Join us

ContentUpdates from The Open Source Security Foundation (OpenSSF) is a...
Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

v1.35: Job Managed By Goes GA

In Kubernetes v1.35,spec.jobControllerManagedByhits GA. That means full handoff of Job reconciliation to external controllers is now official. It unlocks tricks likeMultiKueue, where a single management cluster fires off Jobs to multiple worker clusters, without losing sight of what’s running where... read more  

Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

Troubleshooting Cilium network policies: Four common pitfalls

Cilium’s Day 2 playbook covers the real work: dialing inL7 policy controls, tuningHubble observability, and wringing performance fromBPF. It's how you keep big Kubernetes clusters sane. The focus?Multi-tenant isolation,node-to-node encryption, and scaling cleanly withexternal etcdso the network does.. read more  

Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

93% Faster Next.js in (your) Kubernetes

Next.js brings advanced capabilities to developers out-of-the-box, but scaling it in your own environment can be challenging due to uneven load distribution and high latency. Watt addresses these issues by leveragingSO_REUSEPORTin the Linux kernel, resulting in significantly improved performance met.. read more  

Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

1.35: In-Place Pod Resize Graduates to Stable

In-Place Pod Resizehits GA in Kubernetes 1.35. You can now tweak CPU and memory on live pods without restarts. This is finally production-ready! What’s new since beta? It now handlesmemory limit decreases, doesprioritized resizes, and gives you betterobservabilitywith fresh Kubelet metrics and Pod e.. read more  

Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

Kubernetes OptimizationInPlace Pod Resizing,ZoneAware Routin

Halodoc cut EC2 costs and shaved latency by leaning into two Kubernetes tricks: In-place pod resizing(v1.33) lets them dial pod resources up or down on the fly, especially handy during off-peak hours. Zone-aware routingviatopology-aware hintskeeps inter-service traffic close to home (same AZ), skipp.. read more  

Kubernetes OptimizationInPlace Pod Resizing,ZoneAware Routin
Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

Avoiding Zombie Cluster Members When Upgrading to etcd v3.6

etcd v3.5.26 patches a nasty upgrade bug. It now syncsv3storefromv2storeto stop zombie nodes from corrupting clusters during the jump to v3.6. The core issue: Older versions let stale store states bring removed members back from the dead... read more  

Link
@kala shared a link, 3 weeks ago
FAUN.dev()

Review of Deep Seek OCR

DeepSeek-OCRflips the OCR script. Instead of feeding full image tokens to the decoder, it leans on an encoder to compress them up front, trimming down input size and GPU strain in one move. That context diet? It opens the door for way bigger windows in LLMs. Why it matters:Shoving compression earlie.. read more  

Link
@kala shared a link, 3 weeks ago
FAUN.dev()

Chinese AI in 2025, Wrapped

Chinese AI milestones in 2025: Big models from DeepSeek and others, AGI discussions at Alibaba, US-China chip war swings, Beijing's AI Action plan, and more. DeepSeek led the way with an open-source model, setting off a wave of Chinese companies going open-source. China's push for AGI and involvemen.. read more  

Link
@kala shared a link, 3 weeks ago
FAUN.dev()

Evaluating AI Agents in Security Operations

Cotool threw frontier LLMs at real-world SecOps tasks using Splunk’s BOTSv3 dataset.GPT-5topped the chart in accuracy (62.7%) and gave the best results per dollar.Claude Haiku-4.5blazed through tasks fastest, just 240 seconds on average, maxing out tool integrations.Gemini-2.5-proflopped on both acc.. read more  

Evaluating AI Agents in Security Operations
Link
@kala shared a link, 3 weeks ago
FAUN.dev()

AI agents are starting to eat SaaS

AI coding agents are eating the lunch of low-complexity SaaS. Teams with a bit of dev muscle are skipping subscription logins and spinning up dashboards, pipelines, even decks, using Claude, Gemini, whoever’s fastest that day. Build vs. buy? Tilting back toward build. The kicker: build now takes min.. read more  

AI agents are starting to eat SaaS
The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.