InfoQ - Cloud Security

Presentation: Fixing the AI Infra Scale Problem by Stuffing 1M Sandboxes in a Single Server

Felipe Huici — Wed, 09 Sep 2026 11:00:00 GMT

Felipe Huici explains how Unikraft achieves millisecond cold boots, stateful scale-to-zero, and extreme density for sandboxing AI workloads. He discusses isolation primitives, Linux kernel optimizations, and snapshotting tricks, demonstrating how to maintain sub-10ms performance at scale while integrating seamlessly into Kubernetes environments with hardware-level security.

By Felipe Huici

Article: Implementing Chaos Engineering in Financial Payment Systems: Lessons from Enterprise ECS Deployments

Salim Adedeji — Tue, 08 Sep 2026 09:00:00 GMT

Standard chaos engineering assumes experiments stop cleanly, blast radius is knowable in advance, and production is fair game. Payment systems violate all three. Salim Adedeji describes ECS-specific failure modes from enterprise deployments: a 60-second DNS TTL that produced 93-second failover, retry logic amplifying database load 2.4x, and AZ rebalancing loops that generic tooling misses.

By Salim Adedeji

How Figma Uses AI Agents for Security

Renato Losio — Sun, 06 Sep 2026 06:59:00 GMT

The engineering team at software company Figma recently documented how they built AI agents to help their security team investigate alerts, search past incidents, check company systems, and even prepare code fixes. The agents learn from previous investigations, reducing repetitive work and helping engineers resolve complex alerts about 70% faster.

By Renato Losio

Beyond Zero: Google Publishes Successor to BeyondCorp

Renato Losio — Sat, 05 Sep 2026 10:40:00 GMT

In a recent research paper, Google introduced Beyond Zero, a “security model for the AI era” that extends Zero Trust to autonomous AI agents. The new approach moves access decisions from the application level to individual resources and actions, combining static authorization controls with dynamic AI-driven decisions to enable machine-speed enforcement for humans and agents.

By Renato Losio

Article: Eliminating Long-Lived Credentials in GCP with Workload Identity Federation

Shijin Nair — Mon, 31 Aug 2026 11:00:00 GMT

Long-lived GCP service account keys are secrets that must be managed forever, are hard to rotate, and are easy to leak. Scaling Workload Identity Federation to 120+ production projects shows why it changes how machine identity is approached entirely: keys are secrets to manage, federated identities are trust relationships configured once, gated by attribute conditions.

By Shijin Nair