Daily Cybersecurity
Threat Intelligence

AWS KMS or AWS CloudHSM: Choose the right key management solution

This article compares AWS KMS and AWS CloudHSM for cryptographic key management. AWS KMS is a fully managed service suitable for most cloud-based key management needs, while AWS CloudHSM provides dedicated HSM instances for legacy applications and strict compliance requirements.

AWS KMS or AWS CloudHSM: Choose the right key management solution

Amazon Web Services (AWS) offers two key cryptographic key management solutions: AWS Key Management Service (AWS KMS) and AWS CloudHSM. AWS KMS is a fully managed service designed for most cloud-based key management needs, integrating seamlessly with all AWS services and regions. It is cost-effective, charging $1 per key plus $0.03 per 10,000 requests per month, and supports symmetric and RSA 2048 operations.

AWS KMS or AWS CloudHSM: Choose the right key management solution

CISA shares advice on isolating vital systems during cyberattacks

CISA, the Australian Cyber Security Centre (ACSC), the FBI, and international partners released 'CI Fortify — Advice for isolating vital systems,' urging critical infrastructure organizations to prepare plans for disconnecting OT from corporate and internet-facing networks during cyberattacks. The guidance covers identifying minimum systems for critical service delivery, documenting all connections, and determining isolation points.

vBulletin fixes critical pre-auth RCE flaw with public exploit

CVE-2026-61511 is a critical pre-authentication remote code execution vulnerability in vBulletin forum software affecting versions up to 5.7.5 and 6.2.1. The flaw resides in the runMaths() function, which fails to sanitize user input before passing it to PHP's eval().

2026 Phase 1a IRAP report is now available on AWS Artifact for Australian customers