Delinea Secret Server customers should apply latest patches

Researchers disclosed a critical authentication-bypass vulnerability in Delinea's Secret Server that allowed crafted API tokens to impersonate an admin account and access privileged secrets; Delinea issued an emergency patch (11.7.000001) following a service disruption and says there is no evidence of customer data compromise, while independent analysts raised concerns about possible indicators of compromise and disclosure handling.