Practical guides to Git, CI/CD, Ollama, and Azure
Istio AuthorizationPolicy rules that block or allow traffic by HTTP method just got a real asterisk. ISTIO-SECURITY-2026-007 fixes a case bug in that matcher. Published October 15, 2026, it covers one specific issue: an HTTP/2 request with a lowercased method… Read moreIstio AuthorizationPolicy Bypass: HTTP/2 Method-Case Bug
Cilium mTLS ztunnel doesn’t need a SPIRE server — and that’s actually the second-biggest news here. The bigger story: Cilium’s older, SPIRE-based “Mutual Authentication” feature is now officially deprecated, with removal targeted for v1.21. If you adopted it, you’re migrating… Read moreCilium mTLS ztunnel: Sidecar-Free Encryption Explained
Microsoft Defender for Open-Source Relational Databases went generally available for AWS RDS on June 1, 2026, and billing started that same day. If you were running it in preview, nothing breaks — you keep the same protection. If you haven’t… Read moreMicrosoft Defender for Cloud Now Protects AWS RDS
Most Kubernetes security tools scan for misconfigurations — pods running as root, missing network policies, RBAC roles that are too permissive. Those checks matter, but they don’t tell you what’s actually happening at runtime. A container could be perfectly configured… Read moreFalco on Kubernetes: Runtime Security with eBPF