Docker CopyEscape (CVE-2026-17106): Fix the docker cp Host File Overwrite Vulnerability If you or your CI pipeline ever run docker cp against a container you didn't fully trust — a scanning sidecar, a customer-submitted build, an AI-agent sandbox — you need to check your Docker version right now. CVE-2026-17106, …

Managed Instance on Azure App Service Is GA: Migrate Legacy .NET Framework Apps Without Rewriting Them If you've ever tried to move a 15-year-old ASP.NET app to Azure App Service and hit a wall — a COM component that needs registering, an MSI installer the app depends on, hardcoded C:\ paths, or a registry key some …

Find Source IP Addresses Connecting to AWS Transfer Family SFTP with CloudWatch Logs Insights If your AWS Transfer Family SFTP server has CloudWatch logging turned on, every connection, login attempt, and file operation is already sitting in a log group — you just need the right query to pull the source IPs out of it. …

GitHub Actions' New vulnerability-alerts Permission: Read Dependabot Alerts Without a PAT If you've ever tried to have a GitHub Actions workflow check for open Dependabot alerts — to block a release, gate a merge, or post a Slack summary — you've probably hit a wall: the default GITHUB_TOKEN can't read them. The …

AKS Hyperscale Control Plane (Preview): Setup Guide and When You Actually Need It If you've ever run a large AKS cluster and watched kubectl requests start queuing during a traffic spike, or seen pods sit Pending while the scheduler falls behind, the cause is usually invisible: the managed control plane itself, not …

Terraform 1.16: Import Blocks in Modules, JSON Output, and Action Failure Modes Explained HashiCorp shipped Terraform 1.16.0 on August 26, 2026, and buried in the changelog is a fix for one of the most-requested Terraform limitations of the last few years: import blocks can finally target resources declared inside a …

Kubernetes 1.37 HPA Scale-to-Zero: Setup Guide and Cold-Start Gotchas Kubernetes v1.37 ("Garhwal") shipped on August 26, 2026, and the change most teams will actually feel is quiet: HorizontalPodAutoscaler scale-to-zero graduated from Alpha to Beta, and it's enabled by default. If you're running batch consumers, queue …

GitHub Actions Self-Hosted Runners: Fix Your Version Before the September 25 Enforcement If your CI/CD pipeline runs on self-hosted GitHub Actions runners, GitHub has already started intermittently blocking outdated ones. Brownouts began August 24, 2026 on github.com and GitHub Enterprise Cloud, and they escalate on a …

Amazon EC2 Application Status Checks: Setup Guide and Auto Scaling Integration On August 12, 2026, AWS shipped a status check type EC2 has never had: one that actually asks your application whether it's healthy, instead of asking the VM. The existing system and instance status checks only tell you the hypervisor is …

Docker VMM Public Beta: What Docker's First-Party Virtualization Engine Changes On August 12, 2026, Docker shipped the public beta of Docker VMM — a virtualization layer it built and now owns end to end, replacing the third-party engines Docker Desktop has relied on since it first needed a Linux VM on Mac and Windows. …