Pagalishor markPagalishor Current

Tag archive

Identity security

Reporting on authentication, authorization, access review, and the controls around account security.

Access control, authentication, and account ownership.

Use this archive to follow a cross-cutting theme that appears across more than one category or topic.

19 published stories linked to this tag.

Browse all sections
Cisco SD-WAN vulnerabilities still need urgent triage
SecurityIdentity Security
Cisco SD-WAN vulnerabilities still need urgent triage
Cisco’s March advisory and April KEV activity kept the same message alive into this week: exposed SD-WAN control systems need upgrades, log review and tighter access right now.
Meera ShahApr 29, 20266 min read
Risk, resilience, and the systems companies rely on.Read story
SecurityIdentity Security
MCP security flaw is turning AI tooling into a supply chain problem
The latest disclosures around Anthropic's Model Context Protocol point to a broader enterprise risk. The issue is not one bad plugin. It is that a fast-growing agent standard may be pushing insecure trust assumptions deep into the AI toolchain.
Meera ShahApr 28, 20266 min read
Risk, resilience, and the systems companies rely on.Read story
SecurityIdentity Security
AI agent trust gap is turning into the next identity security fight
Enterprises are running more agent pilots, but the gap between experimenting and trusting those agents in production is widening into a concrete security problem.
Meera ShahApr 27, 20264 min read
Risk, resilience, and the systems companies rely on.Read story
SecurityRansomware and Breaches
Nginx UI MCP vulnerability: why this exploited flaw matters now
A newly exploited flaw in Nginx UI shows how quickly AI-connected management features can turn into a live server risk when core protections are skipped.
Meera ShahApr 23, 20263 min read
Risk, resilience, and the systems companies rely on.Read story
SecurityIdentity Security
Entra passkeys on Windows bring phishing-resistant sign-ins to unmanaged PCs
Microsoft has moved Entra passkeys on Windows into public preview, giving organizations a way to use device-bound passkeys on personal and shared PCs without relying on passwords.
Meera ShahApr 21, 20263 min read
Risk, resilience, and the systems companies rely on.Read story
SecurityIdentity Security
Microsoft says device-code phishing has become a faster identity threat
Microsoft’s April 6, 2026 research says attackers are scaling device-code phishing with automation and AI-written lures, turning a niche OAuth trick into a more practical account-takeover path.
Meera ShahApr 20, 20263 min read
Risk, resilience, and the systems companies rely on.Read story