Explore weekly curated summaries and expert analyses highlighting the latest trends in cloud technology.

  • DeepSeek-V4.1-Flash squeezes the KV cache down to 890 bytes per token

    DeepSeek-V4.1-Flash looks like a minor version bump until you read what the team actually shipped. The new model is a 552B-parameter multimodal mixture-of-experts system that supports million-token contexts, and its whole design centers on one number: 890 bytes per token of global KV cache. That is roughly a quarter of what DeepSeek-V4-Flash needed in HBM…

  • The signing keys in US driver’s license barcodes were hiding in plain sight

    Flip over a US driver’s license and you will find a PDF417 barcode that encodes your name, birth date, license number, and a pile of jurisdiction-specific fields. Most states leave it as plaintext. A few sign it. Security researcher Ryan Fahey has now shown that for the states whose cards are made by Canadian Bank…

  • Azure Red Hat OpenShift moves the control plane out of your subscription

    Azure Red Hat OpenShift (ARO) is now available with hosted control planes in public preview. Red Hat announced the change on September 15, and it restructures where the most expensive and least visible part of your cluster actually runs: instead of three control plane virtual machines sitting in your Azure subscription, the control plane runs…

  • Revolut breach shows how a convincing government email can pull passports and transaction history

    Revolut has disclosed a data breach with an uncomfortable mechanism: the company itself handed customer data to the attacker. Someone emailed Revolut while impersonating a government agency, the request passed the company’s checks, and out went identity documents, selfies, and complete transaction histories for an undisclosed number of customers. The story broke via BleepingComputer on…

  • Cutting eBPF CPU cost by 90 percent with inode memoization

    A developer working on an eBPF-based security agent found that the most expensive thing his agent did was not enforcing policy decisions. It was figuring out which policy applied in the first place. The fix, an inode-level cache inside the kernel, cut kernel CPU cost by about 90 percent in benchmarks, and the whole thing…

  • Azure Functions Flex Consumption gets site-scoped certificates and end-to-end TLS

    TLS/SSL certificate support for Azure Functions Flex Consumption is now generally available. Microsoft announced the milestone this week alongside end-to-end TLS encryption support, and together the two close a gap that has kept some teams on the older App Service plans longer than they wanted to be. If you run function apps on custom domains,…