Vault (Product): news timeline & CVEs

12 Best Machine Identity Management Solutions Compared (2026): Features & Pricing

A 2026 comparison ranks 12 machine-identity vendors across certificates, workload identity, and API credentials.

GBHackers published a 2026 buyer's comparison of 12 machine-identity products across certificate lifecycle, workload identity, and API credentials. It ranks CyberArk (Venafi) for enterprise CLM, Keyfactor for combined PKI and lifecycle, and SPIFFE-native vendors SPIRL and Smallstep for workload identity. Other names include AppViewX, DigiCert, Entrust, GlobalSign, Corsha, Akeyless, HashiCorp Vault, Microsoft, and Sectigo. The piece is research-based editorial with quoted or tiered pricing and no lab testing.

GBHackersOct 7, 08:05 UTC · 1d agoIndustry 2 sources

Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code

Malicious npm packages, including Mini Shai-Hulud, steal developer and CI/CD cloud credentials during install.

Supply-chain intrusions are using trusted package updates to run install-time scripts that harvest cloud and developer credentials before an application executes. Microsoft's analysis of Mini Shai-Hulud found malicious @antv npm packages using a preinstall hook to run an obfuscated payload during npm install. Qualys said the malware targeted GitHub Actions, AWS, Kubernetes, HashiCorp Vault, npm, and 1Password secrets, so removing the package does not revoke stolen credentials.

GBHackersSep 30, 12:00 UTC · 8d agoMalware in the wild

Vault

Timeline2 articles

Appears with

12 Best Machine Identity Management Solutions Compared (2026): Features & Pricing

Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code