Lighthouse AdvisorySLED AI Adoption Intelligence

Strategic PartnersIssue 122 records

NetApp

Two vendor-sourced NetApp signals for 10 November; no new U.S. SLED deployment evidence. NetApp named Netherlands-based Nebul as the first neocloud to adopt Novus and said Novus is generally available. The release gives no performance, scale or contract figures, independent commentary still calls the 100 TB/s figure unbenchmarked, and Nebul also runs DDN storage, so U.S. public-sector relevance is limited. NetApp's critical kernel advisory NTAP-20261102-0001 changed twice. v10.0 adds the newest StorageGRID appliance BMCs (SG6260/SGF6212/SG120/SG1200) as Affected with no fix. v9.0 corrected the AFF/ASA/FAS BMC fix links, reversing the A1K-family and A50-family firmware mapping reported in the 9 November edition.

Evidence records
2
Cross-source patterns
0
Evidence classes
2 vendor claim
Outcomes
1 emerging1 cautionary
Source freshness
2 new this fortnight
Research completed
2026-11-11

Choose a role to see its takeaway beside every record in the ledger.

Patterns across the evidence

Synthesis · Lighthouse Advisory interpretation

No pattern claimed

The evidence in this edition did not support a cross-source pattern. Each record below stands on its own.

Evidence ledger

Full record · every source keeps its link and limitations

2 records
  1. Vendor claimEmergingNew this fortnight

    NetApp names Nebul as first neocloud on Novus and states Novus is generally available; no performance, scale or contract data disclosed

    NetApp announced on 10 Nov that Nebul, a Netherlands-based AI-native cloud provider, is the first neocloud to adopt NetApp Novus, and states Novus is now generally available. NetApp repeats its design figure of up to 100 TB per second of aggregate throughput and says Novus scales performance, capacity and concurrency independently under one namespace. Because Novus is built on ONTAP, NetApp says ONTAP customers can extend existing data estates into sovereign cloud environments while keeping jurisdiction and access policies. A NetApp executive cites government, healthcare and biotech compliance and multi-tenancy needs. The companies say they are 'exploring opportunities'; no contract value, deployed capacity, GPU count, go-live date or measured results are given. Why now: first named Novus customer and first explicit general-availability statement, published after the last NetApp run; not in the archive.

    NetApp; Nebul (European AI-native cloud provider)Netherlands / European Union; no U.S. deployment stated2026-11-10 (NetApp press release dated San Jose, November 10, 2026)

    Why it matters, evidence and limitations
    Why it matters
    Interpretation, limited applicability: this is a European sovereign-cloud deal, not a U.S. SLED deployment. The relevant signal for U.S. research universities and state agencies is that Novus has moved from launch to a named production adopter, and that NetApp is positioning ONTAP data-estate extension into third-party GPU clouds under existing access policies. Research-computing teams evaluating GPU-as-a-service or campus AI factories can ask whether a provider runs Novus, but should not treat this release as evidence of performance or public-sector fit in the U.S.
    Evidence and measured results
    Vendor press release only for the adoption itself; Nebul's own copy (dated Leiden, 10 Nov) repeats the same text. Independent commentary (Tech Thought Leaders, 5 Oct 2026, written by a SUSE product-marketing manager) says the 100 TB/s figure is a vendor claim no independent benchmark has reproduced; archived Futurum and ITdaily analyses make the same point. A DDN blog (21 Oct 2026) states Nebul already runs DDN Infinia under its inference stack for KV cache, and that Centric, whose software supports about 70% of Dutch municipalities, uses Nebul for sovereign inference, so Nebul is a multi-vendor storage environment and Novus' role there is unspecified. No benchmark, utilization figure or customer measurement for Novus at Nebul was found.
    Limitations and uncertainty
    Vendor-claim. 'Fastest storage on the planet' and 100 TB/s are NetApp design claims without disclosed test conditions. Release includes a forward-looking disclaimer. European sovereignty framing (EU jurisdiction, CLOUD Act concerns on Nebul's government page) does not map directly to U.S. state requirements such as CJIS or FedRAMP-equivalent state programs. Cross-stream note: DDN and NVIDIA appear only as context.
    Vendor press release (NetApp), cross-checked with Nebul's copy and independent commentary Role takeaways & implementation
  2. Vendor claimCautionaryNew this fortnight

    NetApp advisory NTAP-20261102-0001 v10.0: newest StorageGRID appliance BMCs (SG6260/SGF6212/SG120/SG1200) now Affected with no fix; v9.0 swaps the AFF/ASA/FAS BMC fix links

    NetApp revised its critical Linux kernel advisory (CVE-2026-98432, CVSS 3.1 9.8, remote unauthenticated root command execution, status Interim, NetApp aware of public discussion) twice on 10 Nov. v9.0 'Corrected fix links' for the two current AFF/ASA/FAS BMC families: the JSON now maps A1K/A90/A70/C80/FAS90/FAS70 to SP_FW_308-11102_18.7P2 and A50/A30/A20/C60/C30/FAS50 to SP_FW_308-11101_19.5P2, the reverse of the v8.0 mapping. v10.0 moves StorageGRID BMC SG6260/SGF6212/SG120/SG1200 (NetApp's newest StorageGRID appliance generation) to Affected Products, with no fix listed; SG6160/SGF6112/SG110/SG1100 BMCs remain Affected without a fix. Listed fixes are still only the two AFF/ASA/FAS BMC packages and E-Series SANtricity 11.90R7/12.10R1. ONTAP 9, AIDE and Trident remain Not Affected; A250/500f/C250 BMCs and SolidFire/HCI items remain Investigating.

    NetApp Product SecurityGlobalInitial release 2026-11-02; v9.0 and v10.0 both dated 2026-11-10

    Why it matters, evidence and limitations
    Why it matters
    StorageGRID is used by universities, research centers and state agencies as an S3 object store for archives, backups, FabricPool tiers and AI data lakes. Owners of the newest SG6260/SGF6212/SG120/SG1200 appliances, often recent purchases, now have an exposed out-of-band management controller with no fix. Teams that scheduled AFF BMC updates from the v8.0 mapping (including from this publication's 9 Nov edition) should re-check which package applies to which platform.
    Evidence and measured results
    Official vendor advisory. Version 10.0, last-updated date, status, CVSS and exploitation statement confirmed on the headless-rendered advisory page; revision history, affected/fix/investigating lists and fix links read from the official adv_api JSON behind the page. KB CSG-28196 (StorageGRID) states StorageGRID exposes no MPTCP ports but the full KB requires sign-in. No independent exploitation telemetry for NetApp products was found.
    Limitations and uncertainty
    Vendor-claim advisory; status Interim and lists may change again. The rendered page shows only the overview tab, so revision and fix details come from the JSON endpoint. Firmware package names are inferred from download file names. The swap is inferred by comparing the 10 Nov JSON with the 9 Nov JSON saved by the previous run; NetApp's revision note says only 'Corrected fix links'. SG6260/SGF6212/SG120/SG1200 being the newest generation is interpretation from NetApp's model numbering.
    Vendor security advisory (official adv_api JSON cross-checked with rendered page) Role takeaways & implementation

How to read this edition

Source findings, measured results and limitations come from the cited publications. Patterns, operating questions, role takeaways and implementation considerations are Lighthouse Advisory interpretation, stated as questions to validate locally rather than guaranteed outcomes. Vendor and operator claims are labeled as claims. Full research method.

Vendor claim
A supplier-provided assertion that has not been upgraded to independent evidence.