Identity security analyst

Nadia Shah

Articles: 4
Desk: 1

Tracks IAM abuse, access governance, and authentication failure modes.

identitycloud-securitygovernance

Coverage by Nadia Shah

Data graphic: a charcoal cover with a large red 8.6 for CVSS v4.0 High 8.1 under CVSS v3.1 and an ACR BYPASS stamp. The headline reads: Any login opens restricted MCP servers CVE-2026-103758 . Obot 0.21.1 to 0.24.1 is affected, v0.25.0 is the fix per Obot release notes, and no exploitation has been reported.

elevatedAI Security Cve 2026 103758

Obot MCP Gateway Flaw CVE-2026-103758 Lets Basic Users Reach Restricted MCP Servers

Obot 0.21.1–0.24.1 skips its ACR check on the composite MCP route, so any signed-in user can reach restricted servers. Obot says v0.25.0 fixes it.

Oct 2 · 5 min

Data graphic: Storm-3168 attack path from a service principal secret left in a public GitHub issue, through 15.5 hours of recon and 300+ reads, to a 7-minute deletion run most targeted storage accounts, one Key Vault, one Function App and 30+ ListKeys requests; Azure SQL deletions all failed and no ransom note was observed.

elevatedAI Security Agentic Ai

Storm-3168: A Secret Left in a GitHub Issue Led to a 7-Minute Azure Deletion Run

Microsoft details Storm-3168: an Azure secret left in a GitHub issue led to 15.5 hours of recon, then a 7-minute run deleting storage and Key Vault.

Oct 2 · 4 min

Data graphic: Open WebUI 0.11.4 patches 19 security advisories, 4 high and 15 medium, none with a CVE id. The highest CVSS score is 8.7, and three of the four high-severity advisories steal session tokens.

highAI Security Open Webui

Open WebUI 0.11.4 Patches 19 Advisories, Including Session Token Theft

Open WebUI 0.11.4 fixes 19 advisories, four high-severity and three of them session token theft. None has a CVE id. Upgrade and review sharing rights.

Oct 2 · 6 min

Data graphic: SalesBleed, a zero-click attack on Salesforce Agentforce, flowing from a public Web-to-Lead form through a poisoned lead record and an Accounts query to a URL on a .fun domain whose DNS lookup leaks CRM data; no authentication needed, no CVE assigned, fixed by Salesforce on August 18, 2026.

elevatedAI Security Prompt Injection

SalesBleed: A Public Web Form Let Attackers Pull Agentforce CRM Data Out Over DNS

Zenity's SalesBleed used a public Web-to-Lead form and two URL-redaction bypasses to make Salesforce Agentforce leak CRM data over DNS.

Oct 2 · 3 min