[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:encryption-key-management":3},{"control":4,"products":25,"stories":55,"lessons":99,"related":124,"compare":133},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.","Encryption of data at rest and in transit, with keys kept in hardware security modules or key management services, and every use of a key logged.","If stolen data is properly encrypted and the keys were not taken, the incident is far less serious, and under GDPR the affected people may not even need to be told. Holding your own keys also answers sovereignty questions about data in the cloud.",[11,12,13,14],"Can we hold our own keys for cloud services (BYOK or HYOK)?","Is the hardware certified, for example FIPS 140-3 or Common Criteria?","How are keys rotated, and who can use them?","What is the plan for post-quantum algorithms?","Risk: exposure of sensitive data at rest or in transit. Control: encryption with centrally managed keys whose use is logged. Owner: security architect. Measure: share of sensitive data stores encrypted with managed keys.",[17,18,19,20],"NIS2 Art. 21(2)(h): cryptography and encryption","DORA Art. 9: protection of cryptographic keys","GDPR Art. 34(3)(a): encrypted data and notifying individuals","ISO\u002FIEC 27001:2022 A.8.24: use of cryptography",{"name":22,"slug":23},"Data Protection","data-protection","2026-10-16T12:48:21.018485+00:00",[26,34,42,47],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":43,"product_name":44,"url":45,"description":46},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"total":56,"last_days":57,"recent":58},853,223,[59,64,69,74,79,84,89,94],{"slug":60,"title":61,"published_at":62,"brief":63},"new-mior-and-skyfall-attacks-let-rogue-cloud-hosts-steal-secrets-from-amd-sev-sn-d93f5e","New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs","2026-11-13T15:27:05+00:00","Two new attacks, Mior and Skyfall, allow malicious cloud hosts to steal data from AMD SEV-SNP protected VMs.",{"slug":65,"title":66,"published_at":67,"brief":68},"tsmc-confirms-employee-data-breach-tied-to-cloud-service-provider-ccd63f","TSMC confirms employee data breach tied to cloud service provider","2026-11-13T15:06:00+00:00","TSMC confirms employee data breach via cloud service provider, impacting current and former employees.",{"slug":70,"title":71,"published_at":72,"brief":73},"trezor-confirms-hidden-implants-in-cryptobilis-sold-wallets-that-can-steal-recov-ea8f2c","Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases","2026-11-13T13:54:20+00:00","Trezor confirms implants in crypto wallets sold by CryptoBilis can steal recovery phrases.",{"slug":75,"title":76,"published_at":77,"brief":78},"apify-confirms-customer-data-accessed-in-cyberattack-854397","Apify Confirms Customer Data Accessed in Cyberattack","2026-11-13T12:41:01+00:00","Apify confirms customer data accessed in cyberattack via compromised credentials.",{"slug":80,"title":81,"published_at":82,"brief":83},"fbi-says-us-seized-1-2-billion-worth-of-cryptocurrency-stolen-from-binance-e4ac87","FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance","2026-11-13T02:28:21+00:00","US Seizes $1.2B in Crypto Stolen from Binance; North Korea Blamed for Separate $400M Theft",{"slug":85,"title":86,"published_at":87,"brief":88},"feds-announce-seizure-of-1-2-billion-from-binance-theft-also-takedown-of-faceste-020706","Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools","2026-11-12T21:42:00+00:00","US seizes $1.2B from Binance theft and disrupts North Korean 'FaceStealer' tools.",{"slug":90,"title":91,"published_at":92,"brief":93},"notion-customer-data-compromised-in-fireworks-ai-hack-a39fcf","Notion Customer Data Compromised in Fireworks AI Hack","2026-11-12T11:08:52+00:00","Notion AI chat transcripts accessed in Fireworks AI hack affecting less than 1% of workspaces.",{"slug":95,"title":96,"published_at":97,"brief":98},"critical-red-hat-quay-vulnerability-could-expose-private-container-images-a84ff7","Critical Red Hat Quay Vulnerability Could Expose Private Container Images","2026-11-12T09:23:21+00:00","Red Hat Quay vulnerability CVE-2026-123710 allows attackers to steal private container images.",[100,104,108,112,116,120],{"slug":101,"title":102,"published_at":103},"third-party-cloud-provider-breach-exposes-tsmc-employee-data","Third-Party Cloud Provider Breach Exposes TSMC Employee Data","2026-11-13T16:22:01.669+00:00",{"slug":105,"title":106,"published_at":107},"stolen-credential-exposes-apify-customer-data-highlighting-mfa-and-secrets-management-gaps","Stolen Credential Exposes Apify Customer Data, Highlighting MFA and Secrets Management Gaps","2026-11-13T13:20:22.45+00:00",{"slug":109,"title":110,"published_at":111},"north-korean-social-engineering-nets-billions-from-crypto-exchange","North Korean Social Engineering Nets Billions From Crypto Exchange","2026-11-13T03:20:21.598+00:00",{"slug":113,"title":114,"published_at":115},"unauthenticated-token-takeover-exposes-private-container-registries","Unauthenticated Token Takeover Exposes Private Container Registries","2026-11-12T10:21:30.989+00:00",{"slug":117,"title":118,"published_at":119},"acquired-it-systems-become-a-data-breach-vector-for-maersk","Acquired IT Systems Become a Data Breach Vector for Maersk","2026-11-12T09:20:20.555+00:00",{"slug":121,"title":122,"published_at":123},"buggy-workaround-script-caused-emudhra-to-issue-cryptographically-weak-certificates","Buggy Workaround Script Caused eMudhra to Issue Cryptographically Weak Certificates","2026-11-12T05:20:20.672+00:00",[125,129],{"slug":126,"name":127,"problem":128},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":130,"name":131,"problem":132},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",{"hashicorp\u002Fvault":134,"thales\u002Fciphertrust":149,"thales\u002Fluna-hsm":160,"utimaco\u002Futimaco-hsm":165},{"hq_country":135,"also_provides":136,"reviews":140,"affected":147,"reported":148},"US",[137],{"slug":138,"name":139},"secrets-management","Secrets management",[141,144],{"label":142,"url":143},"PeerSpot: HashiCorp Vault user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fhashicorp-vault-reviews",{"label":145,"url":146},"Gartner Peer Insights: IBM Vault (formerly HashiCorp Vault) user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fibm-vault",2,1,{"hq_country":150,"also_provides":151,"reviews":152,"affected":159,"reported":147},"FR",[],[153,156],{"label":154,"url":155},"NIST FIPS 140-3 certificate #4684: Thales Luna K7 Cryptographic Module","https:\u002F\u002Fcsrc.nist.gov\u002Fprojects\u002Fcryptographic-module-validation-program\u002Fcertificate\u002F4684",{"label":157,"url":158},"Gartner Peer Insights: CipherTrust Data Security Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fciphertrust-data-security-platform",0,{"hq_country":150,"also_provides":161,"reviews":162,"affected":159,"reported":147},[],[163,164],{"label":154,"url":155},{"label":157,"url":158},{"hq_country":166,"also_provides":167,"reviews":168,"affected":159,"reported":159},"DE",[],[169],{"label":170,"url":171},"NIST FIPS 140-3 certificate #5223: Utimaco u.trust Anchor","https:\u002F\u002Fcsrc.nist.gov\u002Fprojects\u002Fcryptographic-module-validation-program\u002Fcertificate\u002F5223"]