SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

Secrets Management Stories - Page 2

UK Stories

Secrets Management stories

Global Stories

Secrets Management stories

Chainguard & Cursor tackle AI code supply chain risks
DevOps

Chainguard & Cursor tackle AI code supply chain risks

AI coding agents are increasing supply chain risk, prompting new controls to verify third-party dependencies before they reach production.

By Catherine Knowles • 4 min read • Last month
Tenable flags Microsoft GitHub workflow flaw exposing code
DevOps

Tenable flags Microsoft GitHub workflow flaw exposing code

A critical flaw in a widely used Microsoft code-sample repository could have let attackers steal secrets and run code through GitHub issues.

By Sean Mitchell • 4 min read • Last month
Vercel breach linked to compromised Context.ai integration
Multi-factor authentication

Vercel breach linked to compromised Context.ai integration

Customers were urged to rotate secrets after unauthorised access to Vercel systems exposed a limited set of credentials via a third-party AI tool.

By Kaleah Salmon • 5 min read • Last month
Identity crisis as machine accounts outnumber humans
Privileged Access Management

Identity crisis as machine accounts outnumber humans

Machines now account for most cloud identities, leaving firms exposed to faster attacks, over-privileged access and AI-driven risks.

By Shannon Williams • 6 min read • Last month
Orca Security flags AI secrets & supply chain gaps
Malware

Orca Security flags AI secrets & supply chain gaps

Leaked AI credentials and unpatched dependencies are leaving production systems exposed across US and European organisations, Orca Security said.

By Shannon Williams • 4 min read • Last month
Codenotary launches AgentMon for AI agent oversight
Data Protection

Codenotary launches AgentMon for AI agent oversight

Enterprises deploying agentic AI are getting a new tool to spot data leaks, policy breaches and runaway costs before they spread.

By Catherine Knowles • 3 min read • Wed, 1st Apr 2026
AppOmni adds Heisenberg mode after LiteLLM supply attack
Virtualisation

AppOmni adds Heisenberg mode after LiteLLM supply attack

The malicious packages could leave build systems and Kubernetes clusters exposed, prompting checks across CI/CD pipelines and AI frameworks.

By Sean Mitchell • 4 min read • Fri, 27th Mar 2026
BeyondTrust warns of 467% rise in enterprise AI agents
Customer Relationship Management

BeyondTrust warns of 467% rise in enterprise AI agents

BeyondTrust warns a surge of unsupervised AI agents is creating a hidden “shadow workforce” with admin-level access inside enterprises.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 25th Mar 2026
BeyondTrust expands Pathfinder to secure AI agents
Endpoint Protection

BeyondTrust expands Pathfinder to secure AI agents

BeyondTrust expands Pathfinder to discover, govern and lock down proliferating enterprise AI agents, identities, privileges and secrets.

By Mark Tarre • 4 min read • Tue, 24th Mar 2026
Trivy GitHub breach exposes CI/CD supply chain risk
DevOps

Trivy GitHub breach exposes CI/CD supply chain risk

Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.

By Sofiah Nichole Salivio • 5 min read • Tue, 24th Mar 2026
Oasis raises USD $120 million for AI access control
Software-as-a-Service

Oasis raises USD $120 million for AI access control

Oasis raises USD $120 million to expand its AI-first access control platform for non-human identities across large enterprises.

By Karen Joy Bacudo • 5 min read • Sat, 21st Mar 2026
Entro launches AI agent governance tool for enterprises
Data Protection

Entro launches AI agent governance tool for enterprises

Entro launches AGA to map, monitor and control AI agents in enterprises, tackling shadow AI and non-human identity risks at scale.

By Shannon Williams • 5 min read • Fri, 20th Mar 2026
Keeper unveils KeeperDB to tighten database access
Data Protection

Keeper unveils KeeperDB to tighten database access

Keeper launches KeeperDB to centralise zero-trust database access, hiding credentials and recording sessions within its existing security vault.

By Sean Mitchell • 4 min read • Thu, 19th Mar 2026
AI surge drives record secrets sprawl across GitHub
Cloud Security

AI surge drives record secrets sprawl across GitHub

AI-fuelled coding drives record 29 million hardcoded secrets on GitHub in 2025, with leaks from AI tools and services surging sharply.

By Sofiah Nichole Salivio • 4 min read • Thu, 19th Mar 2026
1Password debuts Unified Access to secure AI agents
Data Protection

1Password debuts Unified Access to secure AI agents

1Password unveils Unified Access to secure AI agents and machine credentials, promising endpoint-to-agent visibility for security teams.

By Sean Mitchell • 5 min read • Thu, 19th Mar 2026

Stories from Other Regions

Secrets Management stories

Avocado warns on code repository supply chain attacks
Cloud Security

Avocado warns on code repository supply chain attacks

Australian organisations face fresh risk of cloud and identity compromise as the cyber watchdog reissues its alert on repository attacks.

By Mark Tarre • 4 min read • Last month
Dubber cuts observability costs by 25% with Grafana Cloud
Virtualisation

Dubber cuts observability costs by 25% with Grafana Cloud

A single managed platform has eased pressure on Dubber's lean engineering team as it scales observability across more than one million daily calls.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 27th Mar 2026