#DevOps
All CosmicBytez Labs articles tagged #DevOps, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-108540: Critical OS Command Injection in OpenSpug Spug's File Transfer Component
OpenSpug Spug through 4.0.1 lets attackers inject OS commands via /exec/transfer, with public PoC exploit code and CVSS 9.9.
- HOWTO
Docker Security Hardening: Locking Down Container Environments
A practical, step-by-step guide to hardening Docker deployments — from non-root users and read-only filesystems to capability drops, resource limits, and...
- Project
Build a Production Monitoring Stack with Prometheus and Grafana
Deploy a full observability stack — Prometheus metrics collection, Grafana dashboards, AlertManager notifications, and three exporters — all containerized...
- Security
CVE-2026-30836: Step CA SCEP UpdateReq Allows
A maximum-severity vulnerability in Smallstep's Step CA certificate authority allows unauthenticated attackers to issue arbitrary certificates via the...
- News
Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft
Security researchers have published details of two newly patched critical vulnerabilities in n8n — CVE-2026-27577 (CVSS 9.4), an expression sandbox escape...
- Project
Claude Code for IT Operations: Building a Multi-Project
Transform Claude Code from a chatbot into a DevOps co-pilot. Set up CLAUDE.md templates, custom hooks, reusable agents, deployment skills, and MCP server...
- News
Microsoft Hit by Back-to-Back Outages: M365 Admin Center
Microsoft 365 admin center is experiencing degraded access across North America, just days after a major Azure infrastructure outage knocked out VMs, AKS,...
- Security
Eight Critical n8n Vulnerabilities: Sandbox Escape to Unauthenticated RCE
Popular workflow automation platform n8n hit with eight high-to-critical CVEs including a CVSS 10.0 unauthenticated RCE and sandbox escape bypassing...
- HOWTO
Docker Windows Containers: Native Engine Setup Guide
Deploy Docker Engine natively on Windows without Docker Desktop. Covers installation, Windows container mode, lifecycle management, and troubleshooting.
- Project
CI/CD Pipeline with GitHub Actions and Azure
Build a secure CI/CD pipeline with GitHub Actions deploying to Azure. Covers build, test, security scanning (SAST/DAST), and deployment with OIDC...