Stephan Bergerrecently blogged about hiding Linux processes with bind mounts, using a different directory to overlay the /proc/PID directory to hide an evil process effectively. The method involves using spontaneous processes with low PIDs and names in square brackets from the Linux ps output to dis.. read more  

ThePromruvaltool has added new validations for monitoring systems like Thanos, Mimir, and Loki, supporting diverse alerting rule syntaxes. Version 3 now supports validation of Loki rules and alerts using LogQL queries. Additionally, Promruval can now use a live Prometheus instance for rule validatio.. read more  

CrowdStrike's faulty update caused a global technology outage, costing US Fortune 500 companies $5.4bn. The outage, excluding Microsoft, affected banking, healthcare, and major airlines, with insured losses estimated between $540m and $1.08bn. CrowdStrike's bug crashed 8.5m Windows machines, with th.. read more  

Anyone can access data from deleted and private repositories on GitHub using Cross Fork Object Reference (CFOR). CFOR allows one repository fork to access sensitive data from another, including private and deleted forks, by using commit hashes. GitHub's design does not permanently delete commit data.. read more  

Once a Prometheus-based monitoring stack was deployed for a Kubernetes-based SaaS product, an alerting rule failed to be deployed, leading to delays in issue detection. To address this issue, the SRE implemented Monitoring of Monitoring (MoM) to continuously monitor the alerting lifecycle within the.. read more  

Jessica Andersson discussed how their startup adopted platform engineering at QCon London. Her team launched their platform engineering efforts when the company was two years old and had software in production. They first identified their implicit platform and then turned it into an intentional one,.. read more  

Internet traffic mirrors human behavior, fluctuating during political events like elections. Recent cyberattacks in the US targeted government and political websites. With the Republican National Convention in Milwaukee, DNS traffic to political websites saw significant increases... read more  

eBPF, short for Extended Berkeley Packet Filter, enables developers to execute custom code in the kernel without modifications. It enhances Kubernetes by improving observability, security, and networking through programmable, event-driven programs. Tools like Cilium and OpenTelemetry leverage eBPF t.. read more  

Researchers identified two fake AWS packages in the NPM JavaScript repository that backdoored developers' computers by hiding malicious code in JPG images processed during package installation. The packages, mimicking a legitimate AWS library, downloaded hundreds of times before removal, used stegan.. read more  

CrowdStrike, after a botched update crashed millions of computers globally, offered $10 Uber Eats gift cards as an apology. These vouchers were later flagged as fraud and canceled. The faulty update affected approximately 8.5 million Windows devices, causing significant disruptions worldwide includi.. read more