch and…
DevOps
The ConfigMap Change That Nobody Restarted
The config was updated in the cluster and the pods kept running with the values they read at boot, so the change was live in the manifest and absent in the…
DevOps
The Node That Evicted Everything Because Logs Filled the Disk
Container logs grew without rotation until the node hit disk pressure, and the kubelet evicted every pod on it, including the healthy ones, and the eviction…
Opinion
One-Person On-Call Is Not a Rotation
A single person carrying the pager has no backup when they are ill, asleep or wrong, and the absence of a second human turns every incident into a personal…