THE INTERNET IS THINKING
Identity
This security thread follows identity through original research, public projects, and source reports. Read the evidence below to see which developments are represented in SYMTRI’s archive.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗31 classified signals in the fourteen-day window. These counts include signals awaiting readable evidence.
Recent sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- Hacker News · Posted on Hacker News · First archived
Using a funded test cryptocurrency wallet without authorization ↗
Hacker News discussion.
- CISA · Added to KEV · First archived
CVE-2026-102764: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability ↗
BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's in
- OpenAlex · Published · First archived
Regulatory-Gated Zero-Trust Access Control for Cross-Border Data Sharing with Policy-Bound Blockchain Arbitration ↗
Cross-border data access requires regulatory eligibility and current security authorization. We developed a four-state regulatory gate and permissioned-ledger arbitration prototype that binds a signed PERMIT declaration, evaluator attestations, and active policies to one request. A frozen 24-case hold-out agreed with an independent engineering review in 22 cases; no non-PERMIT case was classified as PERMIT. The V3 Besu Quorum Byzantine Fault Tolerance (QBFT) contracts enforce request and deployment binding, freshness, replay checks, current policy reads, and audit consistency. All 36 selected…
- OpenAlex · Published · First archived
EEG-biometric authentication system using multi-paradigm neurophysiological measurements and artificial intelligence ↗
Electroencephalography (EEG) provides a promising physiological modality for biometric authentication due to its inherent neural uniqueness and resistance to spoofing attacks. However, reliable EEG-based authentication remains challenging because brain signals are highly non-stationary and vary across cognitive states. To address this limitation, this study proposes a multi-paradigm neurophysiological measurement protocol designed to capture stable subject-specific EEG signatures across diverse brain conditions. EEG signals were recorded from participants during six complementary paradigms, in…
- Hacker News · Posted on Hacker News · First archived
Additional authentication assurance in FusionAuth without using step-up MFA ↗
Hacker News discussion.
- Hacker News · Posted on Hacker News · First archived
Show HN: AgentGate – Fast authorization gateway for AI agent tools ↗
Hacker News discussion.
- CISA · Added to KEV · First archived
CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability ↗
Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the
- arXiv · Published · First archived
ARACDE: Retrofitting Databases with ABAC using External Authorization Engines ↗
This paper proposes a methodology for decoupling the authorization logic of a relational database from its core data management engine, enabling specification of advanced access control policies with minimal changes to the code base. Our decoupled authorization architecture, which we call ARCADE, externalizes access request resolution to a formally verifiable policy engine (e.g., Cedar), while the database itself enforces those decisions. We showcase the capabilities of ARCADE on two widely popular open-source databases, namely MySQL and PostgreSQL. Purpose built lightweight plugins add an Att…
- Hacker News · Posted on Hacker News · First archived
AiID launches ID-authentication software built for imperfect scans ↗
Hacker News discussion.
- CISA · Added to KEV · First archived
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability ↗
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet e
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Identity
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Related threads
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.