#identitymanagement — Public Fediverse posts

FreeIPA Flaw Enables Anonymous Clients to Create Admin Credentials

A critical vulnerability in FreeIPA, tracked as CVE-2026-76578, allows an unauthenticated client to create admin credentials by exploiting a chain of defects that lets them create a Kerberos identity and join the administrators group. This flaw, with a preliminary CVSS score of 9.8, was fixed in FreeIPA version…

https://osintsights.com/freeipa-flaw-enables-anonymous-clients-to-create-admin-credentials?utm_source=mastodon&utm_medium=social

#FreeipaVulnerability #Kerberos #Cve202676578 #IdentityManagement #AuthenticationBypass

🚀 How to Deploy #LDAP Server and Client on Rocky Linux #VPS (389 Directory Server Guide)

Below is a comprehensive, step-by-step guide demonstrating how to deploy LDAP ...
Continued 👉 #selfhosted #letsencrypt #opensource #selfhosting #security #identitymanagement #directoryserver #rockylinux

🚀 How to Deploy LDAP Server an...

Authorization Terminology Is a Mess: Let's Fix It

https://idpro.org/authorization-terminology-is-a-mess-lets-fix-it/

Comments: https://news.ycombinator.com/item?id=49522367

#HackerNews #Authorization #Terminology #TerminologyFix #Cybersecurity #IdentityManagement #TechClarity

WHERE OTHERS LOSE CONTROL – WE STAY IN THE LOOP.

https://blog.infinito.nexus/blog/2026/06/16/where-others-lose-control-we-stay-in-the-loop/

Heading to #Amsterdam tomorrow on #eurostar (via #Brussels) for #TIIME conference. Really looking forward to getting involved in working out how to better support #Research & #Education across the #UK, #Europe, and the world.

#NRENs #federatedidentity #identitymanagement #iam

Why boards must prioritize non-human identity governance https://www.helpnetsecurity.com/2026/02/03/gitguardian-boards-nhi-governance/ #identitymanagement #nonhumanidentities #cybersecurity #GitGuardian #Don'tmiss #boardroom #cyberrisk #Hotstuff #opinion #News #CISO

Securing agentic AI with intent-based permissions https://www.helpnetsecurity.com/2025/10/10/agentic-ai-intent-based-permissions/ #identitymanagement #accessmanagement #Expertanalysis #cybersecurity #TokenSecurity #Expertcorner #Don'tmiss #agenticAI #zerotrust #Hotstuff #opinion #News

Monday news from ITSPmagazine 🙂 #happymonday!

Join Marc Manzano, Sean Martin, CISSP and me on this week SandboxAQ Webinar!

After an incredible conversation with Marc on the #RSAC floor in San Francisco — where Sean and I used every second of our time and still had more to explore — I knew the #Sandbox Story couldn’t stop there.

If you missed that on-location episode from #RSAC2025, catch it here:

👉 Security at the Edge of Change – A Brand Story with Marc Manzano from SandboxAQ

https://www.itspmagazine.com/their-stories/security-at-the-edge-of-change-preparing-for-the-cryptographic-and-ai-tipping-point-a-brand-story-with-marc-manzano-from-sandboxaq-an-on-location-rsac-conference-2025-brand-story

Now, we’re keeping the momentum going with a live ITSPmagazine webinar you don’t want to miss — and I won’t either. 🤘😬

🔐 How To Detect And Mitigate Non-Human Identity And Cryptographic Vulnerabilities | An ITSPmagazine Webinar with SandboxAQ

Join Marc, Sean, and me as we dig deeper into how SandboxAQ is tackling one of today’s most urgent security challenges.

Unmanaged cryptographic assets and non-human identities have left security teams blind to critical risks. These gaps have fueled vulnerabilities, breaches, compliance challenges, and operational drag across enterprise environments.

