{"article":{"annotation":{"article_id":"nist-token-protection-guidelines-september-2026","available_at":"2026-10-06T23:12:10.712576Z","geography_revision":"ef6ee0010dda5fe7b240fd514749b43e214c57da73222d2e40ec83b276dd0977","id":"4a80b474daafc5f53502c753f58558896d6d36daa72855e766aca2296a82f8a1","input_sha256":"91edec8ff5bf7912e223362c8920a37af96a73fa11fd1d60a3da43d63b371983","limitations":["Rule-derived subjects are candidates, not verified editorial labels or calibrated model probabilities.","Coverage is distinct from event location. Unknown country/city/coordinates remain absent; no automatic geocoding.","Article geometries keep their stated precision and methodology; reproducing them is not independent coordinate verification."],"method":"controlled-rules-v1","places":[],"rules_sha256":"d28c9c89703b56bd91fd887965d416d0115c2473d4bfbd3e558bcceafc3941dd","schema_version":1,"subjects":[{"concept_id":"medtop:02000000","confidence":null,"confidence_method":null,"evidence":[{"field":"category+topics","language":"en","note":"Preserved editorial category/topic; broad candidate only","source_urls":["https://www.nist.gov/news-events/news/2026/09/nist-finalizes-guidelines-protecting-online-identity-and-access-tokens"]}],"method":"controlled-rules-v1","rule_id":"security-broad","status":"candidate"}],"taxonomy_revision":"1f2db31d811fca07e99b16d402c10e2cc2965c9df1c7b41d9be348b40a24e7fb","taxonomy_version":"IPTC Media Topics 2026-Q2"},"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=en","category":"security","content":{"key_points":[],"paragraphs":["The National Institute of Standards and Technology and the US Cybersecurity and Infrastructure Security Agency published the final NIST IR 8587 on 15 September 2026. The guidance gives federal agencies and cloud service providers implementation recommendations for protecting identity and access tokens against forgery, theft and misuse.","It addresses identity-provider and authorization-server architecture, key management, token verification and lifecycle controls. NIST says the report covers single sign-on, federation and API access scenarios and was revised after public feedback on its draft."],"sections":[]},"corrections":[{"at":"2026-10-07T00:55:16+03:00","language":"en","text":"German and Portuguese editions and translations of the data and correction explanations have been added to this article."}],"country":null,"data":{"blocks":[{"description":{"ar":"المعلومات والنطاق كما أوردهما المصدر.","de":"Informationen und Umfang laut Veröffentlichung der Quelle.","en":"Information and scope published by the source.","es":"Información y alcance publicados por la fuente.","fr":"Informations et portée telles que publiées par la source.","pt":"Informações e escopo publicados pela fonte.","tr":"Kaynağın yayımladığı bilgi ve kapsam."},"id":"security-event","items":[{"date":"2026-09-15","description":{"ar":"نشرت NIST وCISA إرشادات تنفيذية نهائية لحماية رموز الهوية والوصول من التزوير والسرقة وإساءة الاستخدام.","de":"NIST und CISA veröffentlichten endgültige Umsetzungshinweise zum Schutz von Identitäts- und Zugriffstoken vor Fälschung, Diebstahl und Missbrauch.","en":"NIST and CISA published final implementation guidance on protecting identity and access tokens from forgery, theft and misuse.","es":"NIST y CISA publicaron una guía de implementación definitiva para proteger los tokens de identidad y acceso frente a falsificación, robo y uso indebido.","fr":"Le NIST et la CISA ont publié des recommandations définitives pour protéger les jetons d’identité et d’accès contre la falsification, le vol et le détournement.","pt":"NIST e CISA publicaram orientação final de implementação para proteger tokens de identidade e acesso contra falsificação, roubo e uso indevido.","tr":"NIST ve CISA, kimlik ve erişim belirteçlerinin sahteciliğe, hırsızlığa ve kötüye kullanıma karşı korunmasına yönelik nihai uygulama rehberini yayımladı."