Topic
4 articles
CyberSecureToday covers IAM Security across 4 articles published between 26 Sep 2026 and 14 Oct 2026.
The coverage includes 4 vulnerability advisories. 4 advisories are rated critical or high severity.
Stories on IAM Security most often intersect with Cloud Security, Google Cloud and AWS, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Google Cloud Workload Identity Federation OIDC Token Bypass Flaw CVE-2026-19410 Remediated”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
GoogleGoogle Cloud updates authentication libraries for CVE-2026-19410 where improper audience validation allowed external OIDC tokens to impersonate IAM service accounts.
GoogleGoogle Cloud resolves a high-severity privilege escalation flaw in Cloud Run and Artifact Registry auth helpers (CVE-2026-79696) exposing service account tokens.
AWS CloudAWS resolves security flaw CVE-2026-75210 in S3 Express One Zone storage class, addressing a session token reuse bug across high-performance compute enclaves.
AWS CloudAWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.