By attending, you’ll:

🔸 Gain visibility into cryptographic assets and non-human identities like API keys, certificates, and service accounts

🔸 See how #AQtiveGuard enables automated discovery, threat detection, and root cause analysis without disrupting workflows

🔸 Learn how to future-proof your security with Post-Quantum Cryptography readiness and AI-powered #SecOps

📌 Learn more:

👉 https://www.itspmagazine.com/itspmagazine-webinar-calendar/how-to-detect-and-mitigate-non-human-identity-and-crytographic-vulnerabilities-an-itspmagazine-webinar-with-sandboxaq

📅 REGISTER NOW:

Can’t attend the live webinar? All registrants get exclusive access with a link to rewatch the recording.

👉 https://www.crowdcast.io/c/how-to-detect-and-mitigate-non-human-identity-and-crytographic-vulnerabilities-an-itspmagazine-webinar-with-sandboxaq

Share the news and join us!

See you live on Thursday!

#infosec

#cybersecurity

#technology

#tech

#infosecurity

#AIsecurity

#postquantum

#cryptography

#identitymanagement

#webinar

I'm curious to hear what others are #SelfHosting! Here's my current setup:

Hardware & OS

• Hardware: #RaspberryPi500 (8 GB RAM, 512 GB SD card) #RPi #RPi500 #SingleBoardComputers #HomeLab
• OS: #Stormux, an accessible #Linux distro based on #ArchLinuxARM #LinuxAccessibility #AccessibleTech

Infrastructure & Networking

• Dashboard: #Glance (#Docker) #DockerApps
• Reverse Proxy: #Caddy
• DNS: #Cloudflare
• Domain Registrar: #Porkbun
• Networking & Remote Access: #Tailscale (non-Docker), love its SSH agent and magic DNS features. #NetworkSecurity

Security & Monitoring

• Ad Blocking: #AdGuardHome (non-Docker). Previously used PiHole but find AdGuardHome slightly faster. #PrivacyTools
• Server Monitoring: #Beszel (non-Docker). Tried Grafana/Prometheus/Alertmanager (accessible but overkill) and Netdata (poor screen reader accessibility). Beszel isn't perfect but best compromise so far. #ServerMonitoring
• Server Overview: #Cockpit (non-Docker)
• Security Tools: #Fail2ban, #FirewallD, #ClamAV, and #Rkhunter (non-Docker). Tried CrowdSec but couldn't get it working on Stormux. #CyberSecurity
• Service Uptime Monitoring: #UptimeKuma (Docker), accessible and easy to use. #MonitoringTools

Authentication & Identity Management

• Authelia (Docker): Just set this up for two-factor authentication and single sign-on. Seems to be working well so far!
  
• LLDAP (Docker): Lightweight LDAP server for managing authentication. Also seems to be working pretty well!
  #AuthenticationTools #IdentityManagement

Productivity & Personal Tools

• Docker Management: #Dockge (Docker). More accessible than Portainer; main issue is built-in terminal isn't readable with screen readers. #DockerCompose
• Docker Logs Viewer: #Dozzle (Docker), great web interface and easy searching.
• Git Hosting: #Forgejo (non-Docker), my personal Git server. #GitServer
• Backups: #IDrive (non-Docker), backs up all my devices easily. #BackupSolutions
• Notes: #Joplin server (Docker). Accessibility improving; love the VSCode extension. #NoteTakingApps
• Bookmarks: #Linkding (Docker). Accessible bookmark manager with good browser extension support. #BookmarkManager
• Recipes: #Mealie (Docker), starting to learn cooking! 🍳📖  #CookingApps
• RSS Feeds: #Miniflux (non-Docker), excellent accessibility. Originally wanted better podcast support but other options had major accessibility issues. #RSSReader
• Automation & Workflows: #N8N (Docker). Haven't explored deeply yet—open to ideas! #AutomationTools #WorkflowAutomation
• Pastebin Service: #PrivateBin (non-Docker). Considering alternatives or CLI tool for easier console access. #PastebinAlternative
• File Sharing & Editing: #Samba (non-Docker), easy file management from my Windows 11 mini PC. #FileSharing #Windows11
• Search Engine: #SearXNG (non-Docker), accessible and searches multiple engines at once. #PrivacySearchEngine
• IRC Client: #TheLounge (non-Docker). Some accessibility issues but best I've found so far for always-connected IRC. #IRCClient
• Read Later Service: #Wallabag (Docker). Biggest issue is Wallabagger Chrome extension doesn't work for me yet. #ReadItLater

