CVE-2026-73334 and the Trust Boundary Inside an Encrypted Parquet File
September 21, 2026CVE-2026-73334 lets a tampered Parquet footer route a reader's KMS token to an attacker. Here's the fix, Iceberg's safe path, and how to audit your lakehouse.
7 posts tagged with "Security"
Keeping Lakehouse Traffic Off the Public Internet With Apache Polaris
September 21, 2026A private Polaris lakehouse still leaks data if the storage hop goes public. How to bind vended credentials to private networks on AWS, Azure, and GCP.
Building Apache Iceberg Lakehouses That Run Without an Internet Connection
August 04, 2026How to build an Apache Iceberg lakehouse that runs fully offline: storage, catalog, compute, cross-zone transfer, compliance, and the failure modes that bite.
Cross-Cloud Credential Vending in Apache Polaris and the End of Permanent Storage Keys
August 04, 2026How Apache Polaris vends short-lived, prefix-scoped storage credentials across AWS, Azure, and GCP, and how to retire permanent storage keys for good.
Defending the Lakehouse Gateway Against Prompt Injection and Data Exfiltration
August 04, 2026Defending the lakehouse gateway against prompt injection and data exfiltration: per-user identity, no-SQL tool surfaces, volume bounds, and detection in query behavior.
Policy Layer for Autonomous AI Data Agents
July 13, 2026An in-depth exploration of policy layer for autonomous ai data agents
REST Catalog Credential Vending for Iceberg
July 13, 2026An in-depth exploration of rest catalog credential vending for iceberg