InfoQ - Cloud Security

Vault Fork OpenBao Adds External Keys and Quantum-Ready TLS

Matt Saunders — Fri, 06 Nov 2026 09:00:00 GMT

OpenBao has released version 2.7, adding read scaling for PostgreSQL-backed deployments, support for external hardware security module (HSM) and key management service (KMS) keys, and post-quantum cryptographic algorithms. The release also introduces control groups for human review of sensitive operations and new headers intended to keep requests consistent across load-balanced OpenBao nodes.

By Matt Saunders

Presentation: Zero Trust Agent Systems that Pass Audits and Still Ship

Advait Patel — Thu, 05 Nov 2026 11:00:00 GMT

Advait Patel shares a playbook for securing AI agent systems in production. He discusses moving defense boundaries from the prompt to the tool layer, enforcing scoped workload identities, and mitigating prompt injection via tool outputs. He explains how to structure audit-ready observability and implement kill switches to protect critical data while keeping deployment fast and compliant.

By Advait Patel

Shopify Overexposed Scans GKE Ingresses and Cloud Run for Exposure

Claudio Masolo — Mon, 02 Nov 2026 09:00:00 GMT

Shopify has introduced Overexposed. This internal scanner locates Kubernetes Ingresses on GKE and Cloud Run services. It checks for those that are accessible from the internet without authentication.

By Claudio Masolo

Google Adopts DPoP to Strengthen OAuth 2.0 against Token Theft and Replay Attacks

Sergio De Simone — Thu, 29 Oct 2026 19:00:00 GMT

Google's OAuth Platform has recently introduces support for Demonstrating Proof-of-Possession (DPoP), an OAuth 2.0 security mechanism designed to mitigate token theft and replay attacks.

By Sergio De Simone