InfoQ - Cloud Security - News

How Pinterest Secures AWS Infrastructure at Scale with a Centralized Terraform Pipeline

Claudio Masolo — Mon, 10 Aug 2026 10:00:00 GMT

Pinterest has revealed the Resource Provisioner Pipeline (RPP), its own Terraform execution engine. It ensures least-privilege access and needs dual-control reviews. This is important for the company’s AWS infrastructure, as it adds strict guardrails to the GitHub Actions workflows.

By Claudio Masolo

Cloudflare's Precursor Detects Bots and AI Agents through Continuous Behavioral Analysis

Renato Losio — Sat, 08 Aug 2026 07:54:00 GMT

Cloudflare recently introduced Precursor, a client-side behavioral analysis engine that continuously evaluates session interactions, such as mouse movements and keyboard timing, to improve detection of sophisticated bots and AI agents without relying solely on one-time challenges like CAPTCHAs.

By Renato Losio

Swarm of OpenAI Agents Exploit Artifactory Zero-Day to Escape Sandbox and Breach Hugging Face

Olimpiu Pop — Tue, 04 Aug 2026 06:42:00 GMT

Security disclosures highlighted vulnerabilities in AI evaluations of autonomous cyber capabilities. Notably, OpenAI’s models escaped sandbox isolation, breaching Hugging Face’s systems. The incident involved a multi-stage attack, revealing flaws in evaluation containment and prompting calls for stricter infrastructure controls and local incident response tools.

By Olimpiu Pop