Search: “Okta Access Gateway”

38 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 7 Ransomware 6 AI tools & infra 5 Phishing & fraud 3 Policy & legal 3 Data breach 3 Malware 2 AI safety & security 2 Exploit / PoC 2 Industry 2 Threat actor 2 Advisory 1 Research 1

SeverityAll critical 13 high 10 medium 10 low 1 info 5

Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS, Authentication Bypass and SQL Injection

Okta patches three high-severity flaws in Auth0 AD/LDAP Connector and Access Gateway: stored XSS, auth bypass, SQL injection.

Okta disclosed on September 8, 2026 three vulnerabilities: CVE-2026-85982, a CVSS 9.0 stored XSS in Auth0 AD/LDAP Connector before 8.0.0; CVE-2026-78626, a CVSS 8.1 Protected Rule authorization bypass in Access Gateway before 2026.9.1; and CVE-2026-78623, a CVSS 7.7 SQL injection in Access Gateway advanced-mode datastores. Exploitation requires authenticated access and specific configurations. Fixes require upgrading the connector to 8.0.0+ and Access Gateway to 2026.9.1+.

GBHackersSep 11, 09:42 UTC · 5d agoVulnerability 2 sources CVE-2026-85982 CVE-2026-78626 CVE-2026-786231

62

Okta expands deployments for Canadian Western Bank, First National of Nebraska, and Nota

Help Net SecurityDec 4, 00:00 UTC · Dec 4, 2020AI tools & infra

30

Okta partners with Atlassian to accelerate organizations’ move to the cloud

Help Net SecurityOct 10, 00:00 UTC · Oct 10, 2019Industry

30

Traefik Labs brings independent verification to AI agent governance

Traefik Labs announces Sovereign Trust Plane in Traefik Hub, adding verifiable delegation, policy enforcement, and tamper-evident audit records for AI agent traffic.

Traefik Labs announced the Sovereign Trust Plane for Traefik Hub, generally available by September 30, 2026, providing delegated access, policy enforcement, and tamper-evident records for AI agent, tool, and API traffic. It implements the IETF ID-JAG draft with Okta Cross App Access and Janssen, enforces decisions through OpenID AuthZEN with OpenFGA and Cerbos, and commits cryptographic log fingerprints to transparency checkpoints verified by independently administered witnesses. The gateway also extends enforcement to MCP tool calls and the MCP server's backend API connection.

Help Net SecuritySep 15, 08:20 UTC · 1d agoAI tools & infra1

38

Discounted Claude access bought on the gray market may expose every prompt you send

Help Net SecurityAug 6, 00:00 UTC · Aug 6, 2026Phishing & fraud

30

Strata introduces AI Identity Gateway to secure and govern agentic systems

Help Net SecurityNov 19, 00:00 UTC · Nov 19, 2025AI tools & infra2

30

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

The Hacker NewsAug 5, 15:36 UTC · Aug 5, 2026Threat actor

45

Cloudflare for Teams: Protecting corporations without sacrificing performance

Help Net SecurityJan 8, 00:00 UTC · Jan 8, 2020Malware

30

Symantec's new cloud access security solution enforces consistent security and data protection policies

Help Net SecurityJul 18, 00:00 UTC · Jul 18, 2019Ransomware

57

Kaspersky Security Bulletin: APT predictions 2024

Kaspersky SecurelistNov 14, 10:00 UTC · Nov 14, 2023Advisory CVE-2020-35730 CVE-2020-12641 CVE-2021-44026+1 CVEs

60

The SEC Won't Let CISOs Be: Understanding New SaaS Cybersecurity Rules

The Hacker NewsJan 31, 15:27 UTC · Jan 31, 2024Policy & legal

42

Cloudflare One: A cloud-based network-as-a-service solution for the remote workforce

Help Net SecurityOct 13, 00:00 UTC · Oct 13, 2020Exploit / PoC

60

Product showcase: Secure and scale your network with NordLayer's advanced security solutions

Help Net SecurityOct 21, 15:43 UTC · Oct 21, 2024Data breach

57

Tigera introduces unified control plane for Kubernetes-based AI agent security

Help Net SecurityJun 17, 00:00 UTC · Jun 17, 2026AI safety & security

30

Second Log4j Vulnerability (CVE-2021

The Hacker NewsDec 18, 13:56 UTC · Dec 18, 2021Vulnerability in the wildCVE-2021-45046 CVE-2021-44228

60

How Attackers Can Own a Business Without Touching the Endpoint

The Hacker NewsApr 19, 11:08 UTC · Apr 19, 2024Ransomware

57

Critical flaw opens Palo Alto Networks firewalls and VPN appliances to attack, patch ASAP!

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2020Vulnerability in the wildCVE-2020-2021

60

Nintex Workflow Cloud enhancements optimize business processes and workflows

Help Net SecurityJul 29, 00:00 UTC · Jul 29, 2021Research

55

Sagnik Nandy joins Okta as President of Technology and CTO

Help Net SecurityAug 4, 00:00 UTC · Aug 4, 2021Industry

55

ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More

The Hacker NewsOct 9, 14:32 UTC · Oct 9, 2025Ransomware CVE-2025-5037

60

You Don't Know Where Your Secrets Are

The Hacker NewsJan 31, 12:46 UTC · Jan 31, 2023Data breach

57

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

The Hacker NewsAug 4, 12:16 UTC · Aug 4, 2026Ransomware CVE-2026-50746 CVE-2026-50747 CVE-2026-50748+45 CVEs

60

PlainID Technology Network optimizes integration with mission-critical adjacent technologies

Help Net SecurityDec 22, 00:00 UTC · Dec 22, 2022AI tools & infra

30

API management (APIM): What It Is and Where It’s Going

Security AffairsFeb 2, 19:04 UTC · Feb 2, 2023AI tools & infra

30

Netskope accelerates cloud networking and security operations

Help Net SecuritySep 10, 00:00 UTC · Sep 10, 2024Policy & legal

55

Feds Charge Five Men in ‘Scattered Spider’ Roundup

Krebs on SecurityNov 22, 19:18 UTC · Nov 22, 2024Ransomware

57

Advanced threat predictions for 2023

Kaspersky SecurelistNov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild

60

The Gap in Your Zero Trust Implementation

The Hacker NewsSep 22, 04:18 UTC · Sep 22, 2021Data breach

57

QR codes are getting colorful, fancy, and dangerous

Help Net SecurityJan 15, 00:00 UTC · Jan 15, 2026Threat actor

45

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The Hacker NewsAug 5, 08:52 UTC · Aug 5, 2026Phishing & fraud1

30

Infosec products of the month: March 2023

Help Net SecurityApr 3, 00:00 UTC · Apr 3, 2023Policy & legal

42

Omnigent: Open-source AI agent framework and meta-harness

Help Net SecurityJul 8, 07:16 UTC · Jul 8, 2026AI safety & security1

30

Cybersecurity jobs available right now: April 21, 2026

Help Net SecurityAug 6, 12:16 UTC · Aug 6, 2026Vulnerability

30

Top 4 SaaS Security Threats for 2023

The Hacker NewsDec 12, 15:24 UTC · Dec 12, 2022Malware

55

5 API Vulnerabilities That Get Exploited by Criminals

Security AffairsNov 22, 23:17 UTC · Nov 22, 2022Vulnerability

55

Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widens

Help Net SecurityDec 3, 00:00 UTC · Dec 3, 2023Exploit / PoC in the wildCVE-2023-46214 CVE-2023-49103 CVE-2023-41998+5 CVEs2

60

How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back

The Hacker NewsAug 29, 11:36 UTC · Aug 29, 2024Phishing & fraud

30

Review: Action1 – Simple and powerful patch management

Help Net SecurityAug 2, 04:43 UTC · Aug 2, 2024Vulnerability in the wild

60