Identity & access · News & analysis
Microsoft 365 Token-Replay Cases Show Why Password Resets Leave Cleanup Unfinished
Huntress’s investigation connects stolen sessions with rogue devices, altered MFA methods and hidden mailbox rules.
NEWS · ALERTS · RESEARCH
Identity & access
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
Original reporting & analysis
Identity & access · News & analysis
Netwrix Fixes Dashboard-Link Exposure in Identity Manager
The vendor describes a limited authorization flaw affecting certain configurations and says its SaaS environment was patched before disclosure.
Identity & access · News & analysis
Auth0.js Fix Restores a Check on How Recently a User Signed In
The October advisory concerns applications that request a fresh authentication event, with implications for sensitive account actions.
Identity & access · News & analysis
Okta Sets Zendesk Provisioning Migration Dates as OAuth Replaces Basic Authentication
The change affects account provisioning rather than single sign-on, making lifecycle testing the important acceptance check.
Identity & access · News & analysis
Okta Event-Hook Postmortem Highlights a Blind Spot in Identity Automation
An October postmortem reports delayed and dropped events, showing why access workflows need verification beyond successful sign-ins.
Identity & access · News & analysis
The Passkey Gap Starts With the Credentials Employers Issue
An Okta and Yubico survey points to onboarding defaults and fragmented sign-in as obstacles to stronger authentication.
Identity & access · News & analysis
Auth0’s PrivateLink Gateway Pattern Puts Environment Boundaries in Focus
Auth0’s new architecture guidance routes a private connection to multiple environments, placing gateway rules at the center of the security review.
Identity & access · News & analysis
Entra’s October Sign-In Change Calls for a Browser-Extension Check
Microsoft plans tighter script controls on browser sign-in pages; businesses should test tools that modify the authentication experience.
Identity & access · News & analysis
Blueprint Alliance Puts AI Agent Ownership at the Center of Identity Security
A cross-vendor initiative proposes a shared architecture for agents, while implementation and interoperability remain the tests ahead.
Identity & access · News & analysis
A Real Sign-In Page Can Still Be Part of a Phishing Attack
Microsoft’s EvilTokens research puts device-code authorization and post-compromise mailbox access in the spotlight.
Headlines from our sources
231 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Yubico
Secure it Forward Spotlight: Where sustainability meets security ↗
ResearchDark Reading
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots ↗
Industry news
AWS Security Blog
Introducing Route 53 Resolved IP Validation for AWS Network Firewall ↗
ResearchDataBreaches.net
Hacker breached Capcom ID – obtained data from 11 million accounts and started changing passwords ↗
Industry newsAWS Security Blog
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope ↗
ResearchAWS Security Blog
Part 3 – Cybersecurity journeys: The work behind the work ↗
ResearchYubico
Imagine an internet that protects us, even when we make mistakes ↗
ResearchRapid7 Research
Simplify User Access Management with SCIM on Rapid7 Command Platform ↗
ResearchThe Hacker News
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens ↗
Industry newsSecurityWeek
Unexplained DreamHost Incident Prompts Email, FTP Password Resets ↗
Industry newsNIST Cybersecurity Insights
Design Tenets for Agent Identity Management Systems ↗
AgencyHelp Net Security
Private repos still leak secrets to Gheist, a stolen GitHub token campaign ↗
Industry newsHelp Net Security
DreamHost incident triggers password resets, locks customers out of email and FTP accounts ↗
Industry newsDark Reading
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets ↗
Industry newsInfosecurity Magazine
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens ↗
Industry newsHelp Net Security
Anthropic details what stops Claude Duet from going rogue ↗
Industry newsThe Hacker News
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts ↗
Industry newsThe Hacker News
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations ↗
Industry newsThe Hacker News
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs ↗
Industry newsHelp Net Security
Forgotten AI agents may still access sensitive company data ↗
Industry newsHelp Net Security
Synthetic identities leave US lenders with $2.4 billion in fraud exposure ↗
Industry newsThe Hacker News
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline ↗
Industry newsMicrosoft Security Research
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks ↗
ResearchThe Hacker News
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials ↗
Industry newsHelp Net Security
Microsoft 365 accounts compromised at 79 organizations, no passwords needed ↗
Industry newsInfosecurity Magazine
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise ↗
Industry newsThe Hacker News
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances ↗
Industry newsOkta Security
Node2Shell: Node.js Brotli flaw (CVE-2026-111497) ↗
ResearchOkta Security
Okta and Auth0 are removing trust in the eMudhra emSign ECC Root CA – G3 ↗
ResearchPalo Alto Networks Unit 42