Secrets Management stories
Growing use by major tech groups is helping open source secrets manager OpenBao win trust as cloud and AI credential risks mount.
Regulated teams can now keep AI processing inside GitLab Dedicated, with new secret handling, spending caps and security fixes added in 19.3.
Startups risk leaked keys, quota throttling and surprise bills unless they tighten controls as AI prototypes move into production.
The accreditation strengthens Adfinis's hand with customers seeking secure open source tools for hybrid cloud systems and digital sovereignty.
Organisations using Microsoft automation can now keep credentials out of scripts, reducing the risk of exposed secrets in cloud workflows.
AI-driven attacks are shrinking response times to minutes, forcing APAC firms to adopt continuous identity controls and zero trust.
Customers will face narrower disruptions as Google Cloud moves to throttle malicious traffic, isolate risky identities and preserve legitimate usage.
The tie-up aims to help security teams turn validated AI findings into ranked fixes before vulnerabilities pile up and attackers move first.
Security teams must now track AI agents and machine accounts as well as staff, as BeyondTrust expands Pathfinder to cover privileged access.
Shorter certificate lifespans are forcing IT teams to automate renewals or risk outages as digital certificates multiply across complex networks.
Organisations using Wayfinder Frontier AI Services will now get help turning validated vulnerabilities into prioritised fixes and post-deployment checks.
Many AI agents can already reach far more sensitive corporate data than staff, prompting Bedrock Data to add real-time access controls.
Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.
OpenShift users now have a validated way to deploy Secretz Enterprise through the Red Hat Ecosystem Catalog, including offline sites.
Businesses using AI agents can now approve or block individual commands in real time, reducing the risk of authorised access doing unauthorised things.
Governance features aim to help security teams prove AI controls to boards and regulators as shadow AI and agentic risks spread.
Hybrid critical infrastructure estates are leaving contractor and vendor access unseen, raising compliance and supply chain risk under reformed CIRMP rules.
Security teams can now query systems and trigger approved actions in plain English, as Legion's DragonClaw aims to cut manual investigation work.
Open source package attacks can now be blocked earlier, as NetRise brings trust checks into editors, command lines and AI coding tools.
The new controls aim to stop unauthorised tool calls, data leaks and prompt injection as firms deploy more autonomous software.