Operations | Monitoring | ITSM | DevOps | Cloud

Public mTLS client-auth certificates stop renewing in October

Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.

Why Written AI Policies Alone Won't Protect Your Organization

Most organizations have responded to the rapid growth of AI by creating written policies that define acceptable use. A clear AI policy can establish expectations, assign responsibilities, and help employees understand how AI should and shouldn’t be used. But policy alone can’t provide oversight and is almost impossible to enforce at scale without the right tools.

Why We Built Kepler: One Engineer's Frustration With Fifteen Open Terminals

We didn’t set out to build a new category of product. We set out to stop juggling. That’s the word Gyo, the senior engineer who built the first version of Kepler, keeps coming back to when he talks about where it started. “I have a lot of terminals opened, and with all those tabs, it was very difficult for me to keep focused on what I was doing,” he says. “I’m not a juggler.”

Amazon WorkSpaces Monitoring Software: Complete Enterprise Buyer's Guide

Amazon WorkSpaces is a powerful option for delivering cloud desktops at enterprise scale, but the platform only performs well when it is monitored with the same level of care as any mission-critical application. This guide explains how Amazon WorkSpaces work, why monitoring matters, what to measure, and how to choose the right monitoring software for a modern enterprise environment.

Your Production System Is Now in Your Pocket | Harness Blog

In April, Harness announced the Harness Cursor Plugin, a native integration that lets developers manage CI/CD pipelines, deployments, and security posture using natural language inside Cursor, governed by the same RBAC, OPA policies, and audit trails already enforced across the Harness platform. That experience has, until now, lived entirely at a desk.

Why Your Sidekiq Jobs Are Slower Than You Think, and How AppSignal Fixes That

As developers, we sometimes find ourselves in situations where something feels slower than it should be. The first thing we tell ourselves is “Maybe I need a different tool.” And sure, at times, it might be due to the tool, I’ll give you that. But most of the time, it comes down to how you’ve implemented certain features. That’s one of the downsides that comes with having too much freedom.

Ubuntu's virtualization hardware enablement (HWE) stack: a new model for confidential computing enablement

Confidential computing is moving quickly. The foundation is already here: AMD SEV-SNP and Intel TDX have made it possible to run confidential virtual machines (VMs) with stronger protection for data in use. Ubuntu 26.04 Long Term Support (LTS) brings integrated host and guest support for both of these technologies, making confidential computing a native part of the Ubuntu virtualization offering..

AI fatigue: what happens when product teams can't keep up with their own agents

For the past two years, the conversation around AI in software engineering has focused on one thing: productivity. Engineers are shipping faster, writing more code, and completing work in hours that once took days. Every new model promises another leap forward. What gets far less attention is what all that speed demands from the people using it. Guillaume Moigneu, Field CTO at Upsun, has spent the past year watching engineering teams adapt to AI-assisted development.

Business continuity starts with portability

Business continuity planning has a quiet assumption built into most of it: that the infrastructure the plan runs on will cooperate. Backup systems will be accessible. Recovery procedures will work as documented. The provider whose services underpin the critical path will be available, or at least recoverable within the window the plan specifies. That assumption is tested every time a major provider has an outage, a regional failure, or a service disruption that cascades across dependent workloads.