IAM Compliance Requirements and Best Practices: From Policy to Verified Enforcement
Identity and Access Management (IAM) compliance is the practice of proving that access controls are not just documented but actively enforced across…
Tag: access control
ISO/IEC 27001:2022 Annex A Access Control and Identity Management
ISO/IEC 27001:2022 is an international information security management standard. Its Annex A includes access control and identity management controls that organizations can…
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
Cisco has released security updates to address 12 vulnerabilities affecting Catalyst SD-WAN and IOS XE Software, including three with a CVSS score…
GHSA-xfqj-r5qw-8g4j: Paperclip API Access Control Flaws
Multiple API routes in Paperclip lacked proper access checks, exposing sensitive data and control-plane details. Fixed in v2026.416.0 with added authentication and…
CVE-2026-27771: Gitea Container-Registry Access-Control Flaw
A container-registry access-control flaw in Gitea estimated to affect over 30,000 deployments across more than 30 countries. Patched in May 2026.
Dataverse: Data Storage and Security
Dataverse is a data storage and management platform within Microsoft Power Platform. It stores tables that can be accessed via Power Pages.…
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
A now-patched vulnerability in Azure Cosmos DB could have allowed an attacker to escape the service's Gremlin query sandbox and gain full…
RabbitMQ Flaws Expose OAuth Secrets and Cross-Tenant Queue Metadata
Cybersecurity researchers at Miggo have disclosed two access control vulnerabilities in the RabbitMQ message broker that could allow attackers to leak OAuth…
UniFi OS Vulnerabilities
UniFi OS is the operating system for Ubiquiti's UniFi devices, affected by CVE-2026-54402, CVE-2026-55116, and previously weaponized CVEs. Users are advised to…
Cloud Security Alliance Research on Shadow AI
The Cloud Security Alliance partnered with Token Security to map the widespread exposure of AI agents in enterprise environments, emphasizing the need…