Signature Verification Bypass in Authlib (CVE-2026-28802): What Cloud Security Teams Need to Know

OAuth and OpenID Connect are the backbone of modern cloud-native identity and access management. From SaaS platforms and internal APIs to Kubernetes microservices, these protocols are responsible for verifying who is allowed to access what. When a vulnerability appears in a widely used authentication library, the impact can cascade across entire application ecosystems.

Why our AI world demands a remediation-first approach to exposure management

Editor's note: This guest article by Tanium Senior Sirector, Product Management, Julia Grunewald was originally published in SC Media Exposure management has emerged as a powerful alternative to traditional vulnerability management for good reason. A proactive, always‑on security discipline that continuously identifies an organization’s exposures and prioritizes them based on risk helps us know where to best focus our limited resources.

Native automation with Elastic Workflows: Build and demo | Elastic Security

Eliminate manual triage with Elastic Workflows, automation built natively into Elastic Security. In this walkthrough, Elastic product managers James Spiteri and Tinsae Erkailo show you how to build Workflows from scratch and apply them to real security use cases.

Sophos Protected Browser: Enforce access to critical resources

A step-by-step tutorial showing you how to use a federated identity provider (IDP) to enforce access to critical resources only through Sophos Protected Browser. The optional step to enforce the use of Protected Browser via Sophos Endpoint is also shown. Note: Microsoft Entra ID is used as the IDP in this Techvid. Ask questions and get expert answers in the Sophos Community.

How to Send a Large Amount of Photos: 6 Methods Compared

You have six ways to send a large amount of photos:cloud storage links, dedicated file transfer tools, email with a workaround, messaging apps, device-to-device transfer, and physical drives. Which one works best depends on how many photos you're sending, whether quality matters, and how private you need it to be. The default options most people try first all have real limits. Email cuts off around 25MB, which is about 5 to 10 full-quality photos.

How Secure Share for Jira & Confluence Simplifies Atlassian Migration

Migrating from Atlassian Data Center (DC) to Cloud is a strategic move for many organizations. While migration brings scalability, flexibility, and cost benefits, it also introduces challenges, especially around secure external access, data sharing, and business continuity. This is where Secure Share for Jira and Confluence becomes a powerful ally.

Business Continuity for Law Firms: Protecting Billable Hours and Court Deadlines

Law firm economics are unforgiving. According to the Clio Legal Trends Report, the average attorney bills only 2.5 hours per 8-hour workday. When IT systems fail, that already-thin margin disappears entirely. Consider a 20-attorney firm with average billing rates of $350 per hour.

Top 8 Web Security Threats Every Enterprise Must Know

Broadly defined, web security threats are any malicious attempts to gain unauthorized access to a computer system, network, or data via the internet. These website security issues range from automated bot attacks to sophisticated social engineering. Essentially, any vulnerability in a web application or browser that a cybercriminal can exploit falls under this category. Understanding these web security threats is the first step toward building a resilient defence.

The C-Suite's Biggest Mistake During a Cyber Crisis

After a major breach, grand statements about taking security seriously ring hollow when customer data sits in fraudsters’ hands. The biggest mistake in a crisis is clinging to control instead of trusting security specialists, stepping back for a short period and letting the expert lead the technical response. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..