Topic

Confused Deputy: news, advisories and analysis

3 articlesUpdated 26 Sep 2026

CyberSecureToday covers Confused Deputy across 3 articles published between 20 Sep 2026 and 26 Sep 2026. The coverage includes 2 vulnerability advisories and 1 analysis or guidance piece. 2 advisories are rated critical or high severity.

Stories on Confused Deputy most often intersect with Cloud Security, AWS and Amazon Web Services, with Technology, Cloud & SaaS the most affected sector. The most recent story, “AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda”, was published 26 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda
AWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSCritical
Microsoft Azure Arc Confused Deputy Flaw Enables Privilege Escalation Across Hybrid Clusters
Microsoft discloses critical CVSS 10.0 flaw CVE-2026-69399 in Azure Arc, enabling unauthenticated attackers to exploit confused deputy proxies across hybrid cloud nodes.
Daniel Okafor25 Sep 202618 min read
InsightsCloud & SaaS
Malicious MCP Servers Exploit OAuth Metadata Flaw in Rust SDK to Hijack Enterprise Agent Tokens
Critical OAuth metadata flaw CVE-2026-63127 in rmcp Rust SDK allows rogue Model Context Protocol servers to capture enterprise agent tokens and impersonate identities.
Priya Raman20 Sep 202613 min read

Latest coverage

AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda

Microsoft Azure Arc Confused Deputy Flaw Enables Privilege Escalation Across Hybrid Clusters

Malicious MCP Servers Exploit OAuth Metadata Flaw in Rust SDK to Hijack Enterprise Agent Tokens