Las Vegas, 31 August – 3 September. Strip away the keynote schedule and there’s a specific set of sessions that matter for regulated-industry platform teams. The technical selection, with the reasoning whether you attend or catch the recordings. VMware
Not every VCF journey starts with an empty rack. VCF 9.1’s installer wizard and import workflows convert existing vCenter estates into management or workload domains the mechanics, the constraint surface, and the assessment that decides import versus migrate.
DBaaS on your own infrastructure: policy-scoped self-service provisioning, lifecycle automation across PostgreSQL, MySQL and SQL Server, and integration with VCF Automation. The technical architecture, the governance model, and where it fits in a regulated estate. Databases are usually
Kubernetes admission policy is where workload security stops being advisory. Broadcom’s new policy bundle for vSphere Kubernetes Service packages the baseline controls the engineering question is how you operate policy at fleet scale without breaking application teams. The technical
On owning your platform, and what comes next. This publication now lives at mohammadsiddiqui.com my own domain, running on Ghost. It is a move I had been considering for a while, and I am glad I made it. Here
Twenty technology and topology updates in VCF 9.1, read through the HLD/LLD lens what actually changes in your sizing, your fault domains, your BoMs, and your patch cycles.
The 29 July advisory reaches vSphere 8: ESXi 8.0 U3k resolves CVE-2026-47876 live-patchable and vCenter 8.0 U3k closes two more.
Five CVEs resolved across ESX and vCenter under VMSA-2026-0006, released 29 July. The detail that matters operationally: the ESX patch applies without reboot or evacuation
The same 29 July advisory that patched three components on 9.0.2 asks exactly one thing of VCF and VVF 9.1 estates: vCenter 9.1.0.0300, resolving CVE-2026-59310.
Baseline-based host patching has been deprecated since vSphere 8.0 and cannot carry you into vSphere 9.
Broadcom’s July post on Security Technical Implementation Guides lands squarely in defence territory but the compliance-as-operations model it describes is exactly where APRA and DORA are heading.