},"label":{"ar":"نشر تقرير NIST IR 8587","de":"NIST IR 8587 veröffentlicht","en":"NIST IR 8587 published","es":"Publicación de NIST IR 8587","fr":"Publication du NIST IR 8587","pt":"NIST IR 8587 publicado","tr":"NIST IR 8587 yayımlandı"},"status":"occurred"}],"methodology":{"ar":"نُقلت الأرقام والتواريخ كما وردت في المصدر؛ ولم تُضف توقعات.","de":"Zahlen und Daten werden wie von der Quelle angegeben wiedergegeben; es wird keine zusätzliche Prognose erstellt.","en":"Figures and dates are reproduced as stated by the source; no additional forecast is made.","es":"Las cifras y fechas se reproducen como las comunica la fuente; no se añade ninguna previsión.","fr":"Les chiffres et dates sont repris tels qu’indiqués par la source ; aucune prévision supplémentaire n’est faite.","pt":"Números e datas reproduzidos conforme informados pela fonte; nenhuma previsão adicional é feita.","tr":"Rakamlar ve tarihler kaynakta bildirildiği biçimde aktarılmıştır; ek tahmin yapılmamıştır."},"sourceUrls":["https://www.nist.gov/news-events/news/2026/09/nist-finalizes-guidelines-protecting-online-identity-and-access-tokens"],"title":{"ar":"تطور أمني","de":"Sicherheitsentwicklung","en":"Security development","es":"Hecho de seguridad","fr":"Événement de sécurité","pt":"Desenvolvimento de segurança","tr":"Güvenlik gelişmesi"},"type":"events","updatedAt":"2026-10-07T00:55:16+03:00"}],"version":1},"data_downloads":[{"formats":{"csv":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026/data/security-event?lang=en&format=csv","json":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026/data/security-event?lang=en&format=json"},"id":"security-event"}],"data_types":["events"],"editorial_illustration":null,"event_id":"event-5197add1-7e5f-5bf9-9dfd-227b548bcd8b","event_period":"2026-09-15","event_period_basis":"event-or-reference-period","id":"nist-token-protection-guidelines-september-2026","image":null,"importance":0.6,"language":"en","modified_at":"2026-10-07T00:55:16+03:00","publication_basis":"publication-record","published_at":"2026-10-06T08:59:01+00:00","reading_minutes":1,"region":"world","section_illustration":null,"slug":"nist-token-protection-guidelines-september-2026","sources":[{"checkedAt":"2026-10-06","name":"National Institute of Standards and Technology (NIST)","publishedAt":"2026-09-15","url":"https://www.nist.gov/news-events/news/2026/09/nist-finalizes-guidelines-protecting-online-identity-and-access-tokens"}],"summary":"NIST IR 8587 sets out implementation recommendations for federal agencies and cloud providers managing identity tokens.","text":"NIST IR 8587 sets out implementation recommendations for federal agencies and cloud providers managing identity tokens.\n\nThe National Institute of Standards and Technology and the US Cybersecurity and Infrastructure Security Agency published the final NIST IR 8587 on 15 September 2026. The guidance gives federal agencies and cloud service providers implementation recommendations for protecting identity and access tokens against forgery, theft and misuse.\n\nIt addresses identity-provider and authorization-server architecture, key management, token verification and lifecycle controls. NIST says the report covers single sign-on, federation and API access scenarios and was revised after public feedback on its draft.\n\nGerman and Portuguese editions and translations of the data and correction explanations have been added to this article.","title":"NIST and CISA finalize guidance on protecting access tokens","topics":[],"translations":[{"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=tr","language":"tr","url":"https://newsverum.com/tr/news/nist-token-protection-guidelines-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=en","language":"en","url":"https://newsverum.com/en/news/nist-token-protection-guidelines-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=ar","language":"ar","url":"https://newsverum.com/ar/news/nist-token-protection-guidelines-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=fr","language":"fr","url":"https://newsverum.com/fr/news/nist-token-protection-guidelines-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=es","language":"es","url":"https://newsverum.com/es/news/nist-token-protection-guidelines-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=de","language":"de","url":"https://newsverum.com/de/news/nist-token-protection-guidelines-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/nist-token-protection-guidelines-september-2026?lang=pt","language":"pt","url":"https://newsverum.com/pt/news/nist-token-protection-guidelines-september-2026"}],"url":"https://newsverum.com/en/news/nist-token-protection-guidelines-september-2026"},"version":"1"}