Use Kubernetes restartable sidecars with an explicit shutdown plan
A helper’s location in the Pod specification affects completion and termination behavior.
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 29 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Keep Kubernetes init work finite and safe to repeat
A regular init container is a completion gate, rather than a continuously running helper.
Read the guide
Track Kubernetes Pod identity separately from container restarts
A familiar Pod name does not prove that the original Pod or its local state survived.
Read the guide
Design both directions of stateless AWS network ACL rules
Include return paths and rule order when filtering at the subnet boundary.
Read the guide
Account for stateful return traffic when reviewing AWS security groups
Separate a permitted response from a newly initiated connection.
Read the guide
Ivanti Connect Secure CVE-2026-104935 zero-day: update now, and know the Integrity Checker may miss it
CISA says attackers are exploiting CVE-2026-104935, an authentication bypass in Ivanti Connect Secure that allows remote, unauthenticated command execution, to steal credentials and data. Affected appliances need the latest version now, Ivanti’s Integrity Checker may miss in-memory activity, and version 22.8 reaches end of life on January 31, 2027.
Read the playbook
Construction-site power: GFCIs on temporary 120-volt outlets, or a written assured grounding program with tests
OSHA’s construction electrical standard requires ground-fault circuit interrupters on 120-volt, single-phase, 15- and 20-ampere receptacles that are not part of permanent wiring, or an assured equipment grounding conductor program with written procedures, a competent person, daily inspections, periodic tests and records.
Read the checklist
OSHA’s construction PPE rule: equipment must properly fit each worker, and employers pay for most of it
Since January 13, 2025, OSHA’s construction PPE standard, 29 CFR 1926.95, says employers must ensure all personal protective equipment is of safe design and selected to properly fit each affected employee. The same section requires employers to provide most PPE at no cost and to pay for replacements unless the employee lost or intentionally damaged it.
Read the explainer
FBI: criminals turn end-of-life routers and off-brand Android devices into proxies; replace or remove them
The FBI warns that cyber actors use TheMoon malware variants to install proxies on end-of-life routers with remote administration turned on, and that the BADBOX 2.0 botnet spreads through IoT devices such as streaming boxes, projectors and picture frames that were compromised before purchase or through unofficial app stores.
Read the briefing
Meraki MX84 support ends October 31, 2026: check MX, MV and MR devices against Cisco Meraki’s end-of-life table
Cisco Meraki’s end-of-life table lists end-of-support dates of May 28, 2026 for the MX65, June 19, 2026 for the MV21 and MV71 cameras, July 21, 2026 for the MR42 and October 31, 2026 for the MX84, with the MX64 following on July 26, 2027. It defines end of support as the last date a product will be affirmatively supported.
Read the briefing