Mastodon Authorization Issues Vulnerability

Mastodon is an open source social networking server based on ActivityPub. Mastodon suffers from an authorization problem vulnerability that stems from an authorization problem vulnerability in OpenID Connect...

Why Are Compromised Identities the Nightmare to IR Speed and Efficiency?

Incident response IR is a race against time. You engage your internal or external team because there's enough evidence that something bad is happening, but you're still blind to the scope, the impact, and the root cause. The common set of IR tools and practices provides IR teams with the ability ...

CVE-2022-23551

...

New attack vectors in EKS

We explore how advancements in EKS Access Entries and Pod Identity have opened new attack vectors and offer examples of how adversaries could exploit them...

CVE-2023-32697

creationtimestamp| type| source ---|---|--- 2024-02-09 02:16:42+00:00| seen| https://t.me/ctinow/181761 2025-08-19 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2h4ps2m...

Warning from LastPass as fake app found on Apple App Store

Password Manager LastPass has warned about a fraudulent app called “LassPass Password Manager” which it found on the Apple App Store. The app closely mimics the branding and appearance of LastPass, right down to the interface. So, even if the name was a “happy accident” it seems clear that this w...

2 million job seekers targeted by data thieves

A cybercriminal group known as ResumeLooters has infiltrated 65 job listing and retail websites, compromising the personal data of over two million job seekers. The group used SQL injection and cross-site scripting XSS attacks—both common techniques— to extract the sensitive information from the...

Unified Identity – look for the meaning behind the hype!

If you've listened to software vendors in the identity space lately, you will have noticed that "unified" has quickly become the buzzword that everyone is adopting to describe their portfolio. And this is great! Unified identity has some amazing benefits! However there is always a however, right?...

New EKS Access Management and Pod Identity features: a security analysis

The Wiz research team unpacks the security implications of the new EKS access and identity management features and recommends best practices when using them...

Ping Identity PingFederate Access Control Error Vulnerability

Ping Identity PingFederate is a flagship software-based federation server in the United States. used for identity management. Ping Identity A security vulnerability exists in PingFederate version 11.3, which stems from the fact that authentication can be bypassed...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Belarusian National Linked to BTC-e Faