239 matches found
MINI-75R5-WRRM-WHPR
Bulletin has no description...
MINI-74G2-XQ62-CQR8
Bulletin has no description...
MINI-F48R-XRXX-545R
Bulletin has no description...
MINI-X25W-28CP-5HHM
Bulletin has no description...
MINI-MM67-PF48-65VX
Bulletin has no description...
BIT-AUTHENTIK-2024-52287 authentik performs insufficient validation of OAuth scopes
authentik is an open-source identity provider. When using the clientcredentials or devicecode OAuth grants, it was possible for an attacker to get a token from authentik with scopes that haven't been configured in authentik. authentik 2024.8.5 and 2024.10.3 fix this issue...
BIT-AUTHENTIK-2024-38371 Insufficient access control for OAuth2 Device Code flow in authentik
authentik is an open-source Identity Provider. Access restrictions assigned to an application were not checked when using the OAuth2 Device code flow. This could potentially allow users without the correct authorization to get OAuth tokens for an application and access it. This issue has been...
MINI-GF35-CCPH-HP9W
Bulletin has no description...
MINI-PCMH-H7G2-XFMM
Bulletin has no description...
MINI-33CV-6RHR-GC58
Bulletin has no description...
MINI-C43V-7JCH-XX8G
Bulletin has no description...
MINI-XH57-W63Q-64H3
Bulletin has no description...
MINI-72GX-CCV5-VRJG
Bulletin has no description...
MINI-928M-29VJ-6VCW
Bulletin has no description...
MINI-XH78-G62M-2657
Bulletin has no description...
MINI-22WW-546V-V9M2
Bulletin has no description...
MINI-FQC2-F93V-5GRW
Bulletin has no description...
MINI-FCCV-G6HG-VPPF
Bulletin has no description...
Inside an AI‑enabled device code phishing campaign
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Indicators of compromise IOC 4. References 5. Learn more Microsoft Defender Security Research has observed a widespread phishing campaign leveraging the Device Code Authentication flow to compromise organizational...
Inside an AI‑enabled device code phishing campaign
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Indicators of compromise IOC 4. References 5. Learn more Microsoft Defender Security Research has observed a widespread phishing campaign leveraging the device code authentication flow to compromise organizational...