Pedro Bados

Here’s how hackers exploited the OpenAI platform interface. See how these attacks work and how to defend against them at sonnylabs.ai/playground.

6

A SaaS business hit a growth plateau. One Apexx Sprint realigned their ICP, offers, and RevOps workflows → pipeline grew 25% in 8 weeks. Full case story here: [https://lnkd.in/d6KjYHr7]

1

Had to share this. 🔥 When 90% of providers are struggling to differentiate — and spreadsheets still haunt most delivery models — it’s time for something different. Re-Integrate isn’t just another product launch. It’s a bold move to unify security and compliance and finally prove business value. No subtlety needed. Let’s go. 👇 #ReIntegrate #SecurityAndCompliance #SaaS #Cybersecurity #ProductLaunch

2

We replaced Auth0 and Okta for a DACH SaaS platform. IAM costs dropped from hundreds of dollars a month to $60. That's a 90%+ reduction — using a Keycloak setup on AWS EKS, RDS, and ALB we designed and built as a dedicated team. Five years later, that same infrastructure supports 10× the original user base. Zero performance degradation. Zero downtime across six major infrastructure upgrades. Here's what most people miss about that outcome: → It wasn't possible as a fixed-price project. Nobody writes a spec that says "future-proof this for a decade of growth." Architecture decisions, Kubernetes upgrades, cost optimization — these don't fit inside a bounded scope. They require engineers with context. Engineers who remember why the original decisions were made. That's the difference between a vendor who delivers and disappears, and a team that grows with the product. The engagement model matters as much as the talent. 👇 Full breakdown of the dedicated team model — when it works, when it doesn't, and how to avoid getting burned — link in the first comment.

2

1 Comment

📊 Presales is a Business—Run It Like One Technical sales leaders don’t just support pipeline—they manage high-impact operations. To lead effectively, they need clear principles, reliable data, and tools purpose-built for presales. Inspired by The Sales Engineer Manager’s Handbook, here are 3 essentials: 1️⃣ Run Presales Like a Business Track return on effort across team skills, process activity, customer sentiment, and revenue influence. 2️⃣ Build & Retain Talent Use the RADAR model—Recruit, Attract, Develop, Advance, Retain—to grow a high-performing team. 3️⃣ Lead With Data Manage with visibility. Forecast risk, identify blockers, and drive investment with a presales source of record. At Cognogent, we’re building the solutioning platform that helps presales teams quantify their impact and scale smarter. 👉 Read more: https://hubs.la/Q03w59xc0 #Presales #SalesEngineering #PresalesLeadership #TechSales #Cognogent #SolutioningPlatform #RevenueOperations #CaptureManagement

3

Not jumping into the debate itself, but this post is a great summary of what’s actually going on in the cloud world. And from an #automation perspective it’s even more interesting — look at how many moving parts need to align, in the right order, under the right conditions. That’s where people often misunderstand “automation.” It’s not just a PowerShell script, a Bicep template, or a GitHub Action. It’s understanding the whole system: identity, security, compliance, data flows, lifecycle, failure paths, recovery, governance — and orchestrating all of that safely. And this is why automation matters: Because cloud environments are now too large, too interconnected, and too fast-moving for humans to manage manually. Without automation, you end up with config drift, security gaps, unreliable deployments, slow change cycles, and a lot of “hero-mode operations.” Good automation isn’t about typing commands. It’s about knowing what needs to happen, why it needs to happen, and how to make it happen reliably and securely at scale — every single time. And honestly — that’s exactly why I do what I do. This complexity, these connections, the problem-solving and refinement… that’s why I love automation. #automation #cloud #cloudengineer #automationengineer

18

Ever received a 50-page audit report that nobody read? ❌ Too much jargon. ❌ No business context. ❌ Vulnerabilities listed… but no guidance. That’s why many businesses don’t act on their security findings. At CyBrief, we write reports that: Explain risk in plain English Prioritize fixes by business impact Include step-by-step remediation guidance Because a report that doesn’t drive change… is just paperwork. 💡 What’s the worst security report you’ve seen? #SecurityAudit #InfosecIndia #WhereCybersecurityMeetsClarity

2

Teams chasing GDPR, HIPAA, or SOC 2 compliance aren’t failing because they lack policies. They’re failing because their processes make compliance the enemy of velocity. Developers tunnel through bastions. Slack bots approve sessions instead of queries. Sensitive tables are “protected” by blacklists that nobody trusts. Meanwhile, every audit demands more: traceability, masking, approval lineage, downstream integrity. The fix isn’t another ticket queue or dashboard. It’s embedding compliance into the way access already happens: code, Terraform, Slack, etc. That’s where unified access proxies are changing the equation: Granular approvals happen instantly at the query level, in-flight masking is context-aware, and audit logs are ready out of the box. Compliance shouldn’t slow teams down. It should prove they’re in control of every command and every approval, all the time. #PlatformEngineering #SRE #AccessGovernance #DataProtection #ComplianceAutomation #hoopdev

2

Less out-of-the-box features. Sounds like a bad deal until you think about it. 🤔 OVHcloud doesn't hand you a pre-packaged stack like the big hyperscalers. And that scares some people off. But flip it around: no pre-packaged stack means no one else decides how your infrastructure looks. You pick your tools, build your layers and actually create sovereignty on every level. You do need someone who knows how to wire it all together. That's where we come in. 😏 Miguel Losa shared our approach at the OVHcloud meetup hosted by Ontuned earlier this week. The open source tools we use to make it work: ✅ Playwright, Cypress and Selenium for automated end-to-end testing ✅ SonarQube for continuous code quality control ✅ Trivy for container & dependency vulnerability scanning ✅ Nexus as artifact proxy to govern dependencies ✅ Harbor as secure container registry ✅ ArgoCD for GitOps-driven, automated deployments Charbel HARB from OVHcloud walked through setting up a Kubernetes cluster on OVH, and Niels Van der Straeten showed what happens when you intentionally break them down with chaos engineering. That’s how we like it. 🔥 Doubting what a migration to OVHcloud would mean for your setup? We're mapping out the real impact right now. What’s included out of the box? And where do you need extra platform expertise. And what does it mean for your costs? Reach out to Kilian Niemegeerts to get some insights! 

