Data exfiltration is rarely as obvious as a large file being copied to an attacker-controlled server. In many environments, sensitive information leaves through channels that look legitimate: a cloud storage service, a familiar application, an unusual destination country, or a removable device. This is where Elastic’s Data Exfiltration Detection (DED) package can help. Instead of…
Read MoreIn this article, I will show how we automated the creation of customer tickets from relevant NetEye Cloud monitoring events.
Read MoreWhen you create custom fields with the Fields plugin for GLPI, the container defines which itemtypes show the new tab. If you later need to add more itemtypes (for example Certificate or Domain), the web interface is not enough: you have to work directly on the database. In this article we explain why a manual…
Read MoreTekton has been at the core of our CI/CD infrastructure for several years. On OpenShift, however, we’ve never interacted with Tekton only through its APIs or command-line tools: The OpenShift web console provides a convenient graphical interface to inspect pipelines, understand their structure, start them with custom parameters and workspaces, and follow their execution. As…
Read MoreThe first half of 2026 marked a structural shift in how cyber criminals and state-sponsored groups achieve initial access. Rather than targeting corporate perimeters directly, adversaries have increasingly exploited the “web of trust”, generally known as supply chain attacks. This means compromising open-source code registries, developer utilities, and third-party SaaS integrations. According to threat intelligence…
Read MoreWhen the GLPI inventory plugin is used to collect agent inventories, assets may fail to appear in GLPI even though the agents reach the server. The cause was a bug in the Icinga Web 2 SSO plugin: GLPI 11 marks the inventory plugin’s endpoints as “stateless,” and the SSO plugin wrongly treated them like static…
Read MoreIf you spend enough time working on Linux, your home directory slowly becomes a reflection of how you like to work. A few aliases are added to your shell. Git gets its own configuration. Your editor starts accumulating plugins and custom keybindings. The terminal gets some additional settings, and eventually even tools you barely remember…
Read MoreKeycloak: Fix for Oversized Logout URL and Package Update This update addresses an issue where the logout redirect URL became excessively large, leading to failed logouts and HTTP 500 errors. When users belonged to a large number of groups, the ID token grew substantially (exceeding 8 KB) because the full group list was mapped into…
Read MoreWhen you have a large request, it’s tempting to turn every step into a sub-task. It makes sense: Each activity is visible, assignable, and trackable. However, there is a downside. Projects can quickly become crowded with work items, navigation becomes heavier, and even simple actions require more administration than they deserve. That’s exactly the situation…
Read MoreImportant: GLPI security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This is the list of vulnerabilities patched in this update: For details on how to apply this update, which includes the…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49: Summary This Keycloak update (version 26.7.4) resolves several security issues identified in upstream Keycloak: For details on how to apply this…
Read MoreHow Terraform has turned our NetEye Cloud Elastic configuration management into a declarative, verifiable, and repeatable process that improves governance, security, and operational speed. From Manual Configuration to a Declarative Platform The configuration of an observability and security platform quickly grows in complexity. Workspaces, permissions, retention policies, data views, and user experience settings must remain…
Read MoreUpdate of Elastic Stack to Version 9.4.7 Elastic Stack 9.4.7 delivers targeted fixes across Elasticsearch, Kibana, Fleet Server, Logstash, Elastic Observability, and Elastic Security. Elasticsearch improves memory protection, ES|QL correctness, kNN filtering, vector compatibility, and data-stream auto-sharding. Kibana addresses issues across dashboards, alerting, Fleet, and platform stability, while Fleet Server fixes version-specific agent re-enrollment, upgrade…
Read MoreImportant: Grafana security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the grafana packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule…
Read MoreNetEye upgrade causes RPMS of next release to be upgraded even if an update is required first We fixed a bug in NetEye 4.47 and 4.48 that caused the neteye upgrade command to update some NetEye packages even when packages from the previous version had not yet been installed by neteye update. List of updated…
Read More