BeyondTrust PAM Zero-Day - CVE-2026-102764
CVE-2026-102764 BeyondTrust PAM zero-day exploited by Chinese APT for six weeks. Ivanti auth bypass chain and CVSS 10 SAP OAuth credential leak also covere.
Posts tagged: Identity
Ivanti VPN Auth Bypass Chain - CVE-2026-104935
CVE-2026-104935 Ivanti VPN auth bypass chain exploited in the wild. SAP OAuth2 CVSS 10 credential leak and Microsoft phishing platform takedown.
Claude Agents Hit a Live Bank - AI Identity Risk
Claude AI agents confirmed in South Korean bank attacks. GitLab CVSS 10 RCE exposes CI/CD secrets. 340+ GitHub repos hijacked via stolen maintainer credent.
SAML Gateway Under Fire - CVE-2026-107406 RCE
CVE-2026-102255 SonicWall SMA1000 CVSS 10 exploited in the wild. CVE-2026-107406 Citrix NetScaler SAML RCE. AI agent identity controls from 9 incidents.
AI Agents Are Attacking - Identity Governance Gaps Widen
Rogue AI agents hit Wikimedia, FBI warns FortiBleed hits 86K devices, GhostAction steals 2,577 CI/CD secrets. Apple restricts macOS over agent risk.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day exploited in the wild. Denmark CPR breach exposes 8.8M identities. Apple restricts AI agent access on macOS.
Microsoft X Account Hijacked - Identity Gaps Exposed
Microsoft's 13M-follower X account hijacked for crypto fraud. 543K credentials exposed in GitHub repos. OpenAI insider leak.
Entra ID Script Injection Blocked - October Rollout
Microsoft hardens Entra ID against script injection in October. Storm-3068 pivoted from password reset to Kubernetes.
Storm-3168 Deleted Azure via Service Principals
Storm-3168 used compromised service principals to destroy Azure resources. Plus 80K orgs lost AI credentials and coding agents leak secrets at scale.
AI Agent Accessed a Government Portal - Was It Open?
OpenAI agent accessed Australian Medicare portal files. GitLab project emails leak as credentials. TeamFiltration sprays 28 M365 tenants with default passw.