Rapid7 Command Platform adds SCIM user provisioning
SCIM is off by default and lets an existing identity provider create, update, and deactivate Command Platform accounts.
22
- Mentions · 7d1
- Mentions · 30d6
- All mentions18
- First seenSep 8, 2026
- Last mentioned3d ago
Timeline
18 articles · newest firstResearchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections
Researchers showed IDN lookalike domains can evade Chrome’s Unicode display and near-match phishing warnings.
60
New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing
Researchers showed Chromium can display Unicode brand lookalike domains as readable text, bypassing Punycode warnings.
58
The people who know passkeys best are still typing passwords
Yubico and Okta found 43% of security professionals still sign in with passwords despite knowing passkeys.
41
Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns
Yubico and Okta found nearly half of security professionals still use passwords while AI-driven phishing rises.
48
11 Best Adaptive / Risk-Based Authentication Tools Compared (2026): Features & Pricing
Buyer's guide compares 11 adaptive and risk-based authentication products across workforce and fraud lanes, rating Microsoft Conditional Access, Cisco Duo, and Okta highest.
12
MCP Python SDK OAuth Flaw Lets Malicious Servers Hijack AI Agent Accounts
Malicious MCP servers can hijack OAuth tokens from vulnerable MCP Python SDK clients to take over AI agent accounts; patched in 1.30.0 and 2.2.0.
62
AI Accounts Are Becoming the New Target for Infostealers
SOCRadar found infostealer logs exposing AI sessions and API keys at 482 companies, mostly ChatGPT.
76
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
Okta webinar says organizations should govern AI agents as identities to limit excessive access and shadow AI.
30
Stolen AI credentials feed growing LLM proxy economy
Team Cymru estimates more than 80,000 proxy servers hide stolen AI credentials and enable model distillation.
74
Top 10 Best Adaptive / Risk-Based Authentication Tools in 2026 [Ranked & Scored]
A 2026 ranking scores ten adaptive authentication tools, placing Microsoft Conditional Access first.
18
Okta bets on identity to control AI agents, but is identity enough?
Okta launches an AI agent identity platform, betting that managing agent credentials will be a major cybersecurity market.
55
12 Best MFA Solutions Compared (2026): Features & Pricing
Comparative analysis ranks 12 MFA solutions, highlighting Cisco Duo for transparency and Microsoft Entra MFA for M365 integration amid rising phishing threats.
15
Five AI safety sessions every founder should have on their TechCrunch Disrupt 2026 agenda
TechCrunch Disrupt 2026 promotes five AI safety sessions on agents, enterprise deployment, and robotics.
20
Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS, Authentication Bypass and SQL Injection
Okta patches three high-severity flaws in Auth0 AD/LDAP Connector and Access Gateway: stored XSS, auth bypass, SQL injection.
62
Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection
Okta patched three flaws in Auth0 AD/LDAP Connector and Access Gateway, including a CVSS 9.0 stored XSS tracked as CVE-2026-85982.
45
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
Okta finds infostealer logs contain thousands of replayable AI session tokens and API keys, letting criminals bypass MFA and access services from Google, Anthropic and OpenAI.
60
Hunting Vulnerabilities Using Frontier Models
Okta used frontier AI models GPT-5.5 Cyber and Mythos via OpenAI and Anthropic programs to scan millions of code lines for vulnerabilities.
50
Related CVEs
by mentions- CVE-2026-78623<1%9.9SQL Injection in Okta Access Gateway via Unsanitized SAML Assertion Values
- CVE-2026-85982<1%9.0Stored XSS in Auth0 AD/LDAP Connector Admin Panel
- CVE-2026-78626<1%6.5Authorization Bypass in Okta Access Gateway Protected Rule Checks
Appears with
- Oktavendor · 9
- Googlevendor · 5
- OpenAIorganization · 4
- Microsoftvendor · 4
- Anthropicvendor · 4
- Anthropicorganization · 4
- Microsoftorganization · 3
- Ping Identityorganization · 3
- Ciscoorganization · 3
- Claudeai model · 3
- Yubicoorganization · 3
- Geminiai model · 3
- OpenAIvendor · 3
- Yubicovendor · 2
- Okta Access Gatewayproduct · 2
- Outlookproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.