DevOps & SRE
DevOps & SRE news — Thursday 22 October 2026
7 stories from 4 sources, every one in English. Each links to its publisher.
-
Security Update on PHP2Shell: Impact for Docker Customers
Docker Blog
Summary On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619 , commonly known as PHP2Shell. The vulnerabilities allow attackers to execute code remotely in PHP core…
-
How bug bounty sharpens one researcher’s security skills
GitHub Blog
As Cybersecurity Awareness Month continues, the GitHub Bug Bounty team is excited to spotlight another top-performing security researcher from the GitHub Security Bug Bounty Program: @r31n ! As home to the world’s developers, GitHub is…
-
ActiveState Partners with Docker to Secure the Open Source in Enterprise Containers
Docker Blog
Even security teams that have invested in a hardened base image often can’t say what’s running on top of it. In a recent survey of 250 North American DevSecOps leaders, 91% named visibility into container components as their single biggest…
-
An IT manager’s guide to leading an automation-driven culture
Red Hat Blog
Modern IT engineering organizations face a new reality: the mindset of people relying on “manual” work is simply no longer valid. Furthermore, the rapid rise of artificial intelligence (AI) has introduced an entirely new layer of…
-
PHP2Shell: GitLab helps find and remediate critical PHP flaws
GitLab Blog
GitLab is not affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). The GitLab application is not written in PHP and does not run it to serve web requests, and our Security team has found no evidence of impact to GitLab-managed…
-
From buzzword to blueprint: Implementing zero trust on Red Hat OpenShift with the Layered Zero Trust Validated Pattern
Red Hat Blog
Part 4 of a series on implementing zero trust security in Red Hat OpenShift with the Layered Zero Trust Validated Pattern.Zero trust is easy to describe. The hard part is making it repeatable.Zero trust is often described succinctly in a…
-
Simplifying TLS certificate management on Red Hat OpenShift with NEC
Red Hat Blog
Red Hat OpenShift uses TLS certificates across many platform components to establish trust and secure communications. As platforms grow and evolve over years of operation, managing these certificates consistently becomes increasingly…