#useridentity
LightNews LightNews
malmoeb.bsky.social
2/ - accidentally typed the account name of a personal email account, a bank sign-in identifier, or some other private ID.

CloudTrail does not record the contents in this case.

Good to know 💡

Reference:
docs.aws.amazon.com/awscloudtrai...
CloudTrail userIdentity element - AWS CloudTrailCloudTrail userIdentity element - AWS CloudTrail
This page describes the fields in the userIdentity element of a CloudTrail event.
docs.aws.amazon.com
January 22, 2025 at 8:18 PM
cve.skyfleet.blue
CVE-2026-91039 - dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover
CVE ID : CVE-2026-91039

Published : Sept. 17, 2026, 4:18 p.m. | 47 minutes ago

Description : Authentication Bypass by Spoofing vuln...
CVE-2026-91039 - dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover
Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identity-provider connection of a dynamic_oidc strategy to be signed in as a local user established through a different connection. The strategy is meant to keep each connection in its own identity namespace by writing every UserIdentity …
cvefeed.io
September 17, 2026 at 5:38 PM
eicker.bsky.social
#Meta launched a new #FacebookVerified programme using #facialrecognition to confirm #useridentity. The #free badge, distinct from the Meta Verified endorsement, aims to combat AI-generated fake profiles and scams. https://www.engadget... #tech…
tech news ᳇ eicker.news (@technews@eicker.news)
#Meta launched a new #FacebookVerified programme using #facialrecognition to confirm #useridentity. The #free badge, distinct from the Meta Verified endorsement, aims to combat AI-generated fake profiles and scams. https://www.engadget.com/2222353/meta-launches-facebook-verified/?eicker.news #tech #media #news
eicker.news
July 24, 2026 at 5:57 PM
eyalestrin.bsky.social
Selectively log network activity events by identity in AWS CloudTrail #cloud
Selectively log network activity events by identity in AWS CloudTrail
Eyal Estrin unread, 4:56 AM (25 minutes ago)    to https://aws.amazon.com/about-aws/whats-new/2026/07/aws-cloudtrail-filter-useridentity-advance-selectors/ https://aws.amazon.com/blogs/mt/announcing-aws-cloudtrail-network-activity-events-for-vpc-endpoints/ Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com
dlvr.it
July 23, 2026 at 9:21 AM
awswhatsnew.bsky.social
Selectively log network activity events by identity in AWS CloudTrail

https://aws.amazon.com/about-aws/whats-new/2026/07/aws-cloudtrail-filter-useridentity-advance-selectors/
July 20, 2026 at 6:27 PM
andresgutgon.bsky.social
I left my learning on Ash UserIdentity here
github.com/andresgutgon...
IdentityUser by andresgutgon · Pull Request #1 · andresgutgon/ash_learning
What? Understanding how identity user works
github.com
December 7, 2025 at 3:31 PM
andresgutgon.bsky.social
Hey @ash-hq.org team I'm trying to make UserIdentity work for something that maybe is not their use case. I have a logged user and I want to allow then to connect to some providers. The problem is that normal auth flow creates a new user with the email of the provider.
December 7, 2025 at 12:30 PM
cve-notifications.incredincomp.com
ID: CVE-2024-40648
CVSS V3.1: MEDIUM
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the...
#security #infosec #cve-alert
nvd.nist.gov
July 18, 2024 at 5:15 PM