Category
Technology with judgment: what actually moves the needle, no passing fads.
IEC 62443 is the international cybersecurity standard for industrial control systems (ICS) and OT networks. Its four series blocks define security zones and conduits, four protection levels (SL 1-4) and seven foundational requirements. NIS2 pressure is accelerating adoption across Europe. IT teams need to master it to coordinate network segmentation, monitoring and incident response with OT environments.
OpenTofu reached GA in January 2024 as an open-source Terraform fork under MPL 2.0, with Linux Foundation governance. Six months later, it is a stable drop-in replacement: same configs, same state format, same CLI. Version 1.7 adds native state encryption, the first real technical edge over Terraform.
Carbon-aware computing runs flexible workloads when grid electricity emits less CO2, cutting emissions 10-30% without changing infrastructure. Grid carbon intensity varies up to 16x by hour and region; tools like Electricity Maps, WattTime and the Carbon Aware SDK make that scheduling possible with real grid data.
cAdvisor is still embedded in kubelet and covers surface metrics, but falls short for production Kubernetes. The modern minimum stack pairs it with kube-state-metrics, node-exporter, Prometheus, and Grafana as a base, eBPF for deep network and syscall visibility, and OpenTelemetry for application context.
Sigstore has become the standard signing layer for OCI artefacts. GHCR is the best-integrated registry; Harbor 2.5+ and Quay offer native support; AWS ECR pushes its own KMS scheme. Verification earns its keep at three points: the cluster admission controller, the GitOps layer, and the CI/CD pipeline. The public Rekor has rate limits that force self-hosting past a certain build volume.
Deno Deploy is the serverless-edge platform from the team that built Deno: native TypeScript without a transpile step, standard Web APIs, and global deployment to ~35 regions. Cold start runs ~50ms vs Cloudflare Workers (~5ms). Best for lightweight APIs and Fresh/Astro SSR; less ideal when your project needs the full Cloudflare infrastructure stack.
