Fix Soft States Some checks that were actually failing showed up as green/OK in Icinga. The cause: two parts of the system stored the same status in different formats, so the web interface misread it and hid early-stage problems. A fix aligns the formats, List of updated packages To solve the issue mentioned above, the…
Read MoreCloud Security Posture Management describes a category of tools that inspect cloud environments for configuration problems like public storage, overly broad IAM permissions, disabled logging, and missing encryption. The category includes open-source projects like Prowler and ScoutSuite, as well as commercial platforms. Despite different pricing models and interfaces, they solve the same underlying problem in…
Read MoreThe View from the SOC From inside the SOC, authentication traffic never really stops. Most of it is ordinary business: people signing in, services renewing sessions, or developers moving between tools. Mixed into that stream is something far less ordinary: repeated, automated attempts to become someone else. That’s why identity work sits so close to…
Read MoreIf I start with a generic opening like “In the AI age” or “AI is changing software development,” I’d have lost your interest already. You’ve likely read phrases like those a bazillion times in the last month alone. You probably also already have a strong opinion, either in favor of or against AI-generated code. And…
Read MoreFix Director self-service api We fixed the uncaught exception on bad Basic autm but in doing so we introduced a 302 redirect for API requests as well. Net result: a curl client expecting a 401 gets redirected to the login page instead, and the machine on the other end has no browser to follow it….
Read MoreIn this blog post, I’d like to share insights into the implementation of a NetEye disaster recovery (DR) environment that we recently successfully deployed for a customer. As many of you probably know, integrating IT applications into a disaster recovery environment is often not straightforward. Challenges can arise from various factors such as complex database…
Read MoreWith the NetEye 4.49 release, we’re extending the coverage of our NetEye Extension Packs (NEPs) by introducing a new package specifically focused on Audiocodes device monitoring, implemented through Centreon plugins over SNMP. This article explains: Availability The new NEP for Audiocodes will be released and supported starting with: It’s distributed via the official NEP repository,…
Read MoreWhy Dashboards Are Important In the modern IT world, simply collecting data isn’t enough: Real value comes when data can be quickly interpreted and transformed into useful information. Dashboards represent the final step of a process that starts with: Through charts, tables and interactive visualizations, dashboards allow users to: One of the main advantages of…
Read MoreWhy We Decided to Address This At some point while reviewing our endpoint security posture, we realized that BIOS protection was one of those areas we tend to take for granted rather than actually verify. This was the situation we encountered: • No BIOS password configured• Unrestricted access to BIOS settings• External boot still enabled…
Read MoreImportant: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.48 Summary The vulnerabilities include an authentication bypass leading to privilege escalation via trusted CA impersonation, a stack-based buffer overflow, and an…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the Kibana package is now available for NetEye 4. Security Fix for NetEye 4.48 CVEs All of the 3 CVEs are Denial of Service vulnerabilities that affect Kibana, within the Elastic Stack. Affected Products All…
Read MoreWe’re developing a software product whose production environments run entirely on AWS. Keeping local development as close as possible to those environments is important to us: It reduces surprises when deploying, shortens the feedback loop when debugging infrastructure-related issues, and means developers can work confidently without needing access to a shared cloud account. To achieve…
Read MoreThe first half of 2026 has witnessed the transition of artificial intelligence from an experimental playground into a cyber warfare domain. In fact, threat actors have shifted from basic prompting toward highly automated, multi-stage operations. This shift is characterized by a bifurcation of threats. On one side, attacks exploiting inherent AI vulnerabilities and architectural boundaries,…
Read MoreFor a long time, software development has had a fairly comforting structure: You had a problem, you wrote some code, you shipped it, and then you moved on to the next problem while quietly pretending the previous one wouldn’t come back to haunt you at all. Mission accomplished. That model is starting to break, not…
Read MoreWhen our work on the NetEye 4.47 upgrade started, one technical dependency quickly became impossible to ignore: Grafana dashboards that still relied on the legacy IDO MySQL database had to be moved to IcingaDB first. That wasn’t the interesting part, though. The interesting part was how to do it safely. These dashboards are part of…
Read More