InfoQ - Security - News

AWS Ships Continuum for Code Vulnerabilities

Steef-Jan Wiggers — Fri, 06 Nov 2026 10:00:00 GMT

AWS has made Continuum for code vulnerabilities generally available in two regions. The service proves exploitability by running real exploits in a sandbox, then opens fixes as pull requests. Published pricing charges per finding processed as well as per line of code, and practitioners are asking what would justify letting it merge fixes on its own.

By Steef-Jan Wiggers

Cloudflare’s Post-Quantum GeoKey Manager Enters Closed Beta without Attribute-Based Encryption

Steef-Jan Wiggers — Sat, 31 Oct 2026 19:56:00 GMT

Cloudflare has moved a post-quantum rebuild of GeoKey Manager into closed beta, guarding geo-fenced keys with hybrid ML-KEM-768 and X25519 instead of the attribute-based encryption used since 2022. Keys live only in kernel memory on verified regional servers, and any failed check rejects the request, a fail-closed choice practitioners ask could cause a regional outage. GA is planned for Q1 2027.

By Steef-Jan Wiggers

OpenBSD 8.0 Brings Expanded Hardware Support, Security Enhancements, and Virtualization Improvements

Sergio De Simone — Sat, 31 Oct 2026 17:00:00 GMT

OpenBSD 8.0 is a substantial upgrade bringing broader hardware compatibility, enhanced security, an expanded virtual address space, and support for modern architectures, including Intel Arc A-Series graphics support, ARM64 hibernation, RISC-V improvements, and enhanced virtual machine support.

By Sergio De Simone