access-control
120 articles with this tag
HIGH
MEDIUM
MEDIUM
LOW
CRITICAL
MEDIUM
HIGH
INFO
LOW
INFO
INFO
INFO
INFO
MEDIUM
MEDIUM
CRITICAL
INFO
HIGH
MEDIUM
MEDIUM
HIGH
MEDIUM
INFO
HIGH
MEDIUM
INFO
INFO
HIGH
HIGH
MEDIUM
MEDIUM
INFO
HIGH
HIGH
HIGH
INFO
HIGH
CRITICAL
MEDIUM
CRITICAL
INFO
MEDIUM
HIGH
MEDIUM
HIGH
INFO
INFO
INFO
CRITICAL
MEDIUM
INFO
CRITICAL
HIGH
HIGH
HIGH
INFO
CRITICAL
INFO
MEDIUM
HIGH
HIGH
MEDIUM
CRITICAL
HIGH
MEDIUM
CRITICAL
HIGH
HIGH
CRITICAL
MEDIUM
MEDIUM
HIGH
LOW
MEDIUM
INFO
INFO
INFO
LOW
INFO
LOW
HIGH
MEDIUM
MEDIUM
MEDIUM
INFO
INFO
INFO
LOW
INFO
INFO
MEDIUM
INFO
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
Uncontrolled Access Control: Compromising Paxton10
Dental contractor set up secret account with access to 4,000 patient records then left the company
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
Dental contractor set up secret account with access to 4,000 patient records then left the company
[NEU] [hoch] Apache Airflow: Schwachstelle ermöglicht Erlangen von Benutzerrechten
Broken Access control on Websocket streams
Inductive Automation Ignition
Your AI agent’s system prompt is not a security control
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
Secure mainframe access with HashiCorp Boundary
LastPass enhancements improve visibility, governance, and control
NIS2 compliance: Fixing IAM and access control before the 2026 audit
RightCrowd Pass unifies mobile, physical, and biometric credentials
From Fake Workers to Account Recovery: The Growing Identity Verification Risk
[NEU] [mittel] Hashicorp Vault: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.
How to Build an IAM Program: Strategy, Phasing, and What Goes Wrong
NCSC-2026-0303 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.
Secure all your internal vibe-coded applications — in one click
NCSC-2026-0297 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition
[NEU] [hoch] IBM Security Verify Access: Mehrere Schwachstellen
[NEU] [UNGEPATCHT] [mittel] Grafana: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Securing your Amazon S3 buckets: Identifying and remediating over-permissioned access
Multiples vulnérabilités dans les produits Wallix (06 août 2026)
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
Varonis Agent IBAC keeps AI agents within their intended boundaries
Precision privilege containment: Eliminating local admin rights without disrupting productivity
NCSC-2026-0271 [1.00] [M/H] Kwetsbaarheid verholpen in Cisco Secure Firewall Management Center
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
[NEU] [UNGEPATCHT] [mittel] Keycloak: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
[NEU] [mittel] Checkmk: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
Your AI agents can reach data no one approved
Siemens Mendix Runtime
'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure
NCSC-2026-0265 [1.00] [M/H] Kwetsbaarheden verholpen in SolarWinds Serv-U
Why Role-Based Access Breaks at Hospital Scale — and What Replaces It
Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data
[UPDATE] [hoch] IBM Security Verify Access: Mehrere Schwachstellen
Cisco Identity Services Engine Path Traversal Vulnerability
[NEU] [hoch] IBM Security Verify Access: Mehrere Schwachstellen
Your company already adopted AI and nobody is governing access
[webapps] KNX visualisering - Broken Access Control
NCSC-2026-0218 [1.00] [M/H] Kwetsbaarheid verholpen in Cisco Catalyst Center
[NEU] [UNGEPATCHT] [mittel] Keycloak: Mehrere Schwachstellen
NCSC-2026-0213 [1.00] [M/H] Kwetsbaarheden verholpen in MISP platform
Robinhood Cuts Access Approval Time to Support High-Velocity Development
Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs
Broken access control demo
Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
WitnessAI Agentic Control secures AI agents, tools, and MCP server access
CISA Adds One Known Exploited Vulnerability to Catalog
NCSC-2026-0197 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiPortal
CVE-2026-41092 Microsoft Kinect Elevation of Privilege Vulnerability
Schneider Electric EcoStruxure Panel Server
Silverfort integrates identity controls with Microsoft Copilot Studio agents
Acer working to patch max severity zero-days in Wave 7 routers
Why IAM Matters: Benefits, Challenges, and Common Pitfalls
[NEU] [niedrig] GitLab: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
[NEU] [hoch] Hirschmann HiSecOS: Schwachstelle ermöglicht Privilegieneskalation
Gitea Vulnerability Exposed 30,000 Deployments to Attacks
XM Cyber expands platform to enforce least-privilege access
Cisco Patches Critical Vulnerability in Secure Workload
Vulnérabilité dans Cisco Secure Workload (21 mai 2026)
[NEU] [mittel] Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Fortinet fixes two critical RCE flaws in FortiAuthenticator and FortiSandbox
NCSC-2026-0155 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiSandbox
NCSC-2026-0156 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiAuthenticator
Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator
Amazon Quick authorization bypass let users reach blocked AI chat agents
Veikleiki í Innu: „Lítum málið mjög alvarlegum augum“
[NEU] [mittel] JetBrains TeamCity On-Premises: Schwachstelle ermöglicht Privilegieneskalation
[NEU] [niedrig] Sonatype Nexus Repository Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
CVE-2026-6667 PgBouncer missing authorization check in KILL_CLIENT admin command
ICYMI: April 2026 @AWS Security
Why most zero-trust architectures fail at the traffic layer
OpenAI locks GPT-5.5-Cyber behind velvet rope despite slamming Anthropic for doing exactly that
Cequence Agent Personas bring granular control and governance to enterprise AI agents
Access control with IAM Identity Center session tags
[NEU] [UNGEPATCHT] [niedrig] Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
[NEU] [mittel] IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
[NEU] [mittel] Gitea: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
NCSC-2026-0126 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle E-Business Suite
[webapps] WordPress Plugin 5.2.0 - Broken Access Control
Top Cyber Hygiene Tips for Better Digital Security
Non-human identities now center of enterprise risk
Agentic AI changes the shape of trust
Browser Guard gets even better with Access Control
Securing non-human identities: automated revocation, OAuth, and scoped permissions
Managed OAuth for Access: make internal apps agent-ready in one click
[NEU] [mittel] IBM Security Verify Access: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Secureframe expands Comply with User Access Reviews for automated governance
Attackers exploited this critical FortiClient EMS bug as a 0-day
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability exploited in the wild
Fortinet Rushes Emergency Fixes for Exploited Zero-Day
New FortiClient EMS flaw exploited in attacks, emergency patch released
API authentication and authorization bypass
Cisco IMC auth bypass vulnerability allows attackers to alter user passwords (CVE-2026-20093)
[NEU] [hoch] IBM Security Verify Access: Mehrere Schwachstellen