Trust & Security
Four Providers, 15 CVEs, Three Days — The Agent Identity Stack Is Under Coordinated Attack
Four identity providers hit by critical vulnerabilities in three days. The common root: systems that accept credentials without verifying the binding between key and identity. The cryptographic primitives are fine. The verification logic is not.
◆ Heath Callahan