Kloak secures K8s workloads by injecting secrets via eBPF—no app changes needed. Secrets never touch the pod; replaced only at the network edge. Prevents credential leaks from compromised processes. #kubernetes #secretmanagement

https://wesearch.press/s/show-hn-kloak-a-secret-manager-that-keeps-k8s-workload-away-c9660463?utm_source=social&utm_medium=auto&utm_campaign=mastodon

Show HN: Kloak, A secret manager that keeps K8s workload away from secrets

Kloak is a Kubernetes-native secret manager that uses eBPF to intercept HTTPS traffic and inject secrets at the network edge, ensuring applications never…

WeSearch

It’s the final day of InCyber! 🚀🇫🇷

If you haven’t stopped by Stand 44 yet, this is your last chance to grab some Passbolt merch.

For more info: https://www.passbolt.com/?utm_campaign=40961189-2026_Events&utm_source=InCyber

#Passbolt #InCyber #cybersecurity #opensource #secretmanagement

We are live at InCyber in Lille! 👋🏼🇫🇷
Stop by Stand F44 to learn more about Passbolt, and chat over a coffee (or a beer after 17:00 PM! 🍻).
👉🏼 If you haven't secured your spot yet, there is still time to grab a pass: https://europe.forum-incyber.com/
#Passbolt #InCyber #Cybersecurity #OpenSource #SecretManagement

Demain, direction le forum InCyber à Lille ! 🛡️

Retrouvez-nous sur le stand F44 pour parler gestion de mots de passe & secrets, open-source et auto-hébergement.

On a aussi fait le plein de goodies pour l'occasion.

À demain ! 👋

Pour en savoir plus: https://europe.forum-incyber.com/acces/#infos

#Passbolt #InCyber #CyberSec #Lille #cybersecurity #opensource #secretmanagement

INFOS PRATIQUES - FORUM INCYBER - EUROPE

Contact Une question, une demande de partenariat ? ADRESSE Forum INCYBER  17 Avenue Hoche 75008 Paris TÉL.+33 1 40 17 91 28 contactez-nous Informations pratiques Le Forum INCYBER Europe aura lieu à Lille Grand Palais les mardi 31 mars, mercredi 1er et jeudi 2 avril 2026 ADRESSE1 boulevard desCités Unies59777 Lille – EuralilleFRANCE HORAIRES GRAND […]

FORUM INCYBER - EUROPE

$48M in crypto was stolen after a wallet seed was exposed by a Korean tax agency — one secret leaked, millions lost. Key management is everything. 🔑💸 #CryptoSecurity #SecretManagement

https://www.bleepingcomputer.com/news/security/48m-in-crypto-stolen-after-korean-tax-agency-exposes-wallet-seed/

$4.8M in crypto stolen after Korean tax agency exposes wallet seed

South Korea's National Tax Service accidentally exposed the mnemonic recovery phrase of a seized cryptocurrency wallet in an official press release, allowing hackers to steal 6.4 billion won ($4.8M) worth in cryptocurrency.

BleepingComputer

"Khám phá CruxVault - Công cụ quản lý bí mật Git-like đầu tiên trên máy cục bộ!
- Mã hóa bí mật cục bộ
- Lưu trữ bí mật với kiểm soát phiên bản
- CLI giống Git (crux init, crux commit, crux status)
- Thẻ môi trường (dev/staging/prod)
Hoàn toàn ngoại tuyến, không phụ thuộc vào cloud!
#CruxVault #SecretManagement #LocalFirst #GitLike #DevTool #CôngCụLậpTrình #QuảnLýBíMật"

https://www.reddit.com/r/SideProject/comments/1oq7tgt/built_cruxvault_localfirst_gitlike_secret/

This is why you should not hard-code credentials in your source code, but use env. vars or credential managers.

Looks like someone sent me a mail via a python script. The script had an issue which let the mail content to be the script itself, which contains a token.

(Or this is phishing wanting me to try the token)

#development #secretmanagement #security

I released params2env, a Go based CLI tool I've built that reads AWS SSM Parameter Store values and sets them as environment variables.

The tool can create, modify, and delete parameters, and supports optional cross-region replication for redundancy.

Read more on my blog: https://dominik.wombacher.cc/posts/params2env-aws-ssm-parameter-store-to-environment-variables.html

#AWS #Go #GoLang #CLI #OpenSource #ParameterStore #DevOps #SecretManagement

params2env: AWS SSM Parameter Store to Environment variables

A Go CLI tool to manage AWS SSM Parameter Store parameters and convert them to environment variables

The Wombelix Post

OH: Moment, ich gibt dir die API-Keys aus dem Production Pod zum Testen.

#cloud #secretmanagement #APIKeys #javadevelopment

For my homelab CoreOS config that I store publicly with git I've been wondering what to do about secrets.

For the containers at least I'm thinking
- Use Podman secrets when possible
- Script to setup the Podman secrets through bitwarden cli

Problem is, I will host Bitwarden on the host that will initially not have any secrets. Shouldn't be an issue as Bitwarden can manage without a secret, but still a limitation that needs to be solved separately.


Don't really wanna store secrets through git but would like to have an offline solution if possible. Generating the secrets could be possible, at least for initial setup, but then I wanna be able to access the secrets easily too


So much thinking

#coreos #containers #podman #gitops #security #secretmanagement