Shortening patch cycles: why 48h is no longer optional for critical CVEs

Thu, 28 May 2026 10:00:00 +0200

The most critical vulnerabilities are being exploited within hours. Here is how to restructure your patch cycles to respond in under 48 hours.

Connecting to an Azure database without direct access using socat and kubectl port-forward

Wed, 27 May 2026 10:00:00 +0200

In professional environments, Azure databases (PostgreSQL, MySQL, SQL Server…) are often exposed exclusively via a Private Endpoint: they are only reachable within the Azure private network, with no public IP. The result: from your development workstation, it is impossible to connect directly using a client like DBeaver or psql.

However, the AKS cluster (Azure Kubernetes Service) running in the same VNet does have access. This guide explains how to leverage that fact to create a secure tunnel to the database, without modifying any network rules or opening a single public port.

Security on Patoune-IT

Shortening patch cycles: why 48h is no longer optional for critical CVEs

Connecting to an Azure database without direct access using socat and kubectl port-forward