Kubernetes Mounted Every Writable Volume Executable, and v1.37 Finally Closes It
Kubernetes v1.37 adds bind mount options and emptyDir permission modes, closing a gap auditors flagged twice.
Independent reporting on Kubernetes, cloud-native infrastructure, virtualization, storage, and security. For engineers and platform teams.
Kubernetes v1.37 adds bind mount options and emptyDir permission modes, closing a gap auditors flagged twice.
The hypervisor, the kernel, the licence and the grid all moved this week. Four layers everyone assumed were stable.
Four Linux kernel privilege escalation bugs went public at once. DiagSpill needs no user namespace, which makes containers the shortest path to root.
September 2026 Patch Tuesday published a record 974 CVEs, 964 needing action and two exploited zero-days, then Microsoft fixed what it broke.
Anthropic signed for a 2.16 GW campus west of Brisbane, reported at A$32 billion, for inference only. The workload is the news, not the wattage.
A CVSS 9.8 VMware vCenter vulnerability patched in July is now used in ransomware campaigns, CISA says. Patching alone may not evict the attacker.
Europe's fourth cloud licensing report rates Broadcom critical and moves SAP to amber. VMware licensing is now a two-vendor pattern, not a one-off.
Microsoft open sourced TauGrid, one Helm install that runs AI workloads on Kubernetes across GPU nodes. The assembly is the interesting part.
Data center power procurement now gates the roadmap. Interconnection queues, capacity prices, and PPA limits put IT in the room.
The VMware migration wave was supposed to be about cost. It turned out to be the same decision as whether your platform is ready for AI.
Independent analysis of cloud-native infrastructure, Kubernetes and data center economics. No vendor spin.