InfoQ - Security

AWS Ships Continuum for Code Vulnerabilities

Steef-Jan Wiggers — Fri, 06 Nov 2026 10:00:00 GMT

AWS has made Continuum for code vulnerabilities generally available in two regions. The service proves exploitability by running real exploits in a sandbox, then opens fixes as pull requests. Published pricing charges per finding processed as well as per line of code, and practitioners are asking what would justify letting it merge fixes on its own.

By Steef-Jan Wiggers

Article: Identity as an Architectural Concern: Enterprise IAM Beyond Authentication

Vaishnavi Khosla — Fri, 06 Nov 2026 09:00:00 GMT

The way you design your identities will drive your data models, your service scope, and your revocation policies; enterprise identity management is thus an architectural problem, not an afterthought. Based on our experience in service account governance, this article touches upon graph vs. RBAC, integrating a vault you don't own, and bounding revocation latency for an event stream.

By Vaishnavi Khosla

Presentation: Zero Trust Agent Systems that Pass Audits and Still Ship

Advait Patel — Thu, 05 Nov 2026 11:00:00 GMT

Advait Patel shares a playbook for securing AI agent systems in production. He discusses moving defense boundaries from the prompt to the tool layer, enforcing scoped workload identities, and mitigating prompt injection via tool outputs. He explains how to structure audit-ready observability and implement kill switches to protect critical data while keeping deployment fast and compliant.

By Advait Patel

Cloudflare’s Post-Quantum GeoKey Manager Enters Closed Beta without Attribute-Based Encryption

Steef-Jan Wiggers — Sat, 31 Oct 2026 19:56:00 GMT

Cloudflare has moved a post-quantum rebuild of GeoKey Manager into closed beta, guarding geo-fenced keys with hybrid ML-KEM-768 and X25519 instead of the attribute-based encryption used since 2022. Keys live only in kernel memory on verified regional servers, and any failed check rejects the request, a fail-closed choice practitioners ask could cause a regional outage. GA is planned for Q1 2027.

By Steef-Jan Wiggers

OpenBSD 8.0 Brings Expanded Hardware Support, Security Enhancements, and Virtualization Improvements

Sergio De Simone — Sat, 31 Oct 2026 17:00:00 GMT

OpenBSD 8.0 is a substantial upgrade bringing broader hardware compatibility, enhanced security, an expanded virtual address space, and support for modern architectures, including Intel Arc A-Series graphics support, ARM64 hibernation, RISC-V improvements, and enhanced virtual machine support.

By Sergio De Simone