ARCTIC WOLF BLOG
On March 03, 2026, pac4j released fixes for a maximum severity vulnerability in pac4j-jwt, tracked as CVE-2026-29000. The flaw arises from improper verification of cryptographic signatures in the JwtAuthenticator component when processing encrypted JWTs (JWE). A remote, unauthenticated threat actor...
March 6, 2026
March 2, 2026
March 2, 2026
March 2, 2026
February 28, 2026
February 27, 2026
February 26, 2026
February 26, 2026
February 23, 2026
February 17, 2026
February 13, 2026
February 12, 2026
February 12, 2026
February 11, 2026
February 9, 2026
February 9, 2026
February 3, 2026
February 3, 2026
January 30, 2026
January 28, 2026
January 28, 2026
January 28, 2026
January 23, 2026
January 22, 2026
January 22, 2026
January 21, 2026
January 20, 2026
January 16, 2026
January 15, 2026
January 13, 2026