Tag · 213 articles
Security
Week in Review: Weaponized OAuth Redirection Logic Delivers Malware, Patch Tuesday Forecast
Recent attacks leveraging OAuth redirection logic have delivered malware. Learn how to protect your applications and stay ahead of Patch Tuesday updates.
OAuth Redirection Abuse Enables Phishing and Malware Delivery - Microsoft
Learn about OAuth redirection abuse and how it enables phishing and malware delivery. Protect your applications with best practices.
Duncan: 2 Key Changes Pushing DOD Toward 2027 Zero Trust Finish Line - MeriTalk
DOD's push toward Zero Trust by 2027 is driven by two key changes. Learn how these shifts impact IAM and what developers need to know to stay compliant and secure.
Go Secretless with Snowflake Workload Identity Federation - Snowflake
Configure Snowflake Workload Identity Federation with AWS IAM roles — including EXTERNAL_OAUTH_CLIENT_ID, EXTERNAL_OAUTH_TYPE=AWS_IAM, and trust policy setup to eliminate static secrets and stop managing long-lived Snowflake credentials.
JWT Algorithm Confusion Attacks: How CVE-2026-22817, CVE-2026-27804, and CVE-2026-23552 Work and How to Fix Them
Fix JWT algorithm confusion: CVE-2026-22817 (Hono, CVSS 8.2), CVE-2026-27804 (Parse Server, CVSS 9.3), CVE-2026-23552 (Apache Camel). RS256→HS256 bypass and alg:none attacks explained with language-specific fixes.
OAuth Permissions in Microsoft Entra ID Enable Stealthy Corporate Email Access
Learn how OAuth permissions in Microsoft Entra ID can enable stealthy corporate email access and how to secure your applications against unauthorized access.
PingOne MFA Configuration: Push Notifications, TOTP, and FIDO2 Setup
Learn how to set up MFA in PingOne using push notifications, TOTP, and FIDO2. Get hands-on with configuration steps and best practices.
Digital Identity Provider V-Key Secures Strategic Investment
Digital identity provider V-Key secures strategic investment, enhancing its capabilities to offer robust authentication solutions. Learn how this impacts security and how developers can leverage V-Key in their applications.OAuth redirect_uri Mismatch Error: Complete Fix Guide
Fix OAuth redirect_uri mismatch errors across Keycloak, Auth0, Okta, Azure AD, Google, ForgeRock, and AWS Cognito. Every cause including trailing slashes, protocol mismatch, reverse proxy issues, and framework-specific fixes.
Keycloak Realm Federation: Connecting Multiple Identity Sources
Learn how to implement Keycloak Realm Federation for connecting multiple identity sources. This guide covers setup, security, and best practices with code examples.
DShield Sensor Detects Credential Stuffing Attack with Self-Propagating SSH Worm
DShield detects a credential stuffing attack using a self-propagating SSH worm. Learn how to protect your systems and prevent similar breaches.
Nebraska State Council Gains Strength Ahead of Midterm Elections - IAM Union
Learn how the Nebraska State Council IAM Union is gaining strength ahead of midterm elections and its impact on IAM professionals and security.
PingOne AIC Tenant Configuration: Environment Setup and Best Practices
Learn how to configure your PingOne AIC tenant for secure and efficient identity management. Includes setup steps, best practices, and security tips.
Why ‘good enough’ security beats the Zero Trust mirage for mid-sized organizations
Discover why mid-sized organizations might find 'good enough' security more practical than the Zero Trust model. Learn actionable steps to secure your infrastructure effectively.
Critical CleanTalk Plugin Flaw Allows Authorization Bypass on WordPress via Reverse DNS
A critical flaw in the CleanTalk plugin for WordPress allows authorization bypass via reverse DNS. Learn how this affects security and what steps you need to take to protect your site.
PingAccess API Gateway: Securing APIs and Web Applications
Learn how to implement PingAccess API Gateway for securing APIs and web applications. Get hands-on with configuration examples and security best practices.
SAML vs SSO: Navigating Identity Management Protocols
Explore the differences between SAML and SSO, their use cases, and best practices for implementing them securely in your applications.
Apple @ Work: Platform SSO - The Game-Changer for Enterprise Security
Explore how Apple @ Work Platform SSO revolutionizes enterprise security by enabling seamless, centralized authentication. Learn best practices for integration and the benefits it brings.
WebAuthn Conditional UI: Streamlined Passwordless Login Experience
Learn how to implement WebAuthn Conditional UI for a seamless passwordless login experience. Discover best practices and security considerations with code examples.