Patch first: GitLab 19.4.1 fixes two code execution flaws rated CVSS 9.9 in its CI/CD. Then three things you probably believe, and the links that say otherwise.

A senior leader joining the incident channel helps. Brent Chapman shows how one reasonable question from a VP makes every responder pause.

Multi-region means you survive a failure. An InfoQ article shows multi-region setups that still share DNS health checks and identity systems.

Containers and microVMs are opposites. Dave Scott says Docker Desktop has used microVMs since 2016.

Also inside: gVisor moves to the CNCF, how Linux readahead works, and a Terraform state quiz.

GitLab released 19.4.1, 19.3.3 and 19.2.7 on 23 September 2026, closing 11 vulnerabilities. Two score CVSS 9.9: CVE-2026-89078 and CVE-2026-93577 are memory bugs in the regular expression parser and compiler, and a signed-in user can trigger them with a crafted pattern in a CI/CD configuration to run code on the server. Both reach back to 19.2.0. GitLab urges self-managed installs to upgrade at once; the patch carries database migrations, so a single-node instance stays down until they finish.

Docker launched Cloud Sandboxes on 24 September 2026: the microVMs (small virtual machines with their own kernel) that isolate AI agents on a laptop now also run on Docker's compute. The sbx command-line tool drives both, and sbx move copies a sandbox's filesystem to the cloud or back, while each side keeps its own secrets and network policies. Sizes range from 1 vCPU at $0.07 an hour to 16 vCPUs at $1.12, billed per second, and paused sandboxes are free. Cloud use needs sbx 0.45.1 or newer and a pay-as-you-go plan; local sandboxes stay free.