Results for “MFA”

2 stories found

SonicWall SSL-VPN flaw CVE-2026-19868 lets attackers skip SAML MFA and is already exploited. What to do

SonicWall has patched a SonicOS SSL-VPN bug that lets someone holding valid credentials for another login method bypass SAML authentication, including SAML-enforced MFA. CISA added it to its exploited-vulnerabilities list on November 6, and there is no workaround, so Gen 7 and Gen 8 firewalls using SAML for VPN logins need the new firmware.

16h ago · 3 min read

Repos

OccupySaaS ships ZeroAuthy 1.0 RC, a self-hosted Auth0 stand-in. What works, what doesn't, and the catch

OccupySaaS describes itself as a group of laid-off engineers who use AI agents to clone paid SaaS from public docs. Its Auth0-compatible identity server reached release candidate 1 on November 4. It's Apache-2.0 and written in Go, and it already works with Auth0's own SDKs. The project says it isn't production-ready, and it isn't yet.

2d ago · 3 min read