A developer traced a production incident to a Secrets Manager secret with rotation enabled but non-functional, revealing a structural gap in cloud security tools that check configuration lists rather …
A study of 5,968 scenarios from the IaC-Eval benchmark found that iterative LLM-driven Infrastructure-as-Code repair introduces security regressions in 3.3% of scenarios under strict detection (5.2% o…
Argus, an open-source security scanner that orchestrates 20+ industry-standard tools including Semgrep, Trivy, Gitleaks, tfsec, Checkov, and OWASP ZAP behind a single command and an MCP server, is now…
A developer details building a monorepository of Terraform modules on GitLab to consolidate best practices like testing, versioning, and self-service infrastructure while eliminating friction from man…
GitHub Copilot's AI autocompletions for Terraform and Kubernetes infrastructure as code frequently introduce insecure defaults such as open ports, public database access, and disabled deletion protect…
GitHub Copilot's Terraform code suggestions often introduce severe security vulnerabilities, such as opening security groups to the world or enabling public access on RDS instances, because the sugges…
According to the article, a security audit of 6,444 public Docker Compose files found that approximately 90% of them are missing three basic security flags: `read_only: true`, `cap_drop: [ALL]`, and `…