Identity Architecture
Patch PHP against PHP2Shell remote code execution
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution in PHP. Update the runtime. Temporary configuration changes are incomplete.
Read article8 min read
Authdog Blog
Subscribe to RSSWhat shipped, and how it actually works
Release notes with the setup, the limits, and the links. Plus guides on identity, security, and integrations.
Explore by topic
Latest
Identity Architecture
MCP default resource: when the client skips the audience
Some MCP clients omit the OAuth resource parameter. Set a default protected resource so tokens still name your MCP URL.
Read article4 min read
Identity Architecture
See the device before you trust the session
Device intelligence, known devices, self-service Connected Apps, Agent Sign-In registered clients, and MCP default resources—October's identity controls.
Read article4 min read
More field notes
75 articles
