Updated daily · 209 stories
Identity and security news
What happened in identity and security, why it matters, and what to check, curated every weekday by the community with the primary source linked.
Latest stories
- BreachDigiCert says self-registered accounts read archived customer data, including some ID documentsDigiCert is notifying customers that an unauthorized, self-registered account read archived customer records from an internal business system between June 27 and July 2, 2026. Most were contact details; a small minority included driver's licenses, passports or utility bills. Certificates were not affected.
- OpenSSH 10.6p2 fixes a password bypass on musl systems such as Alpine when PAM is offOpenSSH 10.6p2, released November 5, works around a password authentication bypass in sshd on Linux systems built with musl libc and PAM disabled. An oversized password can log in to accounts meant to be key-only, including root on Alpine.
- BreachTrigger.dev says an attacker read environment variables for a subset of customer organizationsAI workflow platform Trigger.dev disclosed on November 1 that an attacker gained unauthorized access to environment variables for a subset of organizations. It says the exploit is blocked and affected owners were emailed, but has not said how it happened or how many customers were hit.
- VulnerabilityApache OFBiz 24.09.08 fixes a hard-coded JWT key, a password reset takeover and default-open REST authApache OFBiz 24.09.08, announced November 4, fixes a batch of authentication flaws: a hard-coded JWT key giving unauthenticated admin access, a password reset flaw allowing account takeover, a reusable login key not bound to a session and REST operations open by default.
- BreachChainalysis now says password hashes and live tokens for all users were exposedChainalysis said on November 4 that names, usernames, password hashes and live tokens for all users were exposed, reversing its October 30 statement that no session tokens were accessed. It took KYT, address screening and its login page offline after abnormal activity.
- Digital IDDigiD DDoS shows how little availability headroom the Dutch national login has leftA DDoS attack on October 30 left DigiD only partly reachable for about 90 minutes, blocking logins to the Dutch tax office and MijnOverheid. Government figures show DigiD availability down to 99.57% this year against a 99.5% norm.
- BreachDreamHost says File Manager attacker took FTP passwords and webmail sessions for about ten weeksDreamHost's breach notice, filed with California's attorney general, says an attacker who exploited its web File Manager captured the FTP/SFTP credentials of everyone who logged in from about August to October 23, 2026, and may have exposed webmail session data, emails and files.
- AI agentsKantara risk group says AI agents need their own identity risk framework, not an extension of the human oneKantara Initiative's Digital Identity Risk group found that agentic AI needs a separate risk framework from its human-focused taxonomy, naming orphaned agent identities, dormant credentials, identity drift and agents posing as humans as the risks to plan for.
- Token theftVercel starts binding dashboard sessions to devices with DBSC in ChromeVercel is gradually rolling out Device Bound Session Credentials for vercel.com sign-ins, so a stolen session cookie stops working away from the device that holds the key. It works only in Chrome on Mac and Windows for now, and DPoP for the Vercel CLI is in progress.
- Machine identityOne actor signed in as Entra ID apps with stolen secrets and reached 27 organizations, Todyl saysTodyl is tracking an ongoing campaign in which one operator uses stolen client secrets to sign in to Microsoft Entra ID as app registrations, reaching 27 organizations including MSP clients, searching mail and downloading files. No Microsoft vulnerability is involved.
- BreachBinance says a fake job interview and an internal AI tool led attackers to its wallet signing serviceBinance's initial findings trace the $6.34 billion theft to a September fake recruiter whose coding assignment infected an engineer's Mac. An internal AI tool let the attacker reach two wallet engineers, and a container deployment token on one laptop opened the signing service.
- BreachChainstack says an attacker reached production through a third-party component and took password hashesBlockchain infrastructure provider Chainstack says an attacker entered a development environment through a third-party component on October 26, reached production on October 29 and accessed customer names, emails and password hashes before being cut off on October 31.
- VulnerabilityDocker Sandboxes copy flaw let an AI agent reach host files such as cloud keys and SSH keysA symlink flaw in the Docker Sandboxes copy command, CVE-2026-103916, let an AI coding agent inside the sandbox read or write host files outside its allowlist, such as cloud credentials and SSH keys, when the operator ran a copy. Docker fixed it in v0.51.0 on November 3.
