Banning shadow AI is the most expensive reflex in IT security
Two-thirds of employees use AI, often without approval. Banning shadow AI forces it underground and increases risk. A plea for …
Tobias Massow
Tobias Massow is the Managing Director of Evernine Media GmbH and Editor-in-Chief of Cloudmagazin. He oversees the strategic direction of the magazine and the entire MBF Media network, comprising four B2B trade magazines for IT decision-makers in the DACH region.
24 articles
18 months without a fix: How an Argo CD vulnerability exposed the entire Kubernetes cluster
For 18 months, a gaping hole has remained unpatched in the Argo CD repository server, with no CVE assigned.
FinOps: Realistically Reducing Cloud Costs by 30 Percent
Lowering multi-cloud costs starts with visibility: tagging, showback, and the levers that make 30 percent savings realistic.
Midjourney’s Body Scanner is a Compute Problem
Cloud instead of clinic: Midjourney's full-body scanner stands and falls with image reconstruction in the computing cluster.
Germany’s Stack Goes Live: 250 Million Euros for the Federal AI Cloud
Germany's sovereign AI cloud: €250 million, T-Systems, SAP, StackIT, no US hyperscalers. What the Germany stack means for private operators.
Cloud-Broker Instead of Cloud Chaos: 30 Percent Lower Multi-Cloud Costs
As a German mid-sized company, we were able to cut around 30% of our multi-cloud costs using a cloud broker …
Separating NIS2 and DORA Compliance: A Compliance Cluster in Kubernetes
NIS2 and DORA require various obligations. Here's how cloud architects can implement both as separate compliance clusters in Kubernetes and …
If the AI Bill Blows Up the Cloud Budget
FinOps for AI workloads: Gemini's batch mode halves token prices, AWS Inferentia reduces GPU load. Multi-cloud strategies are cutting AI …
FinOps Sees Everything, But Can’t Do Anything: Why Cloud Waste Isn’t Decreasing
Despite FinOps, 25 to 35 percent of cloud waste persists everywhere-and the figure isn’t dropping.
Platform Engineering for Compliance: IDPs Enforce NIS2 and DORA
A mature platform automatically enforces NIS2, DORA, and AI Act requirements through Policy-as-Code and generates audit-ready configuration evidence.
AWS and Nvidia: GPU Surge Forces Platform Teams to Adapt
AWS, Microsoft, and Google are deploying Vera-Rubin and Blackwell GPUs. Here's what platform teams should budget for now, and which …
Kubernetes Governance: Policy-as-Code with OPA and Kyverno
By 2026, multi-cloud Kubernetes without Policy-as-Code will be a NIS2 compliance risk–tools like OPA Gatekeeper and Kyverno are embedding…
DRA Stability Forces GPU Workloads to Reimagine Themselves
&8211; Kubernetes 1.36 “Haru” has been generally available since April 22, 2026, and brings two changes that require immediate action …
C3A: How the BSI Makes Cloud Sovereignty Measurable
Cloud sovereignty becomes measurable: The BSI breaks it down into six verifiable dimensions with C3A.
Reboot Germany Cloud 2026: Funding and Digital Hubs Guide…
Funding programmes, digital centres and sovereignty criteria will shape the 2026 cloud‑provider shortlist for SMEs. Why STACKIT, Delos and SAP …
Platform Engineering 2026: Why IDPs Are the New CI/CD
Platform Engineering 2026 Mainstream. Backstage, Port.io, Humanitec. What a modern IDP delivers and how to build it.
Claude Mythos: When Code Proficiency Becomes a Security Weapon
Anthropic has built an AI model with Claude Mythos that identifies vulnerabilities in critical infrastructure. The model was not trained …
Deploying Gemma 4 locally: What Google’s open-source…
Google has released four open-source models with Gemma 4 that run on consumer hardware, and what this means for cloud …
European Commission Hacked: 350GB AWS Breach – 2nd in 30 Days
&8211; The European Commission confirmed on March 30 that attackers had compromised its public web infrastructure hosted on Amazon AWS. …
My First On-Call Shift: What No Bootcamp
&8211; Last year, a DevOps engineer friend called me at 2:17 a.m. on a Tuesday &8211; right after his first …
AI-Generated Terraform Code: The Cloud Stack’s Hidden Risk
&8211; AI-generated Terraform code is faster to write than to read &8211; exactly what makes it dangerous. Teams delegating their …
The Bitter Lesson for the AI Stack: 4 Audit Points Before…
&8211; Most enterprise AI stacks are over-engineered contraptions: thousands of tokens in system prompts, multi-stage RAG pipelines, hard-coded business rules, …
Claude Code Leaked: AI Agent Architectures Revealed
&8211; On March 31, 2026, the complete source code of Claude Code surfaced publicly &8211; not via a hack, but …
Pretext: Does a JavaScript Library Solve the Browser’s…
A JavaScript library built by a Midjourney engineer promises to radically accelerate text layout in the browser. 6,800 GitHub stars …
MBF Media Newsletter
The monthly briefing for decision-makers
Once a month, the MBF Media Newsletter gathers what matters from cloudmagazin, MyBusinessFuture, Digital Chiefs and SecurityToday, curated by the editorial team.
25,000 IT and business decision-makers read this newsletter. Read along.
Subscribe for free
