Articles published in September 2026, newest first.
CybersecurityFoundation
A vulnerability in the MCP Python SDK exposed an important security boundary: credentials must be bound to the authorization server they belong to, not simply sent wherever a remote MCP server directs them.
CybersecurityFoundation
GitHub Security Lab used structured AI workflows to identify Android vulnerabilities. The more important lesson is how security expertise, AI reasoning, deterministic tools and human verification can work together.
CybersecurityFoundation
Two exploited NetScaler flaws require urgent updates, but patching alone does not establish that an exposed gateway is still trustworthy.
Artificial IntelligenceArticle
DeepSeek, GLM and Kimi offer more open-weight AI choice, but hardware, licences, serving maturity and operational ownership still decide whether a model is practical.
Artificial IntelligenceArticle
Ollama and llama.cpp can both run models locally, but they solve different operational problems. Choose by testing your workload, not by comparing installation commands.
CybersecurityArticle
CVE-2026-65660 is under active exploitation, and the remediation deadline has passed. SharePoint teams now need to verify more than whether an update was installed.
DevOpsArticle
The Terraform AWS Provider receives frequent releases. Learn how to absorb provider changes with version constraints, dependency lock files, and staged promotion before production.
Cloud ComputingArticle
Copilot in SharePoint begins its GA rollout on 30 September 2026. For a hybrid organisation, understand the architectural boundary between SharePoint Server and Microsoft 365 before enabling the connector.
Cloud ComputingFoundation
AWS Lambda Managed Instances can now run some invocations for 90 minutes. Learn which workloads qualify and when ECS, Batch, Step Functions or durable execution remains the better design.
DevOpsFoundation
OpenTelemetry standardizes how applications produce and send traces, metrics and logs. Learn what this makes portable, what remains vendor-specific and when operating a collector is worth it.
DevOpsFoundation
Ingress-NGINX was retired on March 24, 2026. Existing clusters continue routing traffic, but receive no security fixes. Learn how to plan a safe transition to Gateway API.
Artificial IntelligenceFoundation
AI benchmark scores are useful only when you know what was tested, how it was scored and whether the task resembles your work.
Career & LearningFoundation
AI can remove useful repetition, but it can also hide gaps in understanding. Here is a better way to judge learning and code readiness.
CybersecurityFoundation
AI is moving from answering an attacker's questions to carrying out parts of an intrusion. Here is what that changes for defenders—and what it does not.
CybersecurityFoundation
In the last thirty days, post-quantum cryptography moved from research-department work to infrastructure compliance requirement. Here is what changed and why it matters to your systems.
CybersecurityFoundation
A 72-minute breach does not give every security team the same deadline. Learn what the different attack clocks measure, where automation helps and which containment decisions still need a person.
A dated field guide to 18 current free and open-weight models — what each one is, who publishes it, and what it's actually good for. Not a ranking.
Once a company no longer stands behind the download, verifying it becomes your job. Here is where free AI models actually come from, and how to tell a legitimate one from a tampered one.
Downloading a free model is one click. Running it well is a different job. Here is the hardware, the tools, and the trade-offs nobody puts in the demo video.
Artificial IntelligenceFoundation
SeriesPart 1 of 4"Free AI" can mean three different things. Here is what paid, free, and open-weight models actually give you — and what they quietly cost.
