SecurityKeycloak flaw lets unauthorized password resets
CVE-2026-18963 allows full account takeover via reset flow; patches out.
> Search
7 results for “identity security”
Security
SecurityDevice Trust Emerges as Key Defense in AI Era
As AI accelerates account takeover attacks, experts argue credentials alone can no longer secure access.
SecurityOkta Targets Identity Security Expansion
Okta plans to acquire Permiso Security to bolster its identity threat detection capabilities within multi-cloud environments.
SecurityThe Silent OAuth Exploit Bypassing Cloud Identity Defenses
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.
SecurityBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
Tech NewsJune 2026 M&A Surge Highlights Heavy Industry Pivot Toward AI Security
A flurry of 37 cybersecurity acquisitions in June 2026 underscores how major tech firms are rapidly integrating AI and identity governance.