company
HashiCorp makes infrastructure software including Terraform, Vault, Consul, and Nomad; acquired by IBM in 2025.
No evidence-backed relationships are recorded.
OpenBao fixed a four-bug chain in 2.6.3 and 2.7.0 that lets unauthenticated attackers seize servers with a Raft snapshot policy set. A dev.to post says HashiCorp Vault has no fix yet, so Vault operators have to close network paths to the API themselves.
Reality
Aikido found the Graphalgo implant inside two Terraform providers and two Go modules. The Go build polls a hard-coded testnet contract every three seconds and keeps a Slack bot channel open as its second route.
Reality
CoreWeave says key custody is what keeps enterprise AI projects sitting in security review, so its new encryption service leaves the key in tooling the customer already runs and takes the provider off the decrypt list.
Reality
The post's hawks-and-doves model explains why MIT-style terms keep winning. Each of the four cases behind the claim is an infrastructure project with a downstream party rich enough to fund a fork of its own.
Reality
Terraform reads an emergency console change as a config mismatch and reverts it on the next scheduled apply. A dev.to writeup builds the CI job that catches it first, and explains why the plan-only role still needs lock writes.
Reality
A dev.to walkthrough of Vault sidecar injection lists ten candidate causes behind four look-alike symptoms. Two of them are expiry clocks, which is why a setup that worked last month narrows the search very little.
Reality
At $0.10 to $0.99 per managed resource a month, billed hourly on the peak count, Terraform's own bookkeeping objects become a line item, and February 2026's published list prices let you do that arithmetic before the quote lands.
Reality
HashiCorp's pitch is that agents should propose changes while Terraform governs them, with per-run OIDC credentials and project-scoped identities doing the work that change-by-change human review cannot do at machine speed.
Reality
A dev.to essay offers MongoDB, Elastic, HashiCorp and Redis as proof that the managed-cloud moat is dead. Its dates hold up better than its summary of them. The screening trait survives either reading.
Reality
A dev.to walkthrough names the ports, the flags and the account placeholder needed to run existing AWS configs against Spinifex hardware, which makes the portability claim checkable.
Reality
Kitty's OSC 5522 has landed in libghostty, giving SSH-bound editors and coding agents one protocol for screenshots. Nothing changed for 1.3.1 users, and the relays in between still have to catch up.
Reality
A three-node Vault Enterprise cluster crash-looped on OpenShift because restricted-v2 lacks IPC_LOCK. The fix took a custom SCC, a hand-written ClusterRole, a RoleBinding and a pod-spec hint.
Reality
Preliminary second-quarter results show software up 5 percent, infrastructure down 7 percent and consulting flat, with Arvind Krishna citing capex reprioritization and deals that did not close.
Reality