RWB Infra x Security Meetup Shares Recordings on GitLab Scaling, Kubernetes Bare Metal, Vault PKI and DevSecOps Platforms
On 3 October in Moscow, RWB hosted the Infra x Security Meetup, an event that brought together infrastructure and information-security specialists. The program was split into two parallel tracks, with eight talks delivered by company experts.
The infrastructure track opened with a session on scaling GitLab CE under rapidly increasing load. Andrey Shmelkov and Kirill Melnikov described how user, project and pipeline growth forced changes to architecture, performance tuning and backup-restore procedures, ultimately cutting cluster-migration time by a significant factor.
Alexander Vasilyev and Dmitry Sidorov presented the development journey of the company’s DCIM product, illustrating concrete trade-offs between implementation convenience, business requirements, deadlines and technical constraints.
Stanislav Gabenov explained how Vault was used to create a unified trust infrastructure, covering certificate lifecycle management, policy enforcement and automated issuance, rotation and revocation across the corporate environment.
The final infrastructure talk, delivered by Oleg Semenov, examined real-world differences between seemingly identical bare-metal servers, Intel versus AMD platform behaviour, Linux kernel versions and their impact on Kubernetes stability in production.
In the security track, Alexander Emelyanov described the evolution from simple pipeline scanning to an ASOC and later ASPM platform, stressing the need to involve development, platform and security teams together.
Maxim Yanson outlined vulnerability-management tooling that shortened remediation cycles and incorporated LLM-assisted analysis under the specific constraints of the company’s infrastructure.
Konstantin Chernyak discussed data protection once a single perimeter no longer exists, advocating a model built on Identity × Data × Context × Policy and tighter integration between Data Governance and Security.
The closing security session, presented by Alexander Chernykhov, showed how six engineers now manage access to one thousand systems with an average request-to-grant time of 90 seconds through role-based automation, repeatable processes and measurable metrics.
Full video recordings and presentation slides from every talk are available on YouTube and VK. RWB encourages readers to subscribe to its Telegram channel for announcements of future events.
Related articles
Russian Prosecutor's Office Withdraws Lawsuit Against Timur Turlov and Freedom Holding Corp.
The Tverskoy District Court in Moscow terminated proceedings after the Russian Prosecutor General's Office withdrew its administrative claim against Timur Turlov and several related entities. The court accepted the refusal on October 15, 2026, lifted all previously imposed asset restrictions, and ended the case without examining the merits. The original claim sought to seize hundreds of millions of dollars in assets, declare the defendants an extremist organization, and ban their activities in Russia. No reasons for the sudden withdrawal were provided during the preliminary hearing. The decision prevents the Prosecutor General's Office from refiling the same claim against the same parties on identical grounds under Russian administrative procedure rules. Freedom Holding Corp. stated it has no operations or assets in Russia and expressed surprise at the original filing. Timur Turlov, who holds Kazakh citizenship and serves as FIDE president, was listed among the defendants alongside Freedom Holding Corp., Freedom Finance Europe Ltd., and W-Empirical Holding Corp.
Cloud.ru Unveils Evolution Protection Platform for Detecting Cloud Misconfigurations
Cloud.ru has introduced its Evolution Protection Platform, a Cloud-Native Application Protection Platform (CNAPP) designed to identify risky configurations in cloud environments. The solution targets issues such as public storage buckets containing private data, excessive permissions on service accounts, and virtual machines with unnecessary internet exposure. A dedicated CSPM module continuously monitors configuration changes and runs automated checks without requiring agents on virtual machines. Organizations can apply predefined rule sets or build custom policies, with results accessible through the cloud platform interface and alerts delivered via email, APIs, or webhooks. The current release also incorporates security checks for AI agents built on Cloud.ru Evolution products. Additional features including DSPM for sensitive data discovery, vulnerability scanning for VMs and containers, and an AI risk prioritization assistant remain in development.
OpenAI Releases GPT-6.1 Terra: Cost-Effective Model Focused on Computer Control, Image Analysis and Practical Automation
OpenAI has launched GPT-6.1 Terra, a new model positioned between its high-end GPT-6 Astra and more affordable options in the GPT-6 family. The model emphasizes real-world computer interaction, visual understanding of documents and interfaces, and reduced error rates rather than raw reasoning benchmarks. It supports a 1.05 million token context window, image inputs, and tool use through the Responses API while cutting input token prices by half compared with its predecessor. Published benchmarks show substantial gains on Terminal-Bench 4.0, OSWorld 2.1 and Agents' Last Exam, with error rates dropping sharply at both low and maximum reasoning levels. OpenAI stresses that the model still requires human oversight for high-stakes actions and does not directly process audio or video. The release targets developers and enterprises seeking reliable automation of repetitive multi-step tasks at lower cost than flagship models.
Yandex Black October: How Architectural Flaws and Capacity Mismanagement Turned Data Center Losses Into a 11-Day Fintech Coma
In October 2026 three Yandex data centers in Central Russia were physically destroyed within days, triggering the collapse of Yandex Cloud and multiple core services. Between the first and third site failures engineers had 74 hours to restore quorum and rebalance workloads yet failed to do so because Control Plane components remained tied to the lost zone and spare capacity had been eliminated to cut costs. Core banking and BNPL systems entered Read-Only mode after losing quorum, forcing a complete stop-the-world reconciliation that lasted until 22 October. Backups stored inside the same regional S3 buckets proved unusable, resulting in a seven-day RPO and primary-key collisions after restoration. The incident exposed that Metro-Cluster designs had been incorrectly treated as full Disaster Recovery and that aggressive AP microservice patterns created logical split-brain conditions outside the database layer.