Buyer's guide ranks 12 hardware security modules for 2026
The comparison stresses FIPS 140-3 status, post-quantum firmware, and appliance versus cloud delivery.
17
- Mentions · 7d2
- Mentions · 30d10
- All mentions39
- First seenAug 13, 2026
- Last mentioned2d ago
Timeline
39 articles · newest first2026 HSM ranking puts Thales Luna first among ten
Editorial scores place Entrust nShield and AWS CloudHSM next and treat Azure Dedicated HSM as a retiring installed base.
20
Hugging Face blog points to an AWS Trainium model lookup
Only the title is available, so what the lookup covers is not stated.
16
PHP2Shell vulnerabilities patched by multiple vendors
PHP releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619 allowing unauthenticated remote code execution.
80
Hugging Face announces TorchNeuron for models on AWS Trainium
The post body was unavailable, so features, versions, and availability are not known.
28
AWS AgentCore security undone by prompt requesting credentials
Zenity Labs showed one prompt could steal AWS AgentCore IMDS credentials and hijack regional agents.
76
Security researcher claims they found KVM guest-host escape flaw
Paulos Yibelo claims a KVM guest-to-host root escape zero-day found via Vercel’s Firecracker sandbox bounty.
78
Security researcher claims to they found KVM guest-host escape flaw
Researcher claims a KVM guest-to-host escape zero-day; Vercel confirmed it, but no details are public.
72
AWS Fixes AI Agent Flaws Enabling Authentication Bypass and Credential Theft
AWS patched Loom AI-agent flaws that can bypass authentication, leak OAuth tokens, and expose cloud credentials.
68
AWS AI Agent Vulnerabilities Let Attackers Bypass Authentication and Steal Credentials
AWS patched four Loom and SageMaker flaws enabling auth bypass, token theft, SSRF, and cross-user command execution.
74
AI tests the limits of enterprise security governance
AWS’s Reimagine 2026 report says shadow AI and weak governance are outpacing enterprise security controls.
44
Top 10 Best Secrets Management Tools in 2026 [Ranked & Scored]
A 2026 industry report ranked HashiCorp Vault as the top secrets management tool, emphasizing dynamic credentials and cloud-native integrations.
30
AWS Detects and Quarantines Exposed IAM Credentials in Public GitHub Repositories
AWS quarantines exposed IAM access keys in public GitHub repositories, applying restrictive managed policies to limit cloud abuse.
90
CrowdSec Confirms Source Code Stolen in Supply Chain Attack
CrowdSec confirmed attackers stole source code from roughly 300 GitHub repositories via the May 2026 TanStack supply chain attack; no customer data affected.
58
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
Unit 42 analyzes how AWS's AWSCompromisedKeyQuarantine managed policy automatically neutralizes exposed IAM access keys, plus monitoring strategies for quarantine events.
45
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google's Mandiant planted an undercover analyst inside TeamPCP, the supply-chain gang that breached 1,000+ companies via poisoned open-source packages before two Australian arrests.
88
Identity Visibility in 2026: The Foundation of Identity Security
Hacker News explainer argues continuous identity visibility—inventory, entitlement mapping, behavioral telemetry—is foundational against credential-based intrusions in multicloud environments.
28
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
CrowdSec says the TanStack npm supply chain attack let an attacker copy 170 private GitHub repos via a former employee's retained account.
74
Top 10 Best Cloud Encryption Solutions in 2026
A 2026 buyer's guide reviews ten cloud encryption and key management platforms, spanning hyperscaler-native KMS and dedicated multicloud sovereignty solutions.
12
Exploring the new AWS Sign Up experience
Wiz analyzed AWS's new sandboxed sign-up experience, finding it omits CloudTrail, blocks security services, and limits vendor IAM role access.
32
AWS’s new sign-up gives accounts spend caps, email invites, and agent-set permissions
AWS's new sign-up flow gives fresh accounts agent-configured permissions, email-based team access, and per-project monthly spend caps starting at $20.
35
Hackers abused Claude to extract secrets from 1.8M Android apps
Anthropic reports ShinyHunters, Midnight Blizzard, and GTG-10007 misused Claude to automate credential theft, malware operations, and espionage against dozens of victims.
78
Hackers Can Turn Vulnerable LiteLLM AI Gateways Into Root Access and Cloud Credential Theft
Wiz found multiple LiteLLM AI gateway flaws, including a CVE-2026-59822 MCP auth bypass added to CISA KEV, enabling root code execution and cloud credential theft.