Notifications & Development Workflow

• Notifications via: #Ntfy (Docker) and Zoho's ZeptoMail (#Zoho)
• Development Environment: Mostly using VSCode connected to my server via Remote-SSH extension. #VSCodeRemote

Accessibility Focus ♿️🖥️

Accessibility heavily influences my choices—I use a screen reader full-time (#ScreenReader), so I prioritize services usable without sight (#InclusiveDesign, #DigitalAccessibility). Always open to discussing accessibility experiences or recommendations!

I've also experimented with:

• Ollama (#Ollama): Not enough RAM on my Pi.
• Habit trackers like Beaver Habit Tracker (#HabitTracking): Accessibility issues made it unusable for me.

I don't really have a media collection, so no Plex or Jellyfin here (#MediaServer)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services! 😄

What's your setup like? Any cool services you'd recommend I try?

#SelfHosted #LinuxSelfHost #OpenSource #TechCommunity #FOSS #TechDIY

@selfhost @selfhosted @selfhosting

Tomorrow is the @ulyssis opensource job fair!

Are you looking for a job, an internship, a student job in a company that produces Free Software 😉 Come see us FusionDirectory - Gestion des identités (IAM) 👍
#software #iam
#identitymanagement
#workflow
#belgium
#louvain
#job #KULeuven @uclouvain_be @ULBruxelles

https://opensourcejobfair.be/

Tomorrow is the @ulyssis opensource job fair!

Are you looking for a job, an internship, a student job in a company that produces Free Software 😉 Come see us FusionDirectory - Gestion des identités (IAM) 👍
#software #iam
#identitymanagement
#workflow
#belgium
#louvain
#job #KULeuven @uclouvain_be @ULBruxelles

https://opensourcejobfair.be/

Like every year, FusionDirectory - Identity Management (IAM) is happy to participate in the ULYSSIS opensource job fair!

Are you looking for a job, an internship, a student job in a company that produces Free Software 😉 Come see us in Leuven on March 11, 2025 from 4:00 p.m. to 9:00 p.m

#freesoftware #iam #identitymanagement #workflow #belgium #louvain #work #kul

https://opensourcejobfair.be/

Like every year, FusionDirectory - Identity Management (IAM) is happy to participate in the ULYSSIS opensource job fair!

Are you looking for a job, an internship, a student job in a company that produces Free Software 😉 Come see us in Leuven on March 11, 2025 from 4:00 p.m. to 9:00 p.m

#freesoftware #iam #identitymanagement #workflow #belgium #louvain #work #kul

https://opensourcejobfair.be/

8 cybersecurity predictions shaping the future of cyber defense https://www.helpnetsecurity.com/2024/03/25/cybersecurity-leaders-strategic-planning/ #datalossprevention #identitymanagement #accessmanagement #riskmanagement #cybersecurity #GenerativeAI #regulation #zerotrust #strategy #Gartner #report #News #CISO

Have ‘The Privacy Talk’ with your business partners - Marc Ellenbogen
Contributor

Share on Twit... - http://feedproxy.google.com/~r/Techcrunch/~3/X3yu-_4FH7w/ #digitaladvertising #identitymanagement #verifiedexperts #termsofservice #digitalrights #foursquare #security #startups #eccolumn #lawyers #privacy #echowto #column