- BreachPassword manager mSecure tells users to change passwords and remove passkeys, without saying what happenedmSecure's developer emailed current and former customers on November 3 about suspicious activity linked to the password manager, advising them to change passwords, reset two-factor authentication and possibly remove passkeys. It has not said what happened or whether vault data was exposed.
- Token theftGoogle: LLMjacking starts with stolen cloud identities and has cost some companies $1 millionGoogle Threat Intelligence Group and Mandiant say LLMjacking intrusions ran up more than $100,000 in fraudulent AI charges in a day and $1 million in total at some organizations. The usual way in was a stolen service account key, access key, GitHub token or session token.
- BreachWorkOS says an AI-assisted attack framework reached its internal sales tool and CRM dataWorkOS found unauthorized access on October 30 to an internal tool its sales and customer teams use, exposing CRM contacts, call and Slack excerpts, and directory health metadata. It saw an AI-assisted offensive framework and no access to production or application data.
- BreachBinance ties its $6.3 billion theft to a compromised DevOps engineer's laptopBinance said on October 30 that attackers used a DevOps engineer's compromised laptop to reach a service container and submit unauthorized withdrawals, moving about $6.3 billion on October 29. TRM Labs attributes the theft to North Korea's TraderTraitor; about $2.7 billion was frozen.
- Zero-dayCISA adds the last two Ivanti Connect Secure chain flaws to KEV after Ivanti's October 29 patchCISA added Ivanti Connect Secure CVE-2026-111357 and CVE-2026-118527 to its exploited list on October 30, a day after Ivanti patched the root escalation UTA0576 chained with the CVE-2026-104935 login bypass. Federal deadlines are November 2 and November 13.
- Social engineeringMicrosoft: fake Teams help desk calls led to AD CS certificates for privileged accounts and a domain controllerMicrosoft investigated two intrusions that began with attackers posing as IT support on Teams and ended with Active Directory Certificate Services abuse. ESC1 yielded certificates for 11 privileged accounts, ESC8 one for a domain controller, and one account left out of automated containment carried the data out.
- BreachNorthflank tells customers to assume every environment variable was decrypted after AI keys are abusedAfter a Wiz alert on October 30, cloud platform Northflank told customers to assume all environment variables were decrypted and rotate every key. Customers then reported unauthorized use of AI API keys stored on the platform. Wiz counts nine AI developer platform incidents in October.
- Machine identity26,400 working cloud and AI credentials found in public Gitee repositoriesA researcher scanned 7.25 million public repositories on Gitee, China's largest Git platform, and found 26,400 unique credentials that still worked, led by Alibaba Cloud access keys. One was an active organization-admin credential for a major enterprise AI platform.
- VulnerabilityLangflow flaws let attackers bypass authentication and run code; only 1.13.0 fixes themIBM's October 28 bulletin covers four Langflow flaws in every release from 1.0.0 to 1.12.8, including CVE-2026-93680, a 9.8-rated authentication bypass a public Metasploit module already cites, and unauthenticated code execution through MCP tool enumeration. Upgrade to 1.13.0.
- VulnerabilityLXD and MicroCloud flaw let attackers pose as any trusted client using only its public certificateCanonical's CVE-2026-112816 let an attacker authenticate to the LXD and MicroCloud HTTPS API as any trusted client by attaching that client's public certificate to their own TLS chain. Fixed in LXD 4.0.15, 5.0.11, 5.21.9 and 6.10.1.
- AI agentsOne scanner posed as 32 AI bots to hunt for .env files and SSH keys, Cequence saysCequence's CQ Prime research team said on October 28 that a single actor rotated through about 32 claimed AI crawler and assistant identities, from OpenAI to Perplexity, to request .env files, cloud credential files and private SSH keys. On one day it reached 48% of monitored organizations that saw AI bot traffic.
- Token theftA shared ChatGPT link could read the victim's session token and private chats, Parameter saysParameter disclosed on October 28 a chain that let a shared ChatGPT conversation run script as chatgpt.com, read the viewer's session token and call ChatGPT's APIs as them, including pulling private chats. OpenAI fixed it by October 26 and paid a $5,000 bounty.
