Why we decided to address this At some point, while reviewing our endpoint security posture, we realized that BIOS protection was one of those areas we tend to take for granted rather than actually verify. This was the situation we encountered: • No BIOS password configured• Unrestricted access to BIOS settings• External boot still enabled…
Read MoreImportant: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.48 Summary The vulnerabilities include an authentication bypass leading to privilege escalation via trusted CA impersonation, a stack-based buffer overflow, and an…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the Kibana package is now available for NetEye 4. Security Fix for NetEye 4.48 CVEs All of the 3 CVEs are Denial of Service vulnerabilities that affect Kibana, within the Elastic Stack. Affected Products All…
Read MoreWe are developing a software product whose production environments run entirely on AWS. Keeping local development as close as possible to those environments is important to us: it reduces surprises when deploying, shortens the feedback loop when debugging infrastructure-related issues, and means developers can work confidently without needing access to a shared cloud account. To…
Read MoreThe first half of 2026 has witnessed the transition of artificial intelligence from an experimental playground into a cyber warfare domain. In fact, threat actors have shifted from basic prompting toward highly automated, multi-stage operations. This shift is characterized by a bifurcation of threats. On one side, attacks exploiting inherent AI vulnerabilities and architectural boundaries,…
Read MoreFor a long time, software development had a fairly comforting structure: you had a problem, you wrote some code, you shipped it, and then you moved on to the next problem while quietly pretending the previous one wouldn’t come back to haunt you at all. Mission accomplished. That model is starting to break, not because…
Read MoreWhen our work on the NetEye 4.47 upgrade started, one technical dependency quickly became impossible to ignore: Grafana dashboards that still relied on the legacy IDO MySQL database had to be moved to IcingaDB first. That wasn’t the interesting part, though. The interesting part was how to do it safely. These dashboards are part of…
Read MoreFix Geo Map layers and maps deletion. We have resolved an issue in the Geo Map module that prevented users from deleting maps and layers through the web interface. List of updated packages To solve the issue mentioned above, the following packages have been updated for NetEye 4.48:
Read MoreOne practical approach to how the IT function of a global enterprise can govern strategy, manage digital products and services, and deliver work continuously, using a coherent three-layer model based on a hybrid operating model. Building on What We Already Know Running IT in a global enterprise is not a single problem. It is at…
Read More
With NIS2, the focus moves toward how security is actually managed in day-to-day operations. An important part of NIS2 is operational discipline: Knowing which assets exist, who’s responsible for them, how incidents are handled, how changes are controlled, and whether the necessary records are already available in the system. The question is whether existing tools…
Read MoreThere’s a particular kind of irony in watching your observability stack become the thing you most need to observe. That’s more or less our day job, and it’s why we tend to be unusually deliberate about tooling decisions: The small ones have a habit of compounding over time. So when it came to choosing a…
Read MoreFor a long time, Sealed Secrets was our go-to solution for managing confidential data like database credentials, tokens and private keys within Kubernetes. However, as our operations grew, the operational overhead of this approach led us to migrate to External Secrets. This transition has significantly streamlined our workflow, enhanced our security posture during credential rotations,…
Read MoreHi everyone 😃 Today I’d like to walk you through some experiments we ran about load-balancing requests to LLMs in Kubernetes. Let’s dive deep into it! Why Deploy LLMs in Kubernetes? Well, Kubernetes has now established itself as a leading technology when it comes to workloads orchestration. And with time the increasing support for accelerators…
Read MoreOffice 365 is a suite of online subscription services offered by Microsoft as part of the Microsoft 365 ecosystem. It includes capabilities for document creation and management, email, video conferencing, collaboration, and many other productivity services. The upcoming NetEye Extension Pack (NEP) is designed to monitor subscription-related information within your Office 365 tenant by leveraging…
Read MoreConfluence Cloud does not provide a simple native view that lists all spaces with direct links that’s in a format business users can easily consume. The REST API gives you the data, but you still need to filter, paginate, and present it. A practical workaround is to collect all spaces through the v2 Spaces endpoint,…
Read More