- Turn on EBS encryption by default and encrypt existing unencrypted volumesAWS · 11 Nov 2026
- S3 SSE-KMS driving up KMS costs or throttling: enable Bucket Keys safelyAWS · 7 Nov 2026
- Advisory: a SQL Server security baseline - authentication, roles, encryption and auditing by designDatabases · 25 Oct 2026
- Advisory: Key Vault design - vault per app, access model, Managed HSM and customer-managed keysAzure · 25 Oct 2026
- Advisory: OCI Vault and key management design - vault types, HSM vs software keys, external keys and rotationOCI · 25 Oct 2026
- Advisory: secrets and encryption key strategy on AWS - Secrets Manager, Parameter Store and KMSAWS · 25 Oct 2026
- Sev1: restore fails with 'Cannot find server certificate with thumbprint'. Recovering TDE databasesDatabases · 25 Oct 2026
- Sev1: KMS key disabled or scheduled for deletion — encrypted data suddenly unreadableAWS · 24 Oct 2026
- Sev1: OCI Vault master key disabled or scheduled for deletion — volumes, buckets and databases inaccessibleOCI · 24 Oct 2026
- Advanced Azure Databricks: encryption keys, hardening, reading query plans and change data captureDatabricks on Azure · 23 Oct 2026
- Database security baseline: identity, network, encryption, auditing and secretsDatabases · 22 Oct 2026
- KMS AccessDeniedException and disabled keys: fixing encrypted resource failuresAWS · 22 Oct 2026