zknews

trending4

01▲
CVE-2026-43867 - Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter secalerts.co
How did Camel-PQC store key metadata? Raw ObjectInputStream, no filter, so a crafted secret can trigger deserialization side effects.
aws deserialization java pqc security twitter
4 pts/fewergates/2 days ago/1 comment
02▲
Sovereign Execution Brokers: Enforcing Certificate-Bound Authority in Agentic Control Planes arxiv.org
Paper on SEB, a runtime gate for agentic control planes that only executes infra changes with valid certificates and audit trails.
access-control arxiv audit authorization aws certificates cloud cryptography kubernetes security
0 pts/tara/16 days ago/2 comments
03▲
End-to-end encrypted ML inference with Amazon SageMaker AI and FHE aws.amazon.com
AWS shows FHE inference on SageMaker with Concrete-ML, so the cloud can now host ciphertext and call it a feature.
aws cloud-security encrypted-inference fhe linkedin machine-learning privacy sagemaker
0 pts/evanm/16 days ago/1 comment
04▲
[tl;dr sec] #332 - I've Joined OpenAI, fwd:cloudsec, AWS Well Architected Supply Chain Security tldrsec.com
What did tl;dr sec #332 pick out this week? OpenAI hire, AWS supply-chain advice, OIDC/Lambda abuse, and AI threat notes.
ai-security appsec aws cloud-security github-actions identity lambda linkedin llm oidc secrets static-analysis supply-chain threat-intelligence
0 pts/max/24 days ago/3 comments