Blog

Cloud, security and FinOps blog

Practical notes on cloud architecture, security and FinOps, and what we learn building LineXa Studio: what works, what breaks, and how to keep it simple for developers.

FinOps explained: what it is and how to start FinOps is how engineering, finance and the business share ownership of cloud spend. What it means in practice and how a small team can start this month. Read the post → Cloud waste audit: a checklist you can run this week A practical cloud waste audit in six steps: scope, inventory, idle and oversized resources, orphans and storage. What to check and how to rank what you find. Read the post → Windows October 2026 Patch Tuesday: 70 critical flaws, patch Active Directory first October Patch Tuesday fixes about 1,411 CVEs, 70 of them critical. CVE-2026-96951 is exploited; patch Active Directory Domain Services and AD FS first. Read the post → LiteLLM 1.107.0 supply-chain compromise: check your Python dependencies A LiteLLM 1.107.0 PyPI supply-chain compromise is worth checking against your Python dependencies. No confirmed AWS, Azure or GitHub breaches found. Read the post → Kubernetes 1.34 reaches end of life on 27 October Kubernetes 1.34 reaches end of life on 27 October, and 1.34.12 is its last patch release. How to check your clusters and plan the upgrade. Read the post → Exploited this week: Atlassian, Citrix, Fortinet and Ivanti Atlassian Data Center, Citrix NetScaler, Fortinet FortiMail and Ivanti Connect Secure are being exploited. The CVEs to check and how to triage them. Read the post → Auth0 and Okta fixes: CVE-2026-85982, CVE-2026-78626 and CVE-2026-78623 Auth0 AD/LDAP Connector CVE-2026-85982 (CVSS 9.0) is fixed in 8.0.0. Okta Access Gateway 2026.9.1 fixes CVE-2026-78626 and CVE-2026-78623. Read the post →

See it for yourself.

Everything we write about here is running in LineXa Studio today.