OVHcloud’s CLI Release Tags Didn’t Change. The Files Under Them Did.
Release tags on OVHcloud’s CLI stayed the same while the binaries under them changed. What the incident shows about verifying what your pipelines fetch.
-
-
Ransomware Production Shutdown: The Question Protection Plans Never Ask
A ransomware production shutdown doesn’t require touching a single machine on the plant floor. When ransomware hit Coca-Cola’s Fairlife operations, U.S. production was temporarily suspended after the company disclosed unauthorized third-party access to a portion of its systems, including production-related systems. Coca-Cola has not publicly established that plant-floor machinery itself was encrypted or disabled —…
-
The EU’s Huawei Ban Isn’t a Procurement Decision. It’s a Dependency Inventory Problem.
The EU Huawei ban is entering its most consequential phase yet. On May 4, 2026, the European Commission reissued a recommendation it first made in 2020: keep Huawei and ZTE out of critical telecom infrastructure. Nothing about that repetition was accidental. It was the public-facing half of a much harder structural shift — a January…
-
The System Recovered. Your Recovery Boundary Didn’t.
Every disaster recovery program is built on the same unexamined assumption: that restoring the system restores the recovery boundary the organization actually needs back in service. That assumption held for twenty years. It doesn’t hold anymore, and most recovery programs haven’t noticed. The Assumption Ask any infrastructure team what “recovery” means and you’ll get some…
-
The Browser Is Quietly Becoming Infrastructure
Enterprise browser infrastructure has been accumulating architectural responsibility for years without anyone formally assigning it. The cloud strategy question most organizations haven’t asked is not whether to deploy a managed browser — it’s whether anyone in the architecture function actually owns what the browser has become. The answer, in most enterprises, is no. The browser…
-
