Analysis · Nov 5, 2026
October 2026 in identity: edge zero-days, leaked developer tokens, and the fake help desk
October 2026 in identity came down to three things: exploited VPN and remote-access appliances on CISA KEV, stolen tokens and secrets in developer and AI tooling, and attackers who talked or replayed their way past MFA. Here is the month from SWI's coverage, plus our new research and what to watch in November.