Identity Security

The campaign identified at least forty-five application registrations across eighteen organizations, including many clients managed by third-party service providers. This surge in high-speed exploitation marks a pivotal moment where traditional cybersecurity defenses struggle to keep pace with the

The Cybersecurity and Infrastructure Security Agency recently expanded its Known Exploited Vulnerabilities catalog to include a critical flaw in SonicWall SonicOS that undermines SAML authentication controls. This development highlights a significant logic vulnerability, identified as

The sophisticated nature of modern cyberattacks often targets the very mechanisms designed to protect corporate networks, as seen in the recent discovery of a critical security flaw within SonicWall perimeter devices. This vulnerability, tracked as CVE-2026-19868, represents a significant threat to

Cloud-native security is shifting away from persistent, high-value credentials toward dynamic, short-lived mechanisms that expire in minutes to minimize the potential impact of a security compromise. This transition is driven by the inherent risks associated with static secrets, such as long-lived

A robust security architecture must validate that the relying party ID matches the application's domain to prevent origin mismatches during the sensitive WebAuthn registration phase. This requirement is not merely a suggestion but a fundamental pillar of the FIDO2 standard, ensuring that

The discovery of stolen VPN profiles and password lists within compromised tenants highlights the severe risks associated with neglected service-principal permissions. When a major cybersecurity campaign surfaced in late 2026, it revealed a sophisticated operation targeting over 27 organizations