CIQ Blog: What's New in Enterprise Linux & AI Infrastructure
We're a team of scientists, Linux geeks, technologists, pilots, designers and more with a mission to make infrastructure something you never have to think about.
OpenAI generated 948 Linux kernel patches, but CVEs aren’t solved
Last week, OpenAI announced it had discovered 948 Linux kernel vulnerabilities and generated patches it offered to the upstream Kernel.org project. It’s a real milestone for AI in security, and it’s…
Parameter count won't pick your local LLM for hard questions
Across 11 local models on GPQA Diamond, active parameter count correlated negatively with score. Sparsity and release date failed too
How CIQ shipped CVE-2026-98432 fixes in three days
Our kernel team spent the last weekend of October shipping patched kernels for a critical Linux CVE. On Tuesday, October 27, Anthropic reported a working proof-of-concept exploit for CVE-2026-98432.…
Cost of CVE remediation is paid in roadmap time
A complex CVE like PHP2Shell pulls engineers off roadmap work. See what that work involves, and decide whose engineers should do it every day.
Tokens per second won't tell you what an answer costs on a Strix Halo
On a Strix Halo, a model 13x worse per token can be cheaper per answer. Per-answer cost, speed and active parameters across 27 local models
CIQ Stratum Kubernetes Engine: Kubernetes for the AI Era
CIQ Stratum Kubernetes Engine (SKE) installs, joins, and upgrades Kubernetes from one signed file on Enterprise Linux 9 or later. CIQ Stratum Pro adds fleet management.
AI-found CVEs: what PHP2Shell means for your triage
AI turned a parked 2024 PHP bug into remote code execution. Here is what AI-found CVEs change in triage, and why the fix is now the work that counts
Monthly newsletter
No spam. Just the latest releases and tips, interesting articles, and exclusive interviews in your inbox every month.
Read about our privacy policy.
One flag took Gemma 4 from 52% to 100% on a Strix Halo
Reasoning off took Gemma 4 from 52% to 100% on short tasks at one-eighth the cost. Plus a prompt change worth 41 points, and models that ignore both
From Samba to post-quantum cryptography: Jeremy Allison’s open source journey
Meet CIQ Distinguished Engineer Jeremy Allison and explore his journey from Samba to FIPS compliance, open source security, and post-quantum cryptography.
Patch PHP2Shell now and prepare for the next AI-found CVE
Six months ago, I wrote that vulnerabilities were going to come in waves. I undersold it. In April and May, Copy Fail, Dirty Frag, Fragnesia and CIFSwitch hit the Linux kernel. Researchers have kept…
Diagnose failed jobs and re-prioritize queued work in place with Fuzzball
Fuzzball names the failed rank in multi-node jobs, re-prioritizes queued work in place, and puts compute policy grants and deletion in the CLI.