- AI agentsBank of America tells customers not to give AI agents their banking passwordBank of America emailed customers urging them never to share their username and password with an outside service, including an AI tool or agent that offers to act on their behalf, and reminded them they are responsible for activity from shared credentials. A spokesperson confirmed the email to TechCrunch on October 27.
- AI agentsIBM makes Agent Identity and HashiCorp Vault 2.2 generally available to govern AI agentsAt TechXchange 2026 on October 27, IBM made Agent Identity and HashiCorp Vault 2.2 generally available. Agent Identity records each AI agent's owner, lifecycle and granted authority, while Vault gives agents their own accounts, renews their credentials and revokes them on unauthorized actions.
- AI agentsInfisical raises a $40 million Series B to build secrets and credential access for AI agentsInfisical announced a $40 million Series B on October 27 at a $600 million valuation, led by Elad Gil. The open-source secrets company says it will invest in secrets, certificate and privileged access management and in Agent Vault, which brokers AI agent access without exposing credentials.
- BreachSony's So-net says an intruder took 2.6 million member records and 54,401 email passwordsSony Network Communications said on October 27 that an outsider reached the So-net member database on October 19 and took about 2.6 million So-net and plala records plus 54,401 email addresses with their passwords. It reset those mail passwords the same day.
- Social engineeringArctic Wolf counts 400-plus fake IT help desk intrusions over Teams external chatArctic Wolf Labs said on October 26 it analyzed more than 400 incidents where attackers flooded an inbox with spam, then messaged the employee on Microsoft Teams as IT support and talked them into Quick Assist. Some reached code execution within 15 minutes.
- Tailscale SSH forwarding flaws let permitted sessions reach root-only socketsTailscale published four security bulletins on October 26, fixed in 1.104.4. The worst, TS-2026-014, let an authenticated Tailscale SSH peer allowed to forward ports reach root-only sockets such as Docker or the tailscaled local API.
- VulnerabilityAuthMask flaw let any Android app pull work-account tokens from Microsoft AuthenticatorEnclave disclosed on October 23 that Microsoft Authenticator for Android trusted a caller's claimed identity, so a zero-permission app could pose as Teams and receive Microsoft Graph tokens for the signed-in work account. CVE-2026-80097 was fixed in 6.2606.4246.
- VulnerabilityHPE fixes three ArubaOS authentication bypass flaws among eight maximum-severity bugsHPE patched 72 ArubaOS vulnerabilities, eight of them maximum severity, including authentication bypasses CVE-2026-79844 and CVE-2026-79845 in AOS-10 and CVE-2026-79850 in AOS-8. HPE knew of no public exploit code or in-the-wild use.
- Machine identityLiteLLM traces its poisoned release to an admin key leaked in May and never revokedLiteLLM's October 23 attack-chain report says an Agent Platform admin key committed to a public repo on May 27 was deleted but never revoked. On October 10 it returned a GitHub org owner's unscoped CLI OAuth token, which led to stolen maintainer tokens and the 1.107.0 release.
- Token theftHuntress tracks stolen-session replay into 79 Microsoft 365 organizations without a passwordHuntress reported on October 22 that one actor replayed tokens stolen by AiTM and device-code phishing into 79 organizations between July 14 and September 22, registering rogue Entra devices and swapping MFA methods within hours to survive password resets.
- VulnerabilityOkta Access Gateway flaw lets an admin run system commands as the gateway's service accountOkta published CVE-2026-115547 on October 22: an input validation flaw in the Okta Access Gateway Admin Console lets an authenticated administrator execute system commands as the OAG service account. CVSS 9.1; fixed in 2026.10.2.
- BreachRailway says an attacker decrypted environment variables in up to 100,000 workspacesRailway's October 22 preliminary report says an attacker pulled encrypted customer environment variables, obtained CI credentials to decrypt a subset, and hunted for AI provider keys. At most 1.85% of workspaces, about 100,000, may be affected; all Railway API tokens were revoked.
- Access broker k0t breached FortiGate and GlobalProtect edges and exposed more than 70,000 credentialsGroup-IB and NyxLab reported on October 21 that k0t, a likely initial access broker, broke into Fortinet and Palo Alto edge devices with known CVEs and brute force, decrypted stolen FortiGate configs, and exposed more than 70,000 credentials tied to network devices and LDAP dumps.
