Security

Track security updates covering vulnerabilities, auth, and configuration risks.

Browse by category

There are currently 21 articles in this category. Start with any entry and expand through tags when you want nearby topics.

.NET October 2026 security update: getting runtime fixes into deployed apps

Updates for .NET 8, 9, 10 and .NET 11 RC3 address Brotli and Linux tarball ownership issues, plus incomplete October 13 fixes. Deployment mode determines how those fixes reach running apps.

Security Vulnerability

2026-10-25

Preparing for password rotation in CloudNativePG 1.31: Secrets and reconnections

Password generation and renewal have been implemented for DatabaseRole in the upcoming CloudNativePG 1.31. Explore how database-enforced expiration interacts with Secret delivery and application reconnections before adopting this unreleased feature.

Cloud Security Cloudnativepg

2026-10-24

Bot monitoring after the Yandex outage: activity can outlive its network

Cloudflare observed reduced search crawling and automation moving between networks during the Yandex outage. The incident shows why monitoring should combine ASN traffic with JA4 and request behavior.

Cloud Security Cloudflare

2026-10-14

Look beyond cybersecurity job titles: Finding your next skill with AWS stories and NICE

AWS career stories highlight security work in risk assessment, threat detection, and satellite operations. The NICE Framework helps turn that broader view into a concrete next step by separating tasks, knowledge, and skills.

Security Cybersecurity Careers

2026-10-13

Enforcing ML-DSA policy on AWS with KeySpec, SCPs, and IAM

AWS illustrates how kms:KeySpec can restrict both creation and use of ML-DSA keys. This guide connects that control to SCP scope, certificate provisioning, and cryptographic operations outside KMS.

Cloud Security AWS KMS

2026-10-12

PgBouncer 1.26.0 security fixes: pre-authentication outages and upgrade planning

PgBouncer 1.26.0 fixes three CVEs, including two reachable before authentication. SCRAM conditions, temporary mitigations, and removal of online restart show why the pooler needs its own upgrade plan.

Security Vulnerability

2026-10-02

npm dist-tags gain OIDC support: separate publishing from promotion

npm trusted publishing now offers a separate, opt-in permission for dist-tag operations. With a supported CLI and explicit authorization, workflows can update release tags without a long-lived access token.

Security Npm

2026-09-30

GitHub Proof of Presence: Entra ID challenges and the two-hour session

GitHub announced a Proof of Presence public preview for EMU enterprises using Entra ID. Understand how IdP challenges protect sensitive actions, how MFA differs from re-authentication, and what the two-hour session means for adoption.

Security Github

2026-09-24

Microsoft NuGet certificate rotation: update CI trust while keeping older certificates

Microsoft announced a NuGet author-signing certificate transition starting September 23, 2026. Environments enforcing signer allow lists or certificate fingerprint checks need to add the new certificate while retaining older ones.

Security Dotnet

2026-09-23

Controlling AI agent access with Boundary: credentials and sessions

HashiCorp frames AI agent access as part of enterprise identity, access, and audit controls. Boundary documentation helps explain why target authorization, credential injection, and termination of existing sessions need separate design decisions.

Cloud Security Hashicorp Boundary

2026-09-22

Next.js previews 16.3.6 and 15.5.26: preparing for the security update

Next.js plans an out-of-band release of 16.3.6 and 15.5.26 on September 22, 2026, for a critical issue in an upstream dependency. Teams can inventory deployed versions and prepare upgrades while awaiting the full advisory.

Next.js Security Vulnerability

2026-09-21

Where EKS tenant isolation is enforced: understanding ReadyOn’s Four Walls

ReadyOn combines namespaces, dedicated nodes, VPC security groups, and dedicated Aurora clusters for tenant isolation. This article explains where access is stopped and how to validate the boundaries.

Cloud Security Amazon Eks

2026-09-18

Designing an AWS European Sovereign Cloud landing zone across the partition boundary

AWS European Sovereign Cloud needs its own identity, audit, and delivery foundations within aws-eusc. Learn which design patterns can be reused, which operational resources must be separate, and where official Control Tower guidance disagrees.

Cloud Security AWS

2026-09-16

GitHub Advanced Security extends configuration enforcement to organization owners

GitHub Advanced Security can now prevent organization owners from overriding enterprise security configurations. Choosing the enforcement scope still requires checking which settings are controlled, where they apply, and whether scanning runs.

Security Github

2026-09-15

What Abnormal AI’s email detection teaches about operating AgentCore sandboxes

Abnormal AI uses Amazon Bedrock AgentCore Code Interpreter for agents handling difficult email classifications. Its tiered pipeline illustrates how routing, permissions, networking, and session lifetime shape production use.

Cloud Security AWS

2026-09-14

Why PostgreSQL lo_compat_privileges Should Stay Off—and How to Fix LO Permissions

Setting `lo_compat_privileges = on` disables key large-object privilege checks introduced in PostgreSQL 9.0. This article shows how to inspect the effective setting, audit ownership and ACLs, and fix the underlying mismatch with least privilege instead of hiding permission errors.

Security Postgresql

2026-08-27

Bridging Basic Authentication in AgentCore Gateway Without Exposing Credentials to the Agent

AWS published an interim AgentCore Gateway pattern that validates an inbound Bearer JWT in a request Lambda interceptor and builds Basic authentication from a service account in Secrets Manager. This article explains the isolation benefit and the remaining TLS, least-privilege, logging, and rotation requirements.

Cloud Security Amazon Bedrock Agentcore

2026-08-27

Preparing for AWS ACM Email Validation Retirement: Migrate to DNS Without Changing the ARN

AWS Certificate Manager will end email validation for new public certificate requests on March 31, 2027 and renewals on September 30, 2027. Eligible certificates can migrate to DNS validation without changing their ARN, using a 72-hour validation window.

Cloud Security AWS Certificate Manager

2026-08-16

AWS Europe (London) renews its 2026 PASF accreditation: what the facility audit covers

AWS Europe (London) renewed its Police-Assured Secure Facilities (PASF) accreditation, which the Police Digital Service confirmed on May 28, 2026. The renewal continues assurance at the facility layer, while workload configuration and data handling still require each customer organization's assessment.

Cloud Security AWS

2026-08-16

Docker Joins NVIDIA Open Secure AI Alliance

Docker announced on July 30, 2026 that it has joined NVIDIA's Open Secure AI Alliance. The useful reading is that trust in AI agents is being framed around runtime, identity, governance, and security, not just the model itself.

Security Docker

2026-08-04

Reading the June 2026 AWS CIRT Threat Technique Catalog Update

AWS Security Blog published an article on June 29, 2026 about the June 2026 Threat Technique Catalog update, based on repeated incident response patterns seen by AWS CIRT. The provided source context does not include specific technique names or affected services, so this draft treats the post as a source to review against your own AWS environment.

Cloud Security AWS

2026-07-29