Check out our new events page to see where to find us in the coming months!
You’ll find talks we’re giving, events where we have a booth, and events we’re just attending. Send us a message and let’s meet up there 🙂
=> cloud-iam.com/events
We got a new Trustpilot review! This kind of feedback means a lot to our team and we're really proud when our users share it with us!
A few critical vulnerabilities made the news last week. No action is needed for Cloud-IAM customers.
More details are available in our product updates: cloud-iam.com/changelog#7a8f…
We consider the risk of exploitation very low, as an attacker would need to be on the network path between your Keycloak and a service it calls. Deployments were automatically updated during their configured maintenance windows.
We want to give back to the tech community by sponsoring events where people can learn, share and have fun.
It started by the Keycloak DevDay 2026, and next it'll be with À la French Conférence and the Keycloak DevDay 2027.
You can find details on those events on our new sponsoring page => cloud-iam.com/sponsoring
Last Tuesday our team was at @IdentityDays 2026.
They particularly enjoyed the Keycloak and LemonLDAP::NG talk by the team at @worteks_com ! It was surprisingly musical, go watch the replay, you'll learn a lot about open IAM solutions and be entertained at the same time.
Just last week we witnessed multiple critical security issues: php2shell, eMudhra certificates compromised, Node.js Brotli decoder... The flood gates are open now, AI is accelerating the pace and it's not going to stop. Defenders need to step up or risk becoming an easy target.
A big thanks to @IdentityDays for the event. And if you missed us during the event, send us a message and we can arrange a chat!
We ship a lot and we didn’t talk about it much. So we shipped a changelog: features, fixes, security releases.
See it all here: eu1.hubs.ly/H0zhgHC0
We’re still figuring out what deserves a spot on it, so tell us what you’d want to see.
We're happy to announce that we are sponsor of the A la french conference on December 3rd in Paris!
The conference will be full of surprises and we're bringing some of ours too🛡️🛡️🛡️
Don't miss out and come see us there!
Keycloak 26.8.1 is out! It fixes 7 HIGH or CRITICAL CVEs that all come from Keycloak dependencies.
Details in the replies ⏬
Issue #53354: Keycloak's SAML identity broker HTTP-Redirect binding endpoint parses incoming queries two different ways. A query could therefore be crafted to pass the signature verifier and log in as any user. This only affects SAML IdPs with "Want Assertions Signed" off.
The full list of fixes is on the official announcement: keycloak.org/2026/10/keycloa…, and the version will be available shortly on Cloud-IAM.