- VulnerabilityGitLab patches a SAML-to-LDAP account takeover and OIDC discovery cache poisoningGitLab's October 21 critical patch release fixes CVE-2026-15723, which let a signed-in user take over an LDAP-backed account when OmniAuth SAML and LDAP auto-linking are both on, plus OAuth/OIDC discovery cache poisoning and a SAML/LDAP membership lock gap.
- AI agentsPoisoned LiteLLM 1.107.0 shipped a credential stealer to PyPI and Docker for under three hoursLiteLLM said on October 21 that attackers published a malicious litellm 1.107.0 to PyPI, Docker Hub and GHCR, built from a lookalike Berri-AI/litellm repository. The package stole credentials and installed a backdoor; Wiz saw stolen AWS role credentials tested hours later.
- AI agentsMicrosoft names Storm-0940 behind ConnectWise app abuse that reached 2,250 Microsoft 365 tenantsMicrosoft said on October 21 that China-aligned Storm-0940 used the ARTEX agentic AI framework and stolen ConnectWise application identities to try signing in to more than 2,250 tenants, in some cases reaching privileged cloud access in under three hours.
- PasskeysAmazon says more than 500 million customers have turned on passkeysAmazon updated its passkey announcement on October 20 to say more than 500 million customers have enabled passkeys, which it says sign in about six times faster than passwords. Passwords remain available; Amazon calls a password-free account a goal, not a current default.
- Machine identityBrowsers block eight eMudhra intermediate CAs after their private keys are exposedA researcher reported on October 17 that the private keys of eight eMudhra (emSign) intermediate CAs, six for TLS and two for code signing, were exposed (later found to be trivially weak). Chrome and Firefox blocked them within hours; Apple, Microsoft and Go followed, and Mozilla is removing the emSign ECC root.
- PasskeysFIDO Alliance to publish its wallet certification documents and opens a forum for issuers and regulatorsAt Authenticate 2026 on October 20, the FIDO Alliance said it will publish the Credential Manager Reference Architecture and a Framework for Verifier Identification in the coming weeks, and opened an External Advisory Forum for issuers, governments and regulators.
- BreachICO reprimands Ogi and Data Cymru after a 12-year-old test account with Password1 let ransomware inThe UK ICO reprimanded Ogi Networks and Data Cymru on October 20 over a November 2024 ransomware attack that entered through a test account named Test2, created in 2012 with the password Password1, and exposed data on 3,300 people, mostly children.
- Social engineeringFIDO and Imprivata survey: frontline authentication friction costs 32,400 hours a yearA Sapio Research survey of 700 IT and security leaders for Imprivata and the FIDO Alliance finds 95% have seen frontline workers work around authentication, 33% by sharing credentials, and only 15% use passkeys without a password. 60% report social engineering against the service desk.
- Token theftGhostAction phish completes a GitHub device flow, then hides a stealer in a font fileOpenSourceMalware found a fake GitHub security alert that proxied a maintainer's password and 2FA code, then silently completed an OAuth device flow for repo, workflow and read:org scopes. A second stage planted a credential stealer named fa-solid-400.woff2 in 94 repositories.
- VulnerabilityQilin and INC use the GlobalProtect auth bypass to skip MFA, then dump domain controller disksUnit 42's October 19 update says Qilin and INC ransomware operators are exploiting CVE-2026-0257 in PAN-OS GlobalProtect to open VPN sessions without MFA, then in one case pivoted to vCenter and dumped credentials offline from a domain controller's virtual disk.
- BreachZeabur to shut down after a non-expiring admin token opened its shared clusterZeabur says an attacker used a shared-cluster admin token created in January 2024 with no expiry, plus internal AWS keys, all stored in plaintext in a private config repo, to read 3.2 million environment-variable records. The developer hosting platform will close by December 31, 2026.
- Token theftOne ConnectWise app credential opened Microsoft 365 tenants across MSP customersHuntress found an attacker signing in as the ConnectWise Cloud Backup (formerly SkyKick) Entra app with a stolen app credential, pulling Microsoft Graph tokens in 162 tenants by October 16 and using a Cloud Management app to grant itself Global Administrator. ConnectWise has disabled seven app identities.
