Vulnerability Insights: From Alert to Fix | Tanzu Platform 11.0

Originally aired live on November 6, 2026.V is for Vulnerability—and episode 100! V Körbes joins Nick Kuhn and Keith Lee to explore CVE rescoring in Tanzu Platform 11.0. David Zendzian (DMZ) joins the discussion later in the show. Building on the previous episode’s Vulnerability Insights demo, they examine why a CVSS base score alone does not tell the whole story and how platform context informs the severity assessment.CVEs, CVSS vectors, and the difference between base severity and environmental context.How Tanzu Platform’s security controls inform vulnerability rescoring.A Vulnerability Insights walkthrough connecting findings to affected components and applications.Using context to prioritize triage, upgrades, and remediation.Rescoring changes the severity assessment; it does not fix the underlying vulnerability. Product and security discussion reflects the original broadcast date.Watch the original video replay and follow the on-screen demoEpisode 99: Vulnerability Insights—From Alert to FixCVSS reference from FIRSTCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.Thanks for being part of 100 episodes! Watch, listen, and find show notes at cloudfoundryweekly.com.

Originally aired live on October 30, 2026.Security alerts are only the start. How do you find the affected apps and get them patched? Nick Kuhn and Darin Zook explore Vulnerability Insights in Tanzu Platform 11.0 and the path from an alert to a deployed fix.Recent PHP and Node.js vulnerabilities and the eMudhra/emSign certificate incident.A Tanzu Hub Vulnerability Insights lab demo to identify affected applications.Updating runtime buildpacks and rolling out fixes without application code changes or downtime.Certificate trust and the role of stack and stemcell updates.Security and product discussion reflects the original broadcast date. Halloween and upcoming-event references are from that live conversation.Watch the original video replay and follow the on-screen demoCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.Watch, listen, and find show notes at cloudfoundryweekly.com.

Originally aired live on October 23, 2026.What if deploying an AI agent looked like deploying any other app? Nick Kuhn, Darin Zook, and Keith Lee kick off our Tanzu Platform 11.0 coverage with zero-code agents and the path from prompt to production.Agent templates, buildpacks, model bindings, and familiar org-and-space workflows.Connecting agents to tools and data through MCP, skills, memory, and credential services.A walkthrough of an agent-based security review workflow.The pace of PHP and Node.js vulnerability disclosures, and how platform teams approach patching and restaging.Product and security discussion reflects the original broadcast date.Resources:Tanzu Platform 11.0 release notesAI Services release notesPHP news archiveWatch the original video replayCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.Watch, listen, and find show notes at cloudfoundryweekly.com.

Originally aired live on October 16, 2026.Every time we get one model running, three more show up. Nick Kuhn and Darin Zook return for The AI Catch-Up, sorting through the latest AI model releases and the challenge of keeping up with the hardware needed to run them.The latest model drops and OpenAI’s new math results.Darin’s homelab and agent experiments.Stories from the Midwest AI Summit and reflections on Cloud Foundry Summit.A Tesla Roadster detour, fresh Cloud Foundry Weekly branding, and ideas for community swag.Model, product, and event discussion reflects the original broadcast date.Watch the original video replayCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.Watch, listen, and find show notes at cloudfoundryweekly.com.

Originally aired live on September 22, 2026.Recorded live at Cloud Foundry Summit 2026 in Heidelberg, Germany, Nick Kuhn welcomes Beyhan Veli (SAP), Wayne E. Seguin (FiveTwenty), and V Körbes (Broadcom) for a conversation with the community about AI and platform security.The panel explores how AI changes vulnerability discovery and response, what faster exploit development means for patching, and how Cloud Foundry and BOSH can help teams automate updates, rotate infrastructure, and limit the impact of a compromise.AI-assisted security scanning and integrating defensive checks into CI/CD.The Cloud Foundry community’s vulnerability management and coordinated disclosure process.Agent sandboxing, frequent repaving, and reducing the time between discovery and remediation.Human review, quality control, and maintaining understanding of AI-generated code.Audience questions and the role of community collaboration in securing the platform.Conference references and forward-looking discussion reflect the original broadcast date. This recording includes live audience questions and room audio.Watch the original video replayCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.Watch, listen, and find show notes at cloudfoundryweekly.com.

Originally aired live on September 11, 2026.Darin and Keith join Nick fresh from Las Vegas to break down the Tanzu news from VMware Explore 2026.We recap agents, buildpacks and Tanzu platform updates, including the direction of agent sandboxes, governance, observability and AI-ready data foundations. The conversation looks at what was demonstrated at Explore and what the team is looking forward to next.Product previews, release expectations and conference announcements reflect the original broadcast date.Watch the original video replayCloud Foundry Weekly: episodes and linksCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.

Originally aired live on August 14, 2026.It’s Qwenmas! Nick and Darin unwrap Qwen and DeepSeek, then explore Bring Your Own Harness: building custom buildpacks for Tanzu Platform and Cloud Foundry to run the agent tools you choose.Building on the previous episode’s OpenCode experiments, we look at what a secure, hardened agent runtime can look like when the harness is yours, alongside the weekly recap and industry news.Conference announcements and model news reflect the original broadcast date.Watch the original video replayCloud Foundry Weekly: episodes and linksCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.

Originally aired live on July 24, 2026.Nick and Darin explore running Poolside’s Laguna-S-2.1 as a coding agent through OpenCode, served from a Tanzu Platform AI Services tile on their own Cloud Foundry foundation and GPUs rather than an external cloud model API.The demo treats AI as another bound service: a Cloud Foundry service key supplies the endpoint and token, while the opencode-tanzu plugin adds a Tanzu provider with live model discovery. We walk through installation, login, on-premises coding, and a model context-length issue encountered along the way.Conference announcements near the end reflect the original broadcast date.opencode-tanzu pluginPoolside Laguna-S-2.1-NVFP4OpenCodeWatch the original video replayCloud Foundry Weekly: episodes and linksCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.

Originally aired live on June 19, 2026.Cloud Foundry Weekly explores the secure container image offering in Tanzu Platform 10.4: what it is, how it works, and what it means for software supply chain security and compliance.Guest William joins the conversation about bringing Bitnami container images into the platform, making open-source dependencies easier to discover and deploy, and helping teams identify vulnerabilities in deployed images and find updates.The discussion connects the developer experience with platform operations, including image selection, visibility into the running environment, and the work involved in keeping dependencies current.Watch the original video replayCloud Foundry Weekly: episodes and linksCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.

Originally aired live on June 5, 2026.Morgan Fine joins Cloud Foundry Weekly for a deep dive into the AI Services updates in Tanzu Platform 10.4, continuing our exploration of the release and what it means for building and running AI workloads.We discuss agent buildpacks and the path from source code to a running agent, MCP gateways for connecting agents to tools and context, model hosting updates, and observability for AI workloads in production.The conversation closes with reminders about keeping systems updated and the then-upcoming Cloud Foundry event in Europe. Event dates and calls for proposals mentioned in the recording reflect the original broadcast date.Watch the original video replayCloud Foundry Weekly: episodes and linksCloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.