Security News

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS

Full Disclosure - 14 April, 2026 - 12:07

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 14

SEC Consult Vulnerability Lab Security Advisory < 20260414-0 >
=======================================================================
title: Improper Enforcement of Locked Accounts in WebUI (SSO)
            product: Kiuwan SAST on-premise (KOP) & cloud/SaaS
 vulnerable version: <2.8.2509.4
      fixed version: 2.8.2509.4
         CVE number: CVE-2026-24069
             impact: medium...

OpenAI Codex Security

Daily Dave - 7 March, 2026 - 14:25

Posted by Dave Aitel via Dailydave on Mar 07

https://openai.com/index/codex-security-now-in-research-preview/

As you might have noticed we've released Codex Security and if you have a
ChatGPT business or enterprise or edu or pro subscription (which is most of
y'all) then you have access ! Just go to chatgpt.com/codex/security and
hopefully it pulls up cleanly for you. If not, probably my fault in some
way.

If you do have access then I'd love it if you would:

1. Say what...

RE//verse, DistrictCon, an Anole Friend

Daily Dave - 2 February, 2026 - 11:48

Posted by Dave Aitel via Dailydave on Feb 02

Last month was DistrictCon, a great conference that I did not attend
because the sky decided to dump snow on Washington, DC. Anyone who has
spent more than ten minutes in that city knows this is how you cancel every
flight out of DCA and turn the roads into skating rinks filled with deeply
furious government contractors. Life is short, so I remained in Miami where
it was 80 degrees and everyone was pretending winter is a myth.

Today it is...
Syndicate content