Key Management
Key Management at Beyond Market Intelligence is a file of 2 stories. The newest of them: “CosmosEscape exposed a shared responsibility gap that demands closer attention.” and “Unlock stronger encryption by moving Kubernetes keys to Vault Enterprise”. Wiz Research uncovered CosmosEscape, a chain that slipped past Azure Cosmos DB's Gremlin sandbox and reached a platform-wide key with read and write access to every database on the service. Vault Enterprise now lets Kubernetes hand off envelope encryption to an external trust domain, moving the key encryption keys that guard etcd data out of the cluster entirely. Acme AI is the next-generation, AI-powered spreadsheet platform built to replace Excel and redefine how analysts, data scientists, and enterprise teams work… The list below is every Key Management story on Beyond Market Intelligence, newest first.
CosmosEscape exposed a shared responsibility gap that demands closer attention.
Wiz Research uncovered CosmosEscape, a chain that slipped past Azure Cosmos DB's Gremlin sandbox and reached a platform-wide key with read and write access to every database on the service. Microsoft closed the entry point in two days, yet the key lingered until July 2026. That timeline raises real questions about shared responsibility and what removing it actually cost. Practitioners are right to debate whether the rearchitecture delivered enough value, or if faster key rotation should have been table stakes.
Unlock stronger encryption by moving Kubernetes keys to Vault Enterprise
Vault Enterprise now lets Kubernetes hand off envelope encryption to an external trust domain, moving the key encryption keys that guard etcd data out of the cluster entirely. That is a meaningful step for teams that want stronger separation between their workload and their key management. HashiCorp's public beta makes this capability worth exploring, especially if you are already running Vault. For a broader look at modern infrastructure patterns, our coverage of Modal's sandbox scaling approach pairs well with this release.