Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

This week's roundup covers a maximum-severity Cisco ISE zero-day under active exploitation, an actively exploited Android ...

WordPress Click2Shell vulnerability lets attackers silently install themes on any admin’s site via a single crafted link, ...

Mechanism: The OAuth2 Passthrough Fallback The vulnerability, tracked as CVE-2026-59822, originates in the authentication handler for the Model Context Protocol (MCP) within LiteLLM. LiteLLM serves as ...

Brevo is a French SaaS company that provides a digital marketing and customer communication platform for businesses. It was ...

This article is a memo summarizing the numerous pitfalls I encountered when trying to integrate the Google Calendar API into ...

The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of ...

In today's update of our weekly series, we'll walk you through the actively exploited bug at Cisco, updates by OpenAI and Anthropic and more. | Technology News ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Attackers can exploit CVE-2026-69843, a critical authentication bypass in Microsoft Fabric, without credentials or user interaction. This CVSS 10.0 vulnerability uses a network attack vector and ...

The problem is rarely a missing security tool. It is the gap between testing individual endpoints and validating how the application behaves when authentication, authorization and business workflows ...

Building identity and accountability for AI agents. Here's how to govern and manage AI agents without hampering their productivity.