22

3 Comments

Hardware fails. Files corrupt. Ransomware strikes. Keep your critical data safe! 💾🖥️🛡️ #FOSS pro Moreno Razzoli explains how to do #backups right, using the “3-2-1 Rule” and free #opensource tools like #BorgBackup. Dive into this article to learn more: https://lpi.org/npio Linux Professional Institute (LPI) #freesoftware #dataprotection #backupstrategy #FOSS #Linuxbackup #opensource #Linux #LPI #Morrolinux #vorta

26

Hardware fails. Files corrupt. Ransomware strikes. Keep your critical data safe! 💾🖥️🛡️ #FOSS pro Moreno Razzoli explains how to do #backups right, using the “3-2-1 Rule” and free #opensource tools like #BorgBackup. Dive into this article to learn more: https://lpi.org/npio Linux Professional Institute (LPI) #freesoftware #dataprotection #backupstrategy #FOSS #Linuxbackup #opensource #Linux #LPI #Morrolinux #vorta

14

The traditional SOC dilemma: hire expensive analysts and engineers, or surrender control to an MDR. Until recently, there wasn't a third option. AI-native platforms can now multiply your existing team's capacity without the headcount. Same coverage, faster response, lower cost. Filip Stojkovski's implementation guide breaks down how to evaluate, implement, and prove ROI - whether you're building from scratch, working with an MDR, or running a mature SOC. Download the guide: https://hubs.li/Q03WNYCW0 #SOC #SecurityOperations #AISOC #CyberSecurity

13

The AI Compliance Crisis Why 67% of CIOs Can’t Sleep It’s not the models that scare them. → It’s the lack of traceability. Audits ask one thing: → “Can you prove what happened - and why?” But most teams can’t answer that. No audit trails Scattered records Shadow tools Key steps stuck in people’s heads No visibility into model decisions That’s where the real risk lives. At Adeptiv AI, we help teams: → Track every step → Assign clear ownership → Build evidence as they go No drama. Just proof. Let’s turn panic into process. Let’s help CIOs sleep again. #AICompliance #RiskManagement #CIO #DataGovernance #AdeptivAI #AuditReady

13

2 Comments

Trying to digitize a bad process. Many companies believe that implementing a new system will automatically solve their problems. But putting a broken process into software doesn’t fix it. It just makes the same problems happen faster. In this short clip, Oleg Dimchenko, Presales Solution Advisor at CLARITY shares why companies should treat CPQ and enterprise system implementations as a chance to rethink their business processes – not just automate them. When business teams truly own the process, the result is simple: • better outcomes • happier users • stronger adoption Watch the full video: https://hubs.ly/Q046TrW10

22

2 Comments

Not based in the EU? Doesn’t matter. If your company builds, sells, or uses software, this affects you. The EU 𝗖𝘆𝗯𝗲𝗿 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝗰𝗲 𝗔𝗰𝘁 (𝗖𝗥𝗔) is a wake-up call for global software security. What makes CRA different? It mandates security-by-design and security-by-default for all digital products placed in the EU market: • Mandatory vulnerability handling policies • Required security support lifespan • Transparent SBOMs (Software Bills of Materials) • Faster reporting timelines for actively exploited vulnerabilities What this means in practice: ✅ Vendors must prove security, not just claim it ✅ Customers gain visibility into component-level risk ✅ Regulators can penalise non-compliance—even outside the EU if the product is sold there Why this matters beyond Europe: - If you're buying from vendors selling into the EU, your stack is affected - If you're a SaaS provider with EU clients, your processes must adapt - If you manage supply chain risk, CRA compliance will become a buying standard This isn’t just policy. It’s a blueprint for the future of secure software. And those who treat it like a regional checkbox will fall behind.

65

3 Comments

Entitlements: Every action in the cloud runs on these fine-grained permissions that decide who can do what with which resource. One misconfigured entitlement: privilege sprawl -> insider abuse -> breach. 👉 Check the Unosecur Glossary to learn more about entitlements and how they shape your identity security. (Link in comments) Santhosh Jayaprakash Timm Lotter nick terkay Pranav Vattaparambil Martijn Hoffmans #CloudSecurity #IAM #CIEM #IdentitySecurity #ZeroTrust #Unosecur

15

1 Comment

🎉 Over 50% of Wiz customers have achieved the remarkable milestone of joining the Zero Critical Club, signifying zero critical issues across their cloud environments. This accomplishment reflects a deep commitment to proactive security, operational excellence, and a culture of continuous improvement. Members like Sitecore and Fiverr have demonstrated that integrating security into daily workflows and democratizing responsibility across teams can lead to significant risk reduction. By leveraging Wiz’s centralized risk insights, these organizations have streamlined their remediation processes and fortified their cloud infrastructures. The journey doesn't end here. With initiatives like the Wiz All-Stars Club and MTTR streaks, customers are encouraged to maintain and enhance their security postures. These programs recognize sustained excellence and promote rapid response to emerging threats, ensuring that organizations remain resilient in the face of evolving challenges. #CloudSecurity #ZeroCriticalClub #WizSecurity #CyberResilience #DevSecOps #SecurityExcellence

2