Operations | Monitoring | ITSM | DevOps | Cloud

Citrix was facing a major security crisis before its official warning even went out. Companies were already pulling critical network devices offline as attackers exploited serious vulnerabilities in Citrix NetScaler ADC and Gateway systems. In this ShipTalk clip, Adam, Martin, and Starr break down the Citrix zero-day vulnerabilities, the race to respond, and the impossible decision facing security teams: keep potentially compromised infrastructure running or rush to deploy a patch.

Self-hosted deployments could hang on save and die at the timeout with no error. Fixed in v5.5.6, plus an autoscaling fix and a batch of agent reliability work. This week in env zero (Oct 5–9, 2026): Self-hosted agent v5.5.6.

Trace redaction permanently removes sensitive data from your traces, for when something like an API key ends up in a span attribute. Tempo 3.0 could do it, but only from a list of trace IDs, so you had to go find every affected trace first. In Tempo 3.1 you can hand it a TraceQL query instead. Separately, trace-by-ID got a filter. You normally ask for a trace and get all of it. Now you can pass a TraceQL query and get back only the spans that match.

In honor of World Space Week, we're spotlighting Jackson Sweeney's story and his role in Blue Ghost Mission 1. As a Thermal Engineer at Firefly Aerospace, he used Grafana to ensure that the spacecraft maintained the right temperature throughout the mission... and receive a Golden Grot Award for his use case. Behind every successful moonshot are people solving one hard problem after another. For engineers like Jackson, that means turning an extraordinary ambition into thousands of practical decisions.