CyberArk is now Idira® – Next-Generation Identity Security Platform

On June 8th, CyberArk announced its rebrand to Idira®, a next-generation identity security platform built on CyberArk’s foundations and powered by Palo Alto Networks.

The transition is being rolled out in phases:

• Phase 1 (Visual updates): New Idira branding will begin appearing across the product UI, documentation, and automated system emails.
• Subsequent phases: Technical touchpoints such as product URLs and APIs will remain unchanged for now. Further updates will be communicated in advance.

For full details on what’s changing, visit the Idira FAQ page.

CyberArk: CA26-23 – Incomplete IIS documentation for the z/OS Central Credential Provider (CCP) can cause weak authentication.

Impact: Incomplete configuration instructions in the documentation for the IIS that hosts the Central Credential Provider (CCP) for the z/OS Credential Provider can lead to weak authentication.

CA26-23 involves a Critical severity issue that affects:

• z/OS Credential Provider, all versions.

For complete details on the vulnerabilities, recommendations, and update instructions, please review the Security Bulletin, that can be found in the Technical Community:

https://www.cyberark.com/ca26-23

Learn more by visiting Product Security | CyberArk

CyberArk: CA26-22 – Possible Denial of Service (DoS) attack on HTML5 Gateway server.

Wednesday, May 20th, CyberArk released Security Bulletin: CA26-22.
Impact: Possible Denial of Service (DoS) attack on HTML5 Gateway server.

CA26-22 involves High severity issues that affects:

• HTML5 Gateway Container and RPM, Self-Hosted, All versions prior to version 15.0 (inclusive).

For complete details on the vulnerabilities, recommendations, and update instructions, please review the Security Bulletins, that can be found in the Technical Community (links below).
https://community.cyberark.com/s/article/CyberArk-Security-Bulletin-CA26-22
Learn more by visiting https://www.cyberark.com/product-security

CyberArk: CA26-17, CA26-18, CA26-19, CA26-20 and CA26-21

CyberArk has released five new security bulletins this week, collectively addressing high and critical severity vulnerabilities across a range of products, including Privileged Access Management, Endpoint Privilege Manager, Secrets Management, Privilege Cloud components and Identity browser extensions.
The bulletins impact both self‑hosted and SaaS deployments, with a particular focus on older product versions.

Affected components:

Self‑hosted PAM components, including PSM, PSMP and Vault infrastructure
Privilege Cloud Connector deployments
Endpoint Privilege Manager agents across Windows, macOS and Linux
Secrets Manager and Credential Provider components
CyberArk Identity Browser Extension

CA26-17: https://www.cyberark.com/CA26-17

CA26-18: https://www.cyberark.com/CA26-18

CA26-19: https://www.cyberark.com/CA26-19

CA26-20: https://www.cyberark.com/CA26-20

CA26-21: https://www.cyberark.com/CA26-21