#can


OAuth grants pile up faster than you can review them. Here’s how to keep up.

Oct 9, 2026 // 00:57

Every time an employee clicks “Allow” on an OAuth consent screen, they create a standing trust relationship between two apps. An AI note-taker gets access […]

The Credential Layer Is Expanding Faster Than Security Teams Can See It

Oct 6, 2026 // 12:48

Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps […]

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Oct 5, 2026 // 12:35

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted […]

How Financial Services Companies Can Modernize Their Software Supply Chain

Oct 1, 2026 // 14:50

Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. […]

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

Sep 30, 2026 // 11:10

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 […]

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

Sep 29, 2026 // 13:10

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log […]

How One Kubernetes YAML Can Hand Over a GCP Organization

Sep 23, 2026 // 17:16

When a developer needs to create a cloud resource — a database, a storage bucket, or a virtual machine — they need credentials to authenticate […]

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Sep 23, 2026 // 10:07

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other […]

Rogue external MFA providers can steal passwords during logins

Sep 23, 2026 // 00:56

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users’ passwords during legitimate login attempts. […]

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Sep 22, 2026 // 23:58

Cybersecurity researchers have disclosed details of a malicious npm package named “tw-pkgprobe-7731” that masquerades as a security tool targeting developers integrating Twilio into their applications, […]

1 2 3 … 8 Next