Decentralized identity and verifiable credentialsSEC X Account Attacker Arrested, Indicted by USCRA News ServiceOctober 18, 2024An Alabama man was arrested and indicted for the attack.
IdentityOkta Updates WIC to Address SaaS Security GapsCRA News ServiceOctober 17, 2024Okta has updated its Workforce Identity Cloud to address gaps in SaaS security.
Decentralized identity and verifiable credentialsCISA: Ongoing Attacks Using SolarWinds Hardcoded Creds BugCRA News ServiceOctober 17, 2024CISA is urging federal agencies to fix the bug by November 5.
Privileged access managementFIDO Releases New Draft Specs for Secure Passkey TransfersCRA News ServiceOctober 16, 2024The FIDO Alliance has released draft specifications related to secure passkey transfers.
IdentityUK’s NCSC Releases New MFA Implementation GuidanceCRA News ServiceOctober 14, 2024The UK's NCSC has released new guidance to help orgs implement MFA effectively.
Decentralized identity and verifiable credentialsApplause Credentials Exposed by Unsecured Config FileCRA News ServiceAugust 29, 2024Credentials for software testing firm Applause were exposed for three months due to a misconfiguration.
PrivacyUS Gov’t Sues TikTok Over Children’s Privacy ViolationsCRA News ServiceAugust 5, 2024The U.S. government has filed suit against TikTok and its parent company over children's privacy violations.
MSSPMalicious PyPI Package Targets Google Cloud Creds in macOSCRA News ServiceJuly 29, 2024Attackers use malicious Python PI package to exfiltrate Google Cloud creds from macOS systems.