- VulnerabilityPEERSTITCH implant tags FortiOS VPN sessions to skip security checksUnit 42 found an in-memory FortiOS implant that patches the IKE daemon so tagged VPN sessions bypass default security validations. Attackers reached root with CVE-2025-61624, which CISA added to KEV on October 16, and stole VPN credentials from 500+ firewalls.
- Zero-dayBeyondTrust Remote Support zero-day let ARMORY CASTLE dump the credential vaultCVE-2026-102764, a CVSS 9.3 flaw in self-hosted BeyondTrust Remote Support through 26.2.3, was exploited as a zero-day by the China-nexus group ARMORY CASTLE. Mandiant says the attacker pulled every admin credential from the appliance vault and raised Jump Item roles. CISA added it to KEV on October 16.
- PasskeysFIDO Passkey Index 2026: passkeys now carry 36% of sign-ins, and FIDO estimates 7 billion in useThe FIDO Alliance's Passkey Index 2026, built on data from 15 consumer services, finds 36% of successful sign-ins use a passkey, up from 26%, with a 93% success rate against 78% for passwords and traditional MFA. FIDO now estimates 7 billion passkeys are in use worldwide.
- SecretsGhostAction returns: about 1,900 hijacked GitHub accounts pushed secret-stealing workflows to 30,000 reposGitGuardian counts more than 30,000 repositories and about 1,900 compromised GitHub accounts in GhostAction's October wave, which committed workflows that dump Actions secrets and scan git history for credentials. Some victims were hit in 2025 and never rotated.
- Social engineeringIndia mandates registered caller name display (CNAP) on 4G and 5G networks from November 1India's Department of Telecommunications has ordered all access providers to show callers' subscriber-registered names on incoming calls from November 1, 2026, a network-level identity signal aimed at spam and fraud calls.
- Zero-dayIvanti Connect Secure auth bypass exploited; CISA gave agencies three daysCVE-2026-104935 lets an unauthenticated attacker bypass Ivanti Connect Secure's login with a crafted header and run commands. Exploited since early October by an actor that went on to harvest LDAP and Active Directory credentials. KEV deadline October 16.
- VulnerabilityNGINX session ticket bug can skip client certificate checks in mTLS setupsCVE-2026-97629 lets a forged TLS session resume on NGINX 1.23.2 through 1.31.6 when a shared session cache is set without a ticket key file, which can bypass client-certificate verification. Fixed in 1.30.6 and 1.31.7; no exploitation reported.
- BreachPassword "123456" linked to the breach of Denmark's national CPR register covering 8.8 million peopleSomeone abused a private company's lawful search access to Denmark's CPR register and pulled names, addresses and CPR numbers for about 8.8 million people. A person claiming responsibility says the account password was 123456.
- DOJ charges 14 and shuts 40 laptop farms in North Korean IT worker identity schemeThe Justice Department charged 14 people, including aggravated identity theft, and seized about 187 computers and KVM devices after dismantling more than 40 Texas laptop farms that let North Korean IT workers pose as US employees at more than 70 companies.
- Supply chainSlugFest: npm trusted publishing trusted repository names, so reclaimed names could publishBloom Security found npm trusted publishing matched GitHub repositories by owner/name until first publish, letting anyone who reclaimed a renamed or deleted slug mint publish tokens for more than 1,500 packages. npm now expires unvalidated configurations after 48 hours.
- VulnerabilitySAP Cloud SDK for Python flaw sends OAuth client secrets to attackersCVE-2026-89111, rated CVSS 10.0, lets whoever controls the tenant subdomain in a multi-tenant SAP BTP app redirect its OAuth2 token request and capture the client ID and secret. Fixed in 0.45.2, but the check went missing again in later releases.
- AI agentsWorkday to acquire C1.ai, formerly ConductorOne, to govern agent accessWorkday signed a definitive agreement to buy C1.ai, the access governance vendor that renamed itself from ConductorOne in April. Price undisclosed, close expected by January 31, 2027. The plan is to tie access for people and AI agents to Workday's HR lifecycle.
Older stories are in the monthly archive.