GitLab 19.5: MCP Server GA Lets Outside Agents In, With Limits
GitLab 19.5 makes its MCP server generally available, governs Claude Code and Cursor sessions, and adds rate limits. What platform teams should configure first.
GitHub Secret Scanning: Why a Small Model Beat the LLM Pipeline
GitHub secret scanning swapped an LLM for a fine-tuned ModernBERT classifier: 86% faster scans, 98% lower cost, fewer false alarms. How it works for teams.
Docker Hub Access Token Vulnerability: A Two-Year Silent Transfer
A Docker Hub access token vulnerability let account conversion hand live PATs to another user for two years. What Docker found and changed, and what to check.
Zero-Trust AI Agent Access in Practice: IBM watsonx and HashiCorp Boundary
A HashiCorp proof of concept gives AI agents infrastructure access via Boundary and Vault without exposing credentials, with IBM watsonx doing the reasoning.
India's Regulatory Wave: The 5 Security Controls Every Organization Needs Now
DPDP, SEBI CSCRF, CERT-In, and RBI data localization all demand the same five controls. HashiCorp Vault and Boundary address most of them directly.
HashiCorp Vault Agentic IAM Is Now GA: Managing AI Agents Like Identities
Vault Enterprise 2.1 brings AI agent identity management to general availability — per-request OAuth controls, a centralized agent registry, and Terraform provisioning for agent credentials.
Datadog's Azure Integration No Longer Needs a Secret to Rotate
Secretless authentication replaces static client secrets with OIDC-based federated identity. No expiration dates, no rotation schedules, no telemetry gaps when someone forgets to update a credential.
AI Coding Speed Is Outrunning Secrets Security
Nearly 30 million secrets leaked on GitHub in 2025 (up 34% YoY). AI-assisted code leaks at nearly 2x the rate. What DevOps security teams should do now.
HCP Vault Dedicated Gets Cluster Disaster Recovery — and a DR Testing Path
HashiCorp's HCP Vault Dedicated now supports cluster-level disaster recovery in public preview, enabling failover for cluster-specific incidents and — critically — scheduled DR testing without waiting for a regional outage.
When AI Attacks at Machine Speed: The End of Static Credentials
An exposed AWS key can be pivoted to database access in 18 minutes by an AI agent. Why static credentials are no longer a viable security posture.
SCIM in HashiCorp Vault: Identity Provisioning Without the Policy Risk
Vault 2.0 SCIM beta lets SailPoint and Okta provision users and groups — with deliberate architectural separation that blocks identity managers from touching Vault policies.
GitLab 19.0: Secrets Manager, Agentic Merge Requests, and the DevSecOps Platform Bet
GitLab 19.0 ships native secrets management, agentic merge request tools, and self-hosted open source models — a major DevSecOps platform update.
HashiCorp Vault SSH: Short-Lived Certificates Replace Static Keys at Scale
HashiCorp Vault's SSH Secrets Engine replaces long-lived static SSH keys with 30-minute certificates signed by an internal CA. How the architecture eliminates four structural risks in enterprise SSH access management.
HashiCorp Vault Radar: Why Finding Secrets Isn't Enough
HashiCorp's Vault Radar reframes secret detection as a remediation problem. Four pillars that shift the security metric from secrets found to secrets resolved per week.
Terraform + AWS Native OIDC: Eliminating Static Credentials From Multi-Account IaC
AWS Account Factory for Terraform now supports native OIDC with a single config flag — no stored secrets, auto-generated IAM roles, and consistent zero-standing-credential provisioning across every account.
Betterleaks: The Gitleaks Successor Built for Agentic Secrets Scanning
Gitleaks creator Zach Rice rebuilt the tool from scratch with 98.6% recall, CEL-based validation, and CLI design built for AI coding agents operating code pipelines.