Bnei Brak, Israel, August 31st, 2026, CyberNewswireNew capability identifies, attributes and validates API keys, OAuth tokens and other machine credentials stolen from developer and employee endpointsLunar Cyber today announced Token Exposure Monitoring, a new capability designed to identify, attribute and validate Non-Human Identities (NHI) and machine credentials inside infostealer logs, connect them to the affected organization, and determine which exposures require action.The rapid adoption of AI development tools, cloud platforms and automated infrastructure has put a new class of credentials on developer machines: API keys, OAuth tokens, personal access tokens, and other machine identities that provide direct access to valuable…
Author: drweb
Patching a single Linux machine is easy. You run its update, reboot if the kernel changed, and you’re done. Patching a whole fleet of these machines? Same process, just repeated more often. Now, in a mixed fleet, machines don’t all get updated the same way. Every Linux distribution comes with its own package manager, the tool that installs and updates software, so you run apt on the Ubuntu and Debian machines; dnf on the Rocky, AlmaLinux, and Oracle machines; and maybe zypper on an old SUSE server nobody wants to touch. But a scheduled job can keep them all current…
Open source supply chain security has been a scanner-and-CVE game for years — pull the package, run the scan, cross-reference known vulnerabilities, hope the metadata is current. That model always had gaps, and AI agents are widening them fast. Agents pull open source components from wherever they can find them, at machine speed, and the after-the-fact scan is not a control that keeps up. What developers and platform teams actually need is a curated catalog that vets components before they enter the environment, not after they cause a problem.Alan Shimel sits down with Leslie Pascual, Field Engineering Manager for AI…
Finding the root cause of slow queries starts by separating work from waits, then testing theories against plans and history.Finding the root cause of slow queries begins with an illustrative Tuesday morning. At 10:12, an order lookup that normally returned in 180 milliseconds took 14.8 seconds. Forty-three sessions piled up within five minutes, and the application team wanted a new index before lunch.CPU stayed modest, logical reads remained familiar, and the cached plan matched yesterday’s fast plan. The request spent almost its whole life on an LCK_M_S wait. A nightly inventory process had left an update transaction open. The visible query was…
The first sign of trouble was a screenshot. We’d just switched on the A/B test via our feature management platform. Within the hour, a senior stakeholder landed in the variant feature flag, opened the app on their own phone, and sent us an image of it. The message, more or less: “Why is there a new tab in my app?”It was a fair question. It was also one I thought we’d answered weeks earlier. Turns out we never really had. That’s the day I learned the difference between telling people and aligning them.The Work We Were Proud OfMy team was…
TL;DR — Key Takeaways Debian rejected both an outright AI ban and a hands-off approach, instead holding contributors responsible for everything they submit. AI-assisted work must be reviewed, tested and corrected by a human, while sensitive data and credentials cannot be shared with third-party AI services without authorization. The policy offers enterprises a practical model: govern risky behavior around AI rather than trying to detect or prohibit the tools themselves. Most organizations writing AI usage policies right now are stuck between two bad options: ban the tools and watch people use them anyway, or say nothing and hope code review…
Most sysadmins reach for chmod when they want to lock down a file. The problem is that chmod 000 only changes the file’s permission bits; root can still override them. That’s where chattr comes in. The chattr command lets you set and unset filesystem-level attributes on files and directories. These attributes are enforced at a lower level than traditional Unix permissions, giving you an additional layer of protection. For example, chattr +i makes a file immutable: it cannot be modified, renamed, deleted, or replaced through normal filesystem operations, even by root. The attribute must be explicitly cleared with chattr -i…
Note: This is the invitation for T-SQL Tuesday #202. Your post should go live on September 8, 2026. All posts must be posted by 23:59 Pacific Time. Include the T-SQL Tuesday logo in your post and link it back to this invitation. Use the #tsql2sday hashtag when sharing on social media.If you have been working with SQL Server for a while, chances are you have at least one outage that you still remember clearly. It might have happened years ago, and you probably still remember what time it happened, how you found out, what you were doing when the page…
I’ve been saying for ten years that network automation was three years away from being the only way to do things. Every year I moved the goalposts, because the data never caught up to the rhetoric. After a decade of scripts, YAML, Ansible, Terraform, and every NetDevOps framework we could throw at the problem, roughly 70% of enterprise networks are still managed by hand.The industry’s explanation for that has always been some version of “those teams just haven’t gotten with the program.” I don’t think that’s right. I think we built the on-ramp wrong.The On-Ramp Was Never Going to WorkTo…
Emoji are obsolete. There, I have written it. I do not entirely believe it.A few days ago I wrote to a client: “We need to talk about the index strategy.”The sentence was accurate. It was also dreadful. I could hear a door closing after it. I could see the client reading it twice and wondering what had gone wrong. Nothing had gone wrong. I only wanted a conversation.So I added a smiley.The database advice was mine. The anxiety was created by the sentence. The smiley had to clean up after both of us.I have been thinking about that small act…