MP Marc Popeinfra · open source
sys: online · EST Let's talk
the log · 132 entries

#infrastructure

Every entry filed under Infrastructure.

RSS
2026.09.167 min read Java 27 changes the defaults under every untuned JVM you run JDK 27 shipped September 15 with G1 and compact object headers as defaults on every JVM, and those two changes reach untuned containers before anyone plans an upgrade. programminginfrastructuresoftware-development 2026.09.156 min read Microsoft's record Patch Tuesday broke Remote Desktop on every supported Windows Server The September 8 update fixed 972 CVEs and broke RDS, USB audio, WSL folder shares, and Excel paste. An emergency patch on September 14 fixes RDS. Audio is still open. technologyinfrastructure 2026.09.148 min read Homebrew 7.0.0 drops Intel Macs to Tier 3 and adds a vulnerability scanner Homebrew 7.0.0 shipped September 13. Intel Macs drop to Tier 3, macOS 10.15 is out, brew vulns checks installed formulae against OSV data, and Landlock replaces Bubblewrap on Linux. programminginfrastructuresoftware-development 2026.09.126 min read One operator, hundreds of AI agents, and 395 organizations breached through PaperCut GreyNoise says one operator used hundreds of AI agents on OpenAI's Codex harness and a DeepSeek model to breach 395 organizations through PaperCut, 204 of them schools. technologyai-engineeringinfrastructure 2026.09.116 min read IDScan.net stored every license scan it checked, and 153 million of them leaked IDScan.net confirmed a breach after a dark web service offered 153 million driver's license scans. The seller says it pulled new records for over a year. technologyinfrastructure 2026.09.096 min read A third cPanel bug in five weeks lets a hosting customer become root CVE-2026-67401 lets a cPanel account with mail privileges write files and run code as root. It is the third fix since August 4 for a bug that takes a customer to root. technologyinfrastructure 2026.09.087 min read Broadcom pulled VDDK, and the exits from VMware closed with it Broadcom yanked the VDDK downloads on August 25 with no notice, and most of the tools people use to leave VMware depend on it. I don't think that was an accident. technologyinfrastructuretechnology-leadership 2026.09.076 min read AI incident tools can remove the practice engineers need for difficult outages AI responders may shorten routine outages while leaving engineers less prepared for unusual failures. The risk is familiar from older automation, though evidence specific to AI-assisted… ai-engineeringinfrastructuretechnology-leadership 2026.09.067 min read 22,000 third-level .name domains face deletion, regardless of their expiry dates Verisign plans to delete third-level .name domains in February 2027. Paid registrations won't prevent removal, and the end of email forwarding could leave old accounts exposed to takeover. technologyinfrastructuretechnology-leadership
open channel

Have an infrastructure problem that needs an owner?

Backup, recovery, remote access, fleet automation, or a platform that has to stay up. Tell me what is breaking.

Start a conversation