74
AWS spent years rebuilding its routing control plane without taking the network down
AWS replaced its fragmented border-network routing control planes with a single unified system, improving convergence times by up to 96%.
8
Product showcase: Doppler secures secrets for humans, pipelines, and AI agents
Doppler's secrets management platform centralizes credentials for engineers, CI/CD pipelines, MCP servers, and AI agents with runtime injection and dynamic secrets.
26
Your AI agent's system prompt is not a security control
AWS and SANS guidance says system prompts are not security controls; enforce user permissions at retrieval time and default-deny every agent tool invocation.
62
Drowning in CVEs and thirsty for answers? Try CTEM
Sponsored Register piece argues traditional vulnerability management cannot scale with CVE volume and promotes Continuous Threat Exposure Management via Horizon3's NodeZero.
15
DuckDB stays open source while the team behind it goes to work for Amazon
DuckDB founders Hannes Mühleisen and Mark Raasveldt join AWS as DuckLabs is acquired; DuckDB and DuckLake remain open source under the DuckDB Foundation.
8
The Collective Cyber Defense letter wrote your next vendor questionnaire
Op-ed argues the 200-company Collective Cyber Defense letter's three endorsed metrics should become standard vendor procurement questions.
28
‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help
White House launches Watershed 250, a six-month Texas pilot using volunteer vendor cyber and AI tools to harden water utility defenses.
48
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
CISA red teams fully compromised two critical infrastructure orgs with similar tradecraft; one detected nothing, the other contained phishing within minutes.
65
TruffleHog AWS Analyze reduces remediation time on leaked AWS credentials
Truffle Security launched TruffleHog AWS Analyze, which maps leaked AWS keys' permissions and role assumptions; research found 88% of 64,024 leaked keys still active.
28
Researchers Uncover Thousands of Leaked AWS Keys
Truffle Security researchers discovered more than 9,000 publicly accessible and active AWS key pairs, creating credential exposure and account-takeover risks.
46
AWS makes it easier to spot firewall rules that have gone quiet
AWS Network Firewall added rule hit counts for stateful rules, letting teams identify unused rules and validate control effectiveness at no added cost.
26
AWS limits AI agents’ data access, even when manipulated
AWS detailed propagating user authorization context through Bedrock AgentCore so downstream services enforce access controls even if the agent is manipulated via prompt injection.
48
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains
Microsoft correlates over 30 rotating domains to track MacSync Stealer, which steals passwords, SSH keys, wallets and AWS credentials.
50
When an Attacker Meets a Group of Agents: Navigating Amazon Bedrock's Multi
Unit 42 red-teamed Amazon Bedrock multi-agent applications, demonstrating prompt-injection attack chains that leak agent instructions and invoke tools, mitigated by Bedrock Guardrails.
55
CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the
CTM360's RecruitTrap report documents 3,000+ recruitment phishing URLs using BitB windows to steal credentials and relay MFA.
58
153GB of stolen credentials surface after LiteLLM supply chain attack
153GB archive from the LiteLLM supply chain attack exposes secrets from about 2,500 companies, including AWS, Samsung, Cisco and Salesforce.
90
Related CVEs
by mentions- CVE-2026-1039562%10.0Missing authentication in Loom for AWS control plane
- OS Command Injection in Amazon SageMaker Distribution
- Authenticated SSRF in Loom for AWS before 1.7.0
- OAuth2 discovery SSRF in Loom for AWS
- CVE-2026-453213%9.6Supply chain compromise: credential-stealing code in 42 @tanstack/* npm packages
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-59822<1%8.8Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM
- CVE-2026-3502925%8.7Broken Access Control in LiteLLM AI Gateway Enables Authenticated RCE
- CVE-2026-59821<1%2.1LiteLLM: LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the…
Appears with
- Microsoftvendor · 12
- AWSorganization · 8
- Googlevendor · 6
- GitHubvendor · 5
- Google Cloudvendor · 4
- Palo Alto Networksvendor · 4
- IBMvendor · 3
- Ciscovendor · 3
- CISAorganization · 3
- LiteLLMvendor · 3
- TanStackvendor · 3
- Cloudflarevendor · 3
- Entrustvendor · 3
- Thalesvendor · 3
- Amazonvendor · 3
- Firecrackerproduct · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.