Security

Track security updates covering vulnerabilities, auth, and configuration risks.

Browse by category

There are currently 6 articles in this category. Start with any entry and expand through tags when you want nearby topics.

Why PostgreSQL lo_compat_privileges Should Stay Off—and How to Fix LO Permissions

Setting `lo_compat_privileges = on` disables key large-object privilege checks introduced in PostgreSQL 9.0. This article shows how to inspect the effective setting, audit ownership and ACLs, and fix the underlying mismatch with least privilege instead of hiding permission errors.

Security Postgresql

2026-08-27

Bridging Basic Authentication in AgentCore Gateway Without Exposing Credentials to the Agent

AWS published an interim AgentCore Gateway pattern that validates an inbound Bearer JWT in a request Lambda interceptor and builds Basic authentication from a service account in Secrets Manager. This article explains the isolation benefit and the remaining TLS, least-privilege, logging, and rotation requirements.

Cloud Security Amazon Bedrock Agentcore

2026-08-27

Preparing for AWS ACM Email Validation Retirement: Migrate to DNS Without Changing the ARN

AWS Certificate Manager will end email validation for new public certificate requests on March 31, 2027 and renewals on September 30, 2027. Eligible certificates can migrate to DNS validation without changing their ARN, using a 72-hour validation window.

Cloud Security AWS Certificate Manager

2026-08-16

AWS Europe (London) renews its 2026 PASF accreditation: what the facility audit covers

AWS Europe (London) renewed its Police-Assured Secure Facilities (PASF) accreditation, which the Police Digital Service confirmed on May 28, 2026. The renewal continues assurance at the facility layer, while workload configuration and data handling still require each customer organization's assessment.

Cloud Security AWS

2026-08-16

Docker Joins NVIDIA Open Secure AI Alliance

Docker announced on July 30, 2026 that it has joined NVIDIA's Open Secure AI Alliance. The useful reading is that trust in AI agents is being framed around runtime, identity, governance, and security, not just the model itself.

Security Docker

2026-08-04

Reading the June 2026 AWS CIRT Threat Technique Catalog Update

AWS Security Blog published an article on June 29, 2026 about the June 2026 Threat Technique Catalog update, based on repeated incident response patterns seen by AWS CIRT. The provided source context does not include specific technique names or affected services, so this draft treats the post as a source to review against your own AWS environment.

Cloud Security AWS

2026-07-29