CIQ Blog: What's New in Enterprise Linux & AI Infrastructure
We're a team of scientists, Linux geeks, technologists, pilots, designers and more with a mission to make infrastructure something you never have to think about.

Routing LKRG runtime events into Wazuh from RLC Pro Hardened
LKRG — the Linux Kernel Runtime Guard, included in RLC Pro Hardened — watches the kernel from the inside and flags exploitation the moment it happens: a privilege escalation attempt, or credentials…

Own your Enterprise Linux lifecycle without hand-managing content views
Enterprise Linux teams make the same decision every time they update, whether they run 200 hosts or 20,000. The cadence is managed by the team, daily for some fleets and one Tuesday a month for others…

Why BOD 26-04's three-day window assumes runtime kernel monitoring
Federal teams running RLC Pro Hardened detect kernel-level exploitation while a patch is still in testing. BOD 26-04's three-day clock starts when a vulnerability enters the Known Exploited…

A Fortune 500 payments company cut licensing costs without recertifying a single application
Inside the migration that cut a Fortune 500 payments company's OS licensing costs by more than 40%, without touching a single production workload Every enterprise running RHEL at scale is having some…

A global high-frequency trading firm runs its own kernel team, and still chose RLC Pro
Inside the year-long test a global high-frequency trading firm gave CIQ, and what it took to turn a one-year renewal into a three-year commitment The hardest Enterprise Linux customer to win is the…
Monthly newsletter
No spam. Just the latest releases and tips, interesting articles, and exclusive interviews in your inbox every month.
Read about our privacy policy.

Rocky Linux or RLC Pro Hardened: what CISA's OSS guidance means for your kernel
CISA's new Open Source Software: Security Principles and Practices guide gives federal agencies a clear set of expectations for open source software: assess it before adoption, understand who…

What PEARC26 told us about the future of research computing
PEARC wrapped its tenth year in Minneapolis this week, and the theme organizers chose, Resilient Roots + Empowered Communities, turned out to describe the week better than most conference themes…

NASA's Flight Sciences Lab runs its most demanding missions on Rocky Linux
Inside the Enterprise Linux environment supporting Artemis II, ISS dockings, and NASA's return to the moon At PEARC26, our booth was standing room only for one talk. Jeff Triplett, Flight Sciences Lab…

Three days to remediate: what BOD 26-04 asks of federal Linux teams
On June 10, 2026, CISA set a three-calendar-day remediation clock for the highest-risk vulnerabilities on federal systems. Binding Operational Directive (BOD) 26-04 replaces the old severity-score…

Ascender Registry: a content hub you actually own
Here is an uncomfortable question. The collections and container images your playbooks pull every time they run, where do they actually come from? For most fleets the honest answer is the public…

BOD 26-04: three days to patch, and a harder question underneath
In June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) rewrote how federal agencies handle their worst vulnerabilities. The inference here is that Binding Operational Directive (BOD…