🧰 OIDC

The items that name it 43

• David Gutierrez | Eng (@david_x_ai) on X
  threadas classification.technologies2026-10-26
• alex lee (@alexlee20122022) on X
  threadas classification.technologies2026-10-25
• Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles
  writeupas classification.technologies2026-10-25
• Mikko Laakkonen (@mikkolaakkonen) on X
  threadas classification.technologies2026-10-17
• Penetration testing every deployment with AWS Continuum
  articleas classification.technologies2026-10-14
• Supply Chain Attack targeting Cline installs OpenClaw | Endor Labs
  writeupas classification.technologies2026-10-12
• How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise | Blog | Endor Labs
  writeupas classification.technologies2026-10-12
• Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation
  articleas classification.technologies2026-10-06
• Python Hub (@PythonHub) on X
  toolas classification.technologies2026-10-02
• Identity Management for Agentic AI [pdf] (2025)
  paperas classification.technologies2026-10-01
• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  articleas classification.technologies2026-09-24
• npm Supply-Chain Attack Abuses Trusted Publishing to Ship GHAPPIER Loader
  articleas classification.technologies2026-09-22
• SAML: A fractal of bad design
  articleas affected products2026-09-21It is written here as OIDC (OpenID Connect).

  modern alternative protocol to SAML; 1.0 specification published 2014

• Happy Birthday, Shai-Hulud
  articleas classification.technologies2026-09-18
• Architecting resilient authentication with Amazon Cognito multi-Region replication
  articleas classification.technologies2026-09-15
• SolarWinds took a nation-state. The next attack just needs an LLM and $5. | Blog | Endor Labs
  articleas tools2026-09-11

  Cited as an existing tool/standard to fix supply chain security issues (identity federation for tokens).

• @7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow
  writeupas classification.technologies2026-08-28
• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.technologies2026-08-24
• MinIO Security Lab
  repoas classification.technologies2026-08-21
• NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages | Blog | Endor Labs
  advisoryas classification.technologies2026-08-04
• The 2026-07-28 MCP Specification: Stateless Core, MRTR, Header-Based Routing
  articleas classification.technologies2026-07-28
• Find Unused, Stale, and OIDC-Replaceable GitHub Actions Secrets Across Your GitHub Organization
  articleas classification.technologies2026-07-23
• Socket: npm v12 Ships With Install Scripts Off by Default
  articleas classification.key entities2026-07-15
• Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys
  writeupas classification.technologies2026-07-12
• ThinkWatch
  repoas classification.technologies2026-07-04
• npm now freezes high-impact accounts after risky account changes
  articleas classification.technologies2026-06-26
• Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
  articleas classification.technologies2026-06-02
• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeupas classification.technologies2026-06-01
• Socket: Mini Shai-Hulud
  articleas classification.technologies2026-05-22
• The 2026-07-28 MCP Specification Release Candidate
  articleas classification.technologies2026-05-21
• Socket: TanStack npm Packages Compromised
  writeupas classification.technologies2026-05-20
• Dependabot & Code Scanning: Org-Level Private Registries
  otheras classification.technologies2026-05-13
• Protocol Soup
  toolas classification.technologies2026-05-12
• Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack
  writeupas classification.technologies2026-05-11
• The complete GitHub Actions security checklist
  articleas tools2026-05-11It is written here as OIDC (OpenID Connect).

  Used to obtain short-lived cloud credentials from AWS, Azure, or GCP instead of storing long-lived static secrets.

• Terraform Compliance Guardrails
  repoas classification.technologies2026-05-06
• CI/CD Threat Modelling
  articleas classification.technologies2026-05-06
• PyPI Access Control Vulns Patched
  articleas classification.technologies2026-05-06
• Octelium
  repoas classification.technologies2026-05-05
• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas classification.technologies
• Insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default
  advisoryas classification.technologies
• Megalodon: Mass GitHub Actions Secret Exfiltration Across 5,500+ Public Repositories - StepSecurity
  writeupas classification.technologies
• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas classification.technologies