Tech News
← Home  ·  All topics

Authorization

6 GoKawiil briefs on this topic

FCC's foreign-router ban leaves Davolink's Minions-themed devices in limbo

The FCC added routers made in foreign countries to its Covered List on March 23, following a national security determination from a White House-convened interagency body. Devices on the list cannot receive FCC authorization needed for US sale, though Davolink's Kevin and Bob routers, authorized before the listing, can still be sold and used, with software updates permitted at least until January 1, 2029. Netgear, Eero and ASUS have since received temporary Conditional Approvals from the Pentagon or DHS, but Davolink has not said whether it has applied for one.

Senator Hassan says Trump Mobile lacks FCC authorization for international calling

Sen. Maggie Hassan sent a letter to Trump Mobile CEO Patrick O'Brien alleging the company has not obtained FCC authorization under Section 214 to provide international calling despite advertising service to over 230 countries. She also said Trump Mobile and partner Liberty Mobile Wireless failed to file a complete robocall-mitigation plan, and raised concerns tied to a reported breach exposing data on 3,615 customers.

Medicare AI pilot WISeR faces GAO legality finding as House GOP blocks document release

The Trump administration's WISeR pilot, launched in January, uses AI to decide whether to approve certain Medicare treatments, a step not previously required for the program. Documents obtained by the Electronic Frontier Foundation through litigation revealed provider complaints about technical failures, long delays and denials, with one clinician describing patients crying in pain while awaiting decisions. The Government Accountability Office found in May that officials did not follow proper procedure in establishing the program, and last week Rep. Suzan DelBene's push for a committee vote to release more WISeR documents was defeated by Republicans.

OAuth Consent Grants Emerge as Blind Spot Bypassing MFA in SaaS Attacks

Security researchers warn that attackers can gain lasting access to SaaS and cloud accounts simply by tricking a logged-in user into approving a malicious OAuth application, sidestepping passwords, malware, and multifactor authentication entirely. Once granted, these app permissions can let attackers read email, browse files, pull source code, or touch CI/CD systems through legitimate API access until the tokens or grants are revoked.

Healthcare RCM emerges as key testing ground for AI integration

Industry analysis argues that healthcare's administrative problems stem from fragmented information, workflows and accountability across disconnected systems like EHRs, billing platforms and payer portals, rather than a shortage of data. The revenue cycle—covering scheduling, coding, billing and payer follow-up—is identified as an ideal proving ground for AI because it combines high transaction volume, complex reasoning needs and measurable outcomes, but traditional rule-based automation struggles due to constantly shifting payer rules and frequent exceptions.

Infisical adds folder-level RBAC controls to secrets management platform

Infisical shipped a feature letting users grant or deny access to individual folders, extending its role-based access control system built on the CASL permissions library. The company frames this as a deceptively complex engineering effort that most customers will never notice, despite being critical to enterprise adoption.