Vulnerabilities
Patch OTRS 7.0-2025 to invalidate JWTs immediately after disabling accounts or changing passwords
OTRS CVE-2026-78357 allows stolen JWTs to remain valid for up to 16 hours even after user accounts are disabled or passwords change.
authentication
Everything Malware Chronicle has reported about authentication: 2 stories, newest first. Part of our Cloud Security coverage.
Vulnerabilities
Cloud Security
How to Set Up Single Sign On: Protocol Choices and Risk Controls
Single sign-on shifts the attack surface from password storage to session management, requiring strict token validation and conditional access policies.