https://devsecops.cz/en/blog/ Kubernetes, security, cloud and AI from production practice. Every article dated and sourced. en Mon, 26 Oct 2026 07:00:00 GMT https://devsecops.cz/en/blog/cloud-outages-resilience-lessons https://devsecops.cz/en/blog/cloud-outages-resilience-lessons Mon, 26 Oct 2026 07:00:00 GMT Cloud The autumn 2025 AWS, Azure Front Door and Cloudflare outages share a pattern: control failed, not hardware. What to map, how to design recovery and what to test. https://devsecops.cz/en/blog/why-ai-pilots-fail https://devsecops.cz/en/blog/why-ai-pilots-fail Sat, 24 Oct 2026 07:00:00 GMT AI The “95% of AI pilots fail” figure has weak methodology, but McKinsey and S&P confirm the trend. What sets companies that get AI into production apart, and what infrastructure to have ready. https://devsecops.cz/en/blog/finops-cloud-costs-2026 https://devsecops.cz/en/blog/finops-cloud-costs-2026 Thu, 22 Oct 2026 07:00:00 GMT Cloud Estimated cloud waste rose to 29% this year. Where companies overpay most – Kubernetes, forgotten resources, non-production environments – and how to measure it in five days. https://devsecops.cz/en/blog/ai-generated-code-security-review https://devsecops.cz/en/blog/ai-generated-code-security-review Tue, 20 Oct 2026 07:00:00 GMT AI Measurements show the security of AI-generated code is not improving, and the queue has moved to code review. What 2025–2026 data says and which automated gates to introduce. https://devsecops.cz/en/blog/czech-cybersecurity-act-nis2-cloud https://devsecops.cz/en/blog/czech-cybersecurity-act-nis2-cloud Sun, 18 Oct 2026 07:00:00 GMT Regulation The one-year deadline under Act No. 264/2025 Coll. runs from delivery of the registration decision. What NÚKIB's decrees mean for identity, logs, backups and pipelines in AWS and Azure. https://devsecops.cz/en/blog/shadow-ai-governance https://devsecops.cz/en/blog/shadow-ai-governance Fri, 16 Oct 2026 07:00:00 GMT AI Employees use AI even without approval, and a ban only hides it. What breach data shows, what Article 4 of the AI Act requires, and how IT can put rules and controls in place in 30 days. https://devsecops.cz/en/blog/digital-sovereignty-sovereign-cloud https://devsecops.cz/en/blog/digital-sovereignty-sovereign-cloud Wed, 14 Oct 2026 07:00:00 GMT Cloud The sovereign clouds of AWS, Microsoft and Google address data location and operational access, not the parent company’s legal reach. A framework: data classification, own keys, an exit plan. https://devsecops.cz/en/blog/ai-agents-production-security https://devsecops.cz/en/blog/ai-agents-production-security Mon, 12 Oct 2026 07:00:00 GMT AI Replit, PocketOS, Amazon Q: documented AI agent incidents share a root cause in permissions. How to set up identities, RBAC, sandboxing and approval so it doesn’t happen to you. https://devsecops.cz/en/blog/ingress-nginx-gateway-api-migration https://devsecops.cz/en/blog/ingress-nginx-gateway-api-migration Sat, 10 Oct 2026 07:00:00 GMT Kubernetes & platform Ingress NGINX has been archived and unpatched since March 2026. How to scope the work, choose a Gateway API implementation and move traffic gradually, with fast rollback. https://devsecops.cz/en/blog/ai-act-digital-omnibus https://devsecops.cz/en/blog/ai-act-digital-omnibus Thu, 08 Oct 2026 07:00:00 GMT Regulation The Digital Omnibus moved high-risk AI systems to December 2027. But Article 50 transparency, the prohibitions and AI literacy still apply. What IT should do now. https://devsecops.cz/en/blog/deployment-automation-ai-era https://devsecops.cz/en/blog/deployment-automation-ai-era Thu, 30 Jul 2026 07:00:00 GMT Kubernetes & platform AI writes code several times faster, but the path to production never changed. Project templates, Kubernetes templating, GitOps, and automated rollback. https://devsecops.cz/en/blog/terraform-ai-agents-module-design https://devsecops.cz/en/blog/terraform-ai-agents-module-design Thu, 30 Jul 2026 07:00:00 GMT Kubernetes & platform Measurements across five production repos on AWS and Azure: 169 shared-module references, zero pinned versions, zero tests. And how to keep consistency without spaghetti code. https://devsecops.cz/en/blog/cicd-security https://devsecops.cz/en/blog/cicd-security Fri, 06 Feb 2026 07:00:00 GMT Security Comprehensive guide to CI/CD pipeline security - secrets management, security gates, secure deployment, and DevSecOps integration. https://devsecops.cz/en/blog/cloud-security-aws https://devsecops.cz/en/blog/cloud-security-aws Fri, 06 Feb 2026 07:00:00 GMT Cloud Comprehensive guide to AWS cloud infrastructure security - IAM, access management, security groups, roles, and enterprise best practices. https://devsecops.cz/en/blog/container-security https://devsecops.cz/en/blog/container-security Fri, 06 Feb 2026 07:00:00 GMT Security Comprehensive guide to Docker container and Kubernetes cluster security - image scanning, runtime protection, secrets management, and network policies. https://devsecops.cz/en/blog/dast-dynamic-testing https://devsecops.cz/en/blog/dast-dynamic-testing Fri, 06 Feb 2026 07:00:00 GMT Security Dynamic Application Security Testing - penetration testing of running applications, OWASP ZAP, Burp Suite, and runtime security automation. https://devsecops.cz/en/blog/getting-started https://devsecops.cz/en/blog/getting-started Fri, 06 Feb 2026 07:00:00 GMT Security A comprehensive beginner's guide to DevSecOps - what you need to know, which tools to use, and how to implement security into your DevOps process. https://devsecops.cz/en/blog/iac-security https://devsecops.cz/en/blog/iac-security Fri, 06 Feb 2026 07:00:00 GMT Security Terraform security scanning, policy as code, GitOps principles, and IaC best practices for secure infrastructure deployments. https://devsecops.cz/en/blog/sca-dependency-scanning https://devsecops.cz/en/blog/sca-dependency-scanning Fri, 06 Feb 2026 07:00:00 GMT Security Everything about Software Composition Analysis and dependency security - SBOM, third-party library scanning, Snyk, and Dependabot. https://devsecops.cz/en/blog/security-best-practices https://devsecops.cz/en/blog/security-best-practices Fri, 06 Feb 2026 07:00:00 GMT Security How to implement layered security in your applications and infrastructure using the Defense in Depth approach and least privilege principles. https://devsecops.cz/en/blog/security-monitoring-logging https://devsecops.cz/en/blog/security-monitoring-logging Fri, 06 Feb 2026 07:00:00 GMT Security Complete guide to security monitoring and logging - CloudTrail, CloudWatch, SIEM integration, and automated alerting for incident detection. https://devsecops.cz/en/blog/vulnerability-management https://devsecops.cz/en/blog/vulnerability-management Fri, 06 Feb 2026 07:00:00 GMT Security Complete guide to vulnerability management - DefectDojo, CWE, prioritization, remediation, and DevSecOps pipeline integration. https://devsecops.cz/en/blog/infrastructure-chaos-before-ai https://devsecops.cz/en/blog/infrastructure-chaos-before-ai Sun, 01 Feb 2026 07:00:00 GMT AI AI won't fix your infrastructure problems - it will multiply them. Why IT managers must address infrastructure chaos before adopting AI tools. https://devsecops.cz/en/blog/kubernetes-zero-downtime-deployment https://devsecops.cz/en/blog/kubernetes-zero-downtime-deployment Sun, 01 Feb 2026 07:00:00 GMT Kubernetes & platform Learn how to achieve zero-downtime deployments in Kubernetes using rolling updates, blue-green deployments, and canary releases. https://devsecops.cz/en/blog/owasp-top-10 https://devsecops.cz/en/blog/owasp-top-10 Thu, 15 Jan 2026 07:00:00 GMT Security The current OWASP Top 10: new categories for the software supply chain and exceptional conditions, SSRF merged into access control. What changed since 2021 and how to defend. https://devsecops.cz/en/blog/sast-static-analysis https://devsecops.cz/en/blog/sast-static-analysis Thu, 01 Jan 2026 07:00:00 GMT Security Complete guide to Static Application Security Testing - tools, best practices, CI/CD integration, and automatic vulnerability detection.