Bifrost has introduced a role-based access control (RBAC) model for its AI gateway, distinguishing between configuration, policy, and authority changes to prevent unauthorized modifications to AI gove…
Suspected Chinese cyber operatives used publicly available AI tools to compromise Taiwanese government systems, including its nuclear safety agency, supply-chain vendors, and at least seven energy com…
Keycloak 26.7, released this month, adds production-ready OAuth 2.1 authorization for AI agents using the Model Context Protocol, enabling per-tool scopes and eliminating the default all-or-nothing ac…
Top Celestial Company Ltd released DROS-VEP, a sub-microsecond C-ABI binary circuit breaker for AI agents that enforces runtime tool-call authorization and privileged execution governance, directly re…
A Go developer building a production LLM agent in a regulated field warns that the most important security rule is that the server, not the model, must determine the user's identity. The developer sho…
A developer built Crumb, a runtime that stamps every AI agent action with the identity of the human who directed it, solving the audit-log gap where shared credentials or service accounts obscure acco…
AgentGateway, the Rust-based AI proxy from the AI Agent Infrastructure Foundation, now supports RFC 8693 OAuth 2.0 Token Exchange to securely delegate user identity to AI agents. The feature replaces …
Okta SAML and Keycloak can interoperate via the Identity Assertion JWT Authorization Grant (ID-JAG) draft to enable cross-app access, according to a demo by Christian Posta. The flow converts enterpri…
Logto, an open-source identity engine built on OIDC and OAuth 2.1, challenges B2B auth incumbents like Keycloak and Auth0 by offering native multi-tenancy, M2M authentication, and an MCP server for AI…
Christian Posta published a bonus blog post implementing MCP Authorization with Dynamic Client Registration, building an MCP client that follows RFC 7591 to automatically discover and register OAuth c…
Lynx, a Kubernetes-native control and data plane for agentic AI traffic, launched this week. It provides a registry, gateway, audit, authentication, policy enforcement, and agent sandboxing without re…
Tide's team of five engineers and designers built a verifiable authentication system that eliminates the need for a central credential store, removing a common breach vector. The team includes cryptog…
LinkedRecords, a new Backend-as-a-Service, enables SaaS applications where users control where their data is stored, offering server-enforced authorization and real-time collaboration. The platform al…
The article describes RedBase, an open-source .NET ecosystem developed over three years to eliminate repetitive infrastructure work in .NET projects. It replaces traditional data layers, integrations,…
ArgoCD displayed a "Synced and Healthy" status for a Keycloak deployment, but authentication was silently broken across three services because an auto-sync had reverted the live realm configuration to…