authorization
15 articles with this tag
INFO
HIGH
HIGH
MEDIUM
INFO
INFO
INFO
CRITICAL
INFO
HIGH
HIGH
HIGH
INFO
MEDIUM
INFO
Designing Patterns to Prevent IDOR
Pentesting vibe-coded applications: JWT flaws, exposed secrets, and broken authorization
VU#492466: Logto Identity Platform has authentication and authorization failures in core protocol handling
CVE-2026-58252 NATS Server: Subscribe Authz Bypass via Wildcard-Overlap
Enforce least-privilege authorization in multi-agent AI chains using Cedar
Building secure B2C applications with fine-grained access control using Amazon Cognito and Amazon Verified Permissions
Why Policy in Amazon Bedrock AgentCore chose Cedar for securing agentic workflows
CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline
Kubernetes v1.36: Fine-Grained Kubelet API Authorization Graduates to GA
Old Docker authorization bypass pops up despite previous patch
We audited authorization in 30 AI agent frameworks — 93% rely on unscoped API keys
We (at Tachyon) found an auth bypass in MLflow
Redpanda brings identity, policy control, and data governance to AI agents
org.keycloak:keycloak-services 10.0.0 vulnerabilities | Snyk
Customer Identity & Access Management: Die besten CIAM-Tools