CVE-2026-92228: Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read
Apache Airflow's Keycloak provider before 0.11.1 lets any team member read every team's audit logs.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #audit-logs
LLM Agents Can Easily Tamper With Their Own Traces
All major LLM coding agent harnesses except Muse Code let agents delete their own traces, enabling concealment of misaligned behavior and audit tampering.
Mapping out your unknown: A threat hunter’s guide to GitHub
Datadog Security Labs publishes a threat-hunting guide with audit-log queries to detect GitHub token theft, device code phishing, and source code exfiltration.
8
Cops Search Thousands of Flock Cameras for Reasons of ‘LMAO,’ ‘IDK,’ ‘Hehe,’ and ‘asdfg’
EFF analysis found police searched Flock's 19,000-camera ALPR network using joke reasons like 'LMAO' and 'idk,' exposing routine warrantless surveillance abuse.
1
How to correlate Kubernetes audit logs with container runtime data
Elastic Security Labs shows how to join Kubernetes audit logs with Defend for Containers runtime data to investigate service account abuse and container escapes.
7