kubernetes
Kubernetes admission policy is where workload security stops being advisory. Broadcom’s new policy bundle for vSphere Kubernetes Service packages the baseline controls the engineering question is how you operate policy at fleet scale without breaking application teams. The technical read. Broadcom shipped a policy bundle for vSphere Kubernetes Service
Personal
A few months ago I received a disconnection notice from my energy retailer claiming I owed around $3,000. My account was fully paid. Weeks later, a gas bill landed that appeared to charge me for seven times the gas I'd actually used. I spent hours cross-checking
Newsletter
On owning your platform, and what comes next. This publication now lives at mohammadsiddiqui.com my own domain, running on Ghost. It is a move I had been considering for a while, and I am glad I made it. Here is why it matters, and what changes from here. The
architecture
When a new VCF release lands, my first read isn’t the announcement blog. It’s the what’s-new section of the release notes, line by line, with a notepad open. I want to know which lines will appear in customer HLDs over the next six months, and which
Newsletter
The 29 July advisory reaches vSphere 8: ESXi 8.0 U3k resolves CVE-2026-47876 live-patchable and vCenter 8.0 U3k closes two more.
Newsletter
Five CVEs resolved across ESX and vCenter under VMSA-2026-0006, released 29 July. The detail that matters operationally: the ESX patch applies without reboot or evacuation
Newsletter
The same 29 July advisory that patched three components on 9.0.2 asks exactly one thing of VCF and VVF 9.1 estates: vCenter 9.1.0.0300, resolving CVE-2026-59310.
Newsletter
Baseline-based host patching has been deprecated since vSphere 8.0 and cannot carry you into vSphere 9.
Newsletter
Broadcom’s July post on Security Technical Implementation Guides lands squarely in defence territory but the compliance-as-operations model it describes is exactly where APRA and DORA are heading.
Newsletter
WSFC and clustered database estates have carried a storage growth constraint through every platform generation. VCF 9.1 removes it shared VMDKs expand online.
Newsletter
Intel TDX and AMD SEV-SNP reach general availability, Quick Boot returns on CC-active hosts, and VCF Operations profiles host capability automatically.
Newsletter
Automated load balancing within guardrails on one front; MCP session persistence, JWT authentication, and tool RBAC on the other. The load balancing layer catches up with where the platform is going.