When a new VCF release lands, my first read isn’t the announcement blog. It’s the what’s-new section of the release notes, line by line, with a notepad open. I want to know which lines will appear in customer HLDs over the next six months, and which
This is Siddiqui Cloud, a brand new site by Mohammad Siddiqui that's just getting started. Things will be up and running here shortly, but you can subscribe in the meantime if you'd like to stay up to date and receive emails when new content is published!
The 29 July advisory reaches vSphere 8: ESXi 8.0 U3k resolves CVE-2026-47876 live-patchable and vCenter 8.0 U3k closes two more.
Five CVEs resolved across ESX and vCenter under VMSA-2026-0006, released 29 July. The detail that matters operationally: the ESX patch applies without reboot or evacuation
The same 29 July advisory that patched three components on 9.0.2 asks exactly one thing of VCF and VVF 9.1 estates: vCenter 9.1.0.0300, resolving CVE-2026-59310.
Baseline-based host patching has been deprecated since vSphere 8.0 and cannot carry you into vSphere 9.
Broadcom’s July post on Security Technical Implementation Guides lands squarely in defence territory but the compliance-as-operations model it describes is exactly where APRA and DORA are heading.
WSFC and clustered database estates have carried a storage growth constraint through every platform generation. VCF 9.1 removes it shared VMDKs expand online.
Intel TDX and AMD SEV-SNP reach general availability, Quick Boot returns on CC-active hosts, and VCF Operations profiles host capability automatically.
Automated load balancing within guardrails on one front; MCP session persistence, JWT authentication, and tool RBAC on the other. The load balancing layer catches up with where the platform is going.
In late 2023, UniSuper’s infrastructure lead told the story of an 80/20 cloud transformation driven by regulatory pressure.
The 40% TCO claim is only as good as the word ‘suitable.’ What-If Analysis models NVMe Memory Tiering against your actual telemetry before you commit and that changes how the business case gets made.
Newsletter
A single PATCH call to resize vCenter, and SHA256 checksums on vLCM image definitions. Small features that move vCenter administration toward declarative, verifiable, API-driven operations.
Newsletter
The identity layer is the riskiest thing to migrate. VCF 9.x ships a scripted, non-disruptive workflow that decouples the identity transition from the upgrade itself and that decoupling is the design
Newsletter
Unified password policies, vault integration, compliance checks and remediation and coverage extending to workload mobility and Avi. The spreadsheet era of VCF credential management ends here.
Newsletter
FIM on the virtualisation management layer has been a custom-control conversation with the QSA for a decade. VCF 9.1 makes it a native capability aligned with NIST and PCI DSS.
Newsletter
EDR agents from security partners can now run directly on the ESX hypervisor, inside an isolated container. Here’s the architecture, the design implications, and what to ask your EDR vendor.
Newsletter
Slot scheduling, contention-aware evacuation, and Intel QAT encryption offload. None of it is keynote material all of it compounds through every lifecycle operation in the estate.
Newsletter
Identity Broker topology, SSO models, IdP federation, and role governance the official design guidance for the layer with the longest architectural shadow. Read it before you write the HLD.
Newsletter
The window between vulnerability disclosure and active exploitation has collapsed from weeks to hours.
Newsletter
When the regulator asks “what happens when ransomware hits,” the answer in VCF 9.1 is a native platform capability. Here’s how to design the IRE, deploy the components, and operate the recovery rhythm
Newsletter
Self-service is what application teams expect from a private cloud now. VCF Automation in 9.1 makes that real if you architect the tenancy model, quotas, and Infrastructure Policies correctly. Here’s
Newsletter
Critical management plane bug fixes shipping for SDDC Manager, SDDC Lifecycle, Fleet Lifecycle, VCF Operations, License Server, and Cloud Proxy. Here’s what architects need to know.
Newsletter
Identity is the layer that touches every other architectural decision in VCF. Get it wrong at Day 0 and it constrains everything downstream. Here’s how to design, deploy, and operate identity for VCF