Topic

IAM: news, advisories and analysis

24 articlesUpdated 13 Oct 2026

CyberSecureToday covers IAM across 24 articles published between 16 Sep 2026 and 13 Oct 2026. The coverage includes 20 vulnerability advisories and 4 analysis or guidance pieces. 20 advisories are rated critical or high severity.

Stories on IAM most often intersect with Cloud Security, AWS and Privilege Escalation, with Technology, Cloud & SaaS the most affected sector. The most recent story, “AWS IAM Identity Center SAML Canonicalization Flaw Enables Cross-Account Administrative Role Assumption (CVE-2026-78520)”, was published 13 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

NewsCloud & SaaSCritical
AWS IAM Identity Center SAML Canonicalization Flaw Enables Cross-Account Administrative Role Assumption (CVE-2026-78520)
AWS patches a critical vulnerability in IAM Identity Center (CVE-2026-78520) allowing manipulated SAML XML comments to bypass role assignment boundaries.
CST Editorial Desk13 Oct 20268 min read
ThreatsCloud & SaaSCritical
Google Cloud Run Metadata Service SSRF Filter Bypass Enables IAM Service Account Token Exfiltration
A security flaw in Google Cloud Run's internal metadata proxy allows server-side request forgery to steal workload identity IAM tokens.
CST Editorial Desk10 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS Identity and Access Management SCIM Endpoint Authentication Bypass Exposes Cloud Federation Roles
A security vulnerability in AWS IAM Identity Center's SCIM protocol implementation could allow token bypass during automated user and group provisioning.
CST Editorial Desk10 Oct 20268 min read
ThreatsCloud & SaaSHigh
Microsoft Azure Container Apps Dapr Sidecar Token Impersonation Flaw Enables Internal Microservice Hijacking (CVE-2026-58204)
Microsoft MSRC publishes a security bulletin detailing an identity impersonation flaw in Azure Container Apps Dapr sidecars allowing cross-service token spoofing.
CST Editorial Desk9 Oct 20268 min read
ThreatsCloud & SaaSHigh
AWS EKS Pod Identity Agent Flaw Lets Compromised Pods Replay IAM Credentials
AWS Security Bulletins disclose a privilege escalation vulnerability in the Amazon EKS Pod Identity Agent allowing compromised pods to replay IAM credentials.
CST Editorial Desk8 Oct 20268 min read
ThreatsCloud & SaaSHigh
Google Cloud Run Internal Metadata Proxy Flaw Permits Cross-Container Service Account Token Extraction
Google Cloud releases emergency advisory for CVE-2026-45129, resolving an internal metadata server proxy flaw in Cloud Run allowing cross-container token leakage.
CST Editorial Desk7 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS S3 Multi-Region Access Point Flaw Enables IAM Signature Version 4 Authorization Bypass CVE-2026-79787
AWS Security Bulletin details an authorization validation defect in S3 Multi-Region Access Point endpoints permitting IAM privilege escalation.
Daniel Okafor6 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS Loom AI Agent Platform Flaw Gave Unauthenticated Attackers Super-Admin Control
CVE-2026-103956 in AWS Labs Loom (CVSS 10.0) let any network client act as super-admin on IdP-less deployments. Two SSRF flaws leaked tokens. Upgrade to 1.7.0+.
Aisha Noor4 Oct 20267 min read
ThreatsCloud & SaaSCritical
Internet2 Grouper Access Management Rule Engine Flaw Allows Unauthorized Privilege Escalation (CVE-2026-103470)
A privilege escalation vulnerability in Internet2 Grouper before v7.5.1 allows authenticated users with rule editing rights to elevate to full system administrator.
Priya Raman1 Oct 202611 min read
InsightsCloud & SaaS
The Lethal Trifecta in Enterprise AI Agents: Why Input Filters Fail Against Tool Hijacking
An architectural analysis of the Lethal Trifecta in autonomous enterprise AI agents: untrusted input, autonomous execution, and access to privileged external tools.
CST Editorial Desk30 Sep 202611 min read
ThreatsCloud & SaaSHigh
AWS Bedrock Agent Runtime Vulnerability Exposes Temporary IAM Credentials CVE-2026-62181
AWS Security Bulletin details an environment leakage defect in Amazon Bedrock Agent action group runtimes permitting cross-session IAM credential exposure.
Aisha Noor28 Sep 20268 min read
ThreatsCloud & SaaSCritical
Microsoft Entra ID Assumed-Immutable Data Modification Flaw Enables Tenant Privilege Escalation CVE-2026-50481
A critical vulnerability in Microsoft Entra ID allows authenticated users to manipulate assumed-immutable directory attributes and achieve Global Admin rights.
Aisha Noor27 Sep 20269 min read
ThreatsCloud & SaaSHigh
AWS Athena ClickHouse Connector Flaw Enables Cross-Account Secrets Manager Extraction
AWS Security Bulletin 2026-084-AWS warns of authorization flaw CVE-2026-75910 in Athena ClickHouse connector allowing arbitrary Secrets Manager data leakage.
Daniel Okafor26 Sep 202614 min read
ThreatsCloud & SaaSHigh
Google Cloud Integration Connectors Authorization Flaw Enables Service Account Privilege Escalation CVE-2026-4644
Google Cloud Bulletin GCP-2026-059 details missing authorization flaw CVE-2026-4644 in Integration Connectors enabling project-level privilege escalation.
Mei-Lin Chen26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda
AWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSHigh
Google Cloud OS Login Privilege Escalation Flaw Exposes Compute Engine Instances to Root Takeover CVE-2020-8907
Google Cloud resolves a privilege escalation flaw in Compute Engine guest-oslogin that allowed users with compute.osLogin IAM permissions to gain root access.
Aisha Noor24 Sep 202617 min read
ThreatsCloud & SaaSCritical
Azure Cosmos DB Injection Flaw Enabled Cloud Privilege Escalation
Microsoft addresses CVSS 9.6 vulnerability CVE-2026-87701 in Azure Cosmos DB allowing authenticated attackers to execute downstream injection and elevate privileges.
CST Editorial Desk23 Sep 202615 min read
ThreatsCloud & SaaSCritical
Google Cloud Patches Critical GKE Multi-Cloud Flaw Enabling Cross-Project Cluster Hijack and Service Account Impersonation
Google Cloud remediates critical GCP-2026-058 flaw in GKE Multi-Cloud APIs where missing project checks enabled unauthorized cluster registration and IAM impersonation.
CST Editorial Desk23 Sep 202616 min read
ThreatsCloud & SaaSHigh
Amazon SSM Agent Path Traversal Flaw Enables Root Host Takeover via Malicious S3 Object Keys
AWS resolves high-severity CVSS 8.8 flaw CVE-2026-81849 in amazon-ssm-agent where crafted S3 object keys allow authenticated IAM actors to overwrite root host files.
Daniel Okafor20 Sep 202612 min read
ThreatsCloud & SaaSCritical
Microsoft Entra ID Critical Deserialization Vulnerability Enables Unauthenticated Remote Code Execution
Microsoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-69836 in Entra ID allowing unauthenticated remote code execution via unsafe object deserialization.
Daniel Okafor19 Sep 202612 min read
ThreatsCloud & SaaSHigh
AWS API MCP Server Flaw Let AI Agents Bypass Security Policies
AWS Labs resolves high-severity vulnerability CVE-2026-16584 in AWS API MCP Server allowing autonomous AI agent workflows to bypass security policies upon initialization failure.
Daniel Okafor19 Sep 202611 min read
InsightsCloud & SaaS
AWS Resolves Privilege Escalation Flaw in IAM Identity Center Temporary Elevated Access
AWS resolves high-severity privilege escalation flaw CVE-2026-86830 in Temporary Elevated Access Management (TEAM) for IAM Identity Center.
Aisha Noor19 Sep 202610 min read
InsightsCloud & SaaS
Cloud Workload Security: BOSH Azure & AWS Microservice Stemcell Privilege Escalation Analysis
Technical breakdown of cloud workload stemcell isolation defects, container escape vectors, and hypervisor boundary hardening across AWS and Microsoft Azure.
Mei-Lin Chen16 Sep 202612 min read
InsightsCloud & SaaS
Google Cloud GKE Workload Identity Privilege Escalation: Cloud Threat Forensics & Hardening
Technical analysis of Google Cloud Platform (GCP) Kubernetes Workload Identity metadata impersonation vectors, token theft forensics, and enterprise IAM hardening.
Mei-Lin Chen16 Sep 202612 min read