InfoQ - Cloud Security - News

Vault Fork OpenBao Adds External Keys and Quantum-Ready TLS

Matt Saunders — Fri, 06 Nov 2026 09:00:00 GMT

OpenBao has released version 2.7, adding read scaling for PostgreSQL-backed deployments, support for external hardware security module (HSM) and key management service (KMS) keys, and post-quantum cryptographic algorithms. The release also introduces control groups for human review of sensitive operations and new headers intended to keep requests consistent across load-balanced OpenBao nodes.

By Matt Saunders

Shopify Overexposed Scans GKE Ingresses and Cloud Run for Exposure

Claudio Masolo — Mon, 02 Nov 2026 09:00:00 GMT

Shopify has introduced Overexposed. This internal scanner locates Kubernetes Ingresses on GKE and Cloud Run services. It checks for those that are accessible from the internet without authentication.

By Claudio Masolo

Google Adopts DPoP to Strengthen OAuth 2.0 against Token Theft and Replay Attacks

Sergio De Simone — Thu, 29 Oct 2026 19:00:00 GMT

Google's OAuth Platform has recently introduces support for Demonstrating Proof-of-Possession (DPoP), an OAuth 2.0 security mechanism designed to mitigate token theft and replay attacks.

By Sergio De Simone