Topic
Storage, brokering and injection of API keys and credentials, including .env handling, vaults and per-host credential injection.
Keyorix SL released an open-source secrets manager that runs as one binary on a company's own servers with no internet connection. Air-gapped and NIS2- or DORA-bound teams get a self-hosted option, described so far mainly by its maker.
Reality
Claude Code 2.1.285's Read deny rules let 4 of 11 file-reading routes reach the model in a developer's test, among them grep -r and CLAUDE.md @imports. The docs limit the rules to named paths and point anyone needing a hard block to the OS sandbox.
Reality
OpenAI's Codex now builds a project's environment once and starts each cloud task from it, with task state recoverable for up to seven days. For a team rolling it out, the new job is deciding who may edit the shared setup and what it can reach.
Reality
OpenBao fixed a four-bug chain in 2.6.3 and 2.7.0 that lets unauthenticated attackers seize servers with a Raft snapshot policy set. A dev.to post says HashiCorp Vault has no fix yet, so Vault operators have to close network paths to the API themselves.
Reality
Agenthof, an Apache-2.0 Go gateway, holds MCP server credentials so a hijacked agent can steal only a revocable per-run token, a dev.to walkthrough shows. Every tool call crosses the gateway, so it can also refuse ungranted tools and log each call to a hash-chained ledger.
Reality
A dev.to post claims encrypted reasoning objects from OpenAI, Anthropic and Google APIs were replayable across users and models. The disclosure is thin, but the storage habit it exposes is yours.
Reality
Unit 42 worked a ransomware intrusion where the operator handed tactical execution to frontier AI agents, and the chain from a public API endpoint to stolen cloud AI keys closed inside a single working day with no zero-day.
Reality
The VPN vendor detected the intrusion on August 31 and finished remediation five days later. It says production infrastructure and customer data were untouched, and has not said which credentials, binaries or configurations sat in the exposed environment.
Reality
Enterprise Cloud owners can now pull owner, scope, expiry and last-use data for SSH keys, PATs and app tokens as a CSV. The export stops at credentials GitHub issued, so secrets pasted into repositories stay out of scope.
Reality
Every 10 minutes an unattended job summarizes Claude Code and Codex logs into an Obsidian vault and pushes the commit, so the pipeline treats the summarizer's own JSON as text that may carry pasted keys or injected instructions.
Reality
Discovery has been the manual step in automation projects. UiPath now sells a tool that does it and writes the workflow. Whether the map it produced was right shows up only after the thing is in production.
Reality
Red Hat's own upgrade guide names six environment decisions and three ways to run Ansible Automation Platform 2.7. It says the job can take an afternoon or several weeks, and RPM-based 2.4 and 2.5 installs sit at the long end.
Reality
ArgoCD now hands diff calculation to the API server and accepts OCI registries as first-class sources. The same write-up still calls Git the sole source of truth, so teams pulling charts from Harbor have to decide which system records intent.
Reality
On July 22 a model wrote a forty-character API key into a page's JavaScript and declared the API not secret. GoodBarber now has the model state only how a key is sent and lets code default every key to secret.
Reality
A dev.to walkthrough of the n8n 1.x to 2.0 upgrade treats it as a host-configuration review, because the defaults that changed decide what Code nodes may read and which nodes exist at all.
Reality
CISA's exploited-vulnerability catalog now holds entries for LiteLLM, Kestra and Starlette, according to a dev.to writeup, and the quickstart docs for those tools still keep provider API keys in the process environment an attacker reads first.
Reality
A dev.to post splits the configuration table into cells a parser can prove, cells a model may draft, and cells only a named reviewer may write, then holds the publish while any signed cell still reads UNSIGNED.
Reality
A dev.to post keeps the spend ceiling in an authorization service the agent has no credential for, reserving each job's maximum charge before dispatch and accepting fewer concurrent admissions per period as the cost.
Reality
A ticket called the directory a dead legacy backend. The agent checked first and came back with the live database's schema history and the build provenance of two of five production container images.
Reality
Unit 42 traced AWSCompromisedKeyQuarantine through three versions since August 2020 and documented the GitHub secret scanning integration that lets AWS attach the policy to an exposed IAM user automatically, with the owner notified afterwards.
Reality
Build · September 20, 2026 · 1 publisher
Build · September 19, 2026 · 1 publisher
Build · September 19, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Security · September 17, 2026 · 3 publishers
Security · September 18, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Science · September 18, 2026 · 1 publisher
Build · September 17, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Build · September 17, 2026 · 1 publisher
Build · September 17, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Build · September 17, 2026 · 1 publisher
Build · September 16, 2026 · 1 publisher
Build · September 16, 2026 · 1 publisher
Product · September 16, 2026 · 1 publisher
Build · September 16, 2026 · 1 publisher
Product · September 16, 2026 · 1 publisher
Build · September 15, 2026 · 1 publisher
Build · September 15, 2026 · 1 publisher
Build · September 15, 2026 · 1 publisher
Build · September 14, 2026 · 1 publisher
Security · September 14, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Build · September 12, 2026 · 1 publisher
Product · September 7, 2026 · 1 publisher
Science · September 12, 2026 · 1 publisher
Build · September 12, 2026 · 1 publisher
Build · September 11, 2026 · 1 publisher
Build · September 11, 2026 · 1 publisher
Product · September 10, 2026 · 1 publisher
Security · September 10, 2026 · 1 publisher
Build · September 10, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Product · September 9, 2026 · 1 publisher
Build · September 9, 2026 · 1 publisher
Build · September 8, 2026 · 1 publisher
Build · September 8, 2026 · 1 publisher