New NIST and CISA guidance on securing identity tokens fails to fully address the unique authorisation challenges and risks introduced by autonomous AI agents.
CISA and NIST have released new technical guidance to harden cloud identity tokens against theft, forgery, and misuse in SSO and API environments.
Cisco is urging customers to patch a critical zero-day vulnerability in its Secure Email Gateway after discovering active exploitation in the wild.
A critical vulnerability in Cisco's Secure Email Gateway is being actively exploited, allowing unauthenticated attackers to execute commands with root privileges.
GitLab has addressed a critical path traversal vulnerability, CVE-2026-85706, which enables unauthenticated attackers to access arbitrary files and secrets.
