CIQ Blog: What's New in Enterprise Linux & AI Infrastructure
We're a team of scientists, Linux geeks, technologists, pilots, designers and more with a mission to make infrastructure something you never have to think about.

Three days to remediate: what BOD 26-04 asks of federal Linux teams
On June 10, 2026, CISA set a three-calendar-day remediation clock for the highest-risk vulnerabilities on federal systems. Binding Operational Directive (BOD) 26-04 replaces the old severity-score…

Ascender Registry: a content hub you actually own
Here is an uncomfortable question. The collections and container images your playbooks pull every time they run, where do they actually come from? For most fleets the honest answer is the public…

BOD 26-04: three days to patch, and a harder question underneath
In June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) rewrote how federal agencies handle their worst vulnerabilities. The inference here is that Binding Operational Directive (BOD…

Ascender Galaxy Proxy is now open source
Ascender Galaxy Proxy is now open source. Teams that run Ansible pull their collections through it and get local-speed downloads that hold up even when the public Ansible Galaxy service is busy. CIQ…

CMMC Phase 2 is suspended. NIST 800-171 is still in force.
Defense contractors hold the same compliance baseline today that they held before July 13. NIST SP 800-171 remains the control standard in contracts covered by the Defense Federal Acquisition…
Monthly newsletter
No spam. Just the latest releases and tips, interesting articles, and exclusive interviews in your inbox every month.
Read about our privacy policy.

Europe is building 35 AI supercomputers. The provisioning stack decides who controls them.
Research teams across Europe are about to bring more GPU capacity online in a single year than the continent has ever added at once, and the teams that provision it on infrastructure they govern will…

Introducing Reaqt: self-healing automation for Ascender Pro
A disk fills at 12:04 AM. Your nightly job notices at 2 AM. By then it isn't a warning anymore, it's an outage, and someone is awake running the exact playbook you already wrote to fix it. That gap is…

The new Ascender Pro: Fixes what breaks, proves what happened
Today CIQ is shipping the biggest update to Ascender Pro since it launched: a platform that watches your infrastructure, decides what to do when something breaks, proves what happened after the fact…

PQC on Linux: What federal contractors need before CNSA 2.0 deadlines hit
Starting January 1, 2027, any new acquisition of equipment for a national security system must ship compliant with the Commercial National Security Algorithm Suite 2.0 (CNSA 2.0) by default. That…

What the world's fastest computers revealed at ISC 2026
ISC High Performance wrapped last week in Hamburg, and the conversation on the floor was harder to ignore than usual. This was not a typical conference where the biggest news is a product refresh or a…

Cache, store, and run container images inside Fuzzball
You can run Fuzzball workflows without an external container registry. Fuzzball stores container images in its built-in object cache as ready-to-run Singularity Image Format (SIF) files. Images your…