360SOFTY

Insights

Engineering Insights

Practical writing on software architecture, SaaS products, AI automation, legacy modernisation, and the business of building reliable systems.

RSS

Curated links from external sources — not 360Softy original articles.

ExternalObservability
Grafana Blog

Spend less time on repetitive tasks with the new automation feature in Grafana Assistant

The ability to schedule regular tasks, such as cron jobs, has been around for decades. So why are we still running the same AI prompts by hand every day? As you use Grafana Assistant, our AI-powered observability agent, to stay on top of the state of your system, you likely find yourself asking the same questions. Maybe you want to know what changed overnight, or whether yesterday's deployment hurt latency, or which dashboards or skills are drifting out of date. These are important prompts, but

Grafana BlogRead original
ExternalSoftware Engineering
DZone

From Indicators to Insights: Automating IOC Enrichment Using Python and Threat Feeds

https://dzone.com/articles/everything-you-should-know-about-apisSecurity operations frequently revolve around indicators of compromise (IOCs): technical artifacts or observables that suggest an attack is imminent, underway, or that a compromise may have already occurred. NIST defines an indicator of compromise in these terms, and the IETF highlights that IOCs have lifecycles and operational limitations that affect how reliably they can be used for defense. The practical implication is that enric

External
The Hacker News

Malicious npm Package Stole Files From Claude AI User Directory via GitHub

Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities. According to OX Security, the package, named "mouse5212-super-formatter," is designed to upload files from "/mnt/user-data," a dedicated directory used by Anthropic's Claude artificial intelligence (AI) tool to handle uploads and outputs in the background. The

The Hacker NewsRead original
ExternalSoftware Engineering
DZone

Docker Hardened Images Are Free Now — Here's What You Still Need to Build

The Problem Isn't the Image Hardened container images are no longer niche. Docker open-sourced major portions of the tooling behind Docker Hardened Images under Apache 2.0 in late 2025. Chainguard and Google's distroless variants sit in the same space. The pitch across all three: fewer packages, smaller attack surface, dramatically lower CVE counts. The pitch is accurate. It is also incomplete. Most container security failures are not image failures. They are governance failures:

ExternalCloud
AWS Compute Blog

Migrating your Java applications to AWS Graviton using AWS Transform custom

For Java applications, modern JVMs like Amazon Corretto and OpenJDK are highly optimized for Arm64 and modern applications that are pure Java often require zero changes to run on Graviton. In many cases, applications aren’t fully modernized or purely Java and have a range of dependencies. When you’re responsible for migrating workloads, it’s helpful to […]

AWS TransformGravitonJava
AWS Compute BlogRead original

Work with 360Softy

Building a SaaS product, AI system, or business platform?

Book a free consultation and we will tell you honestly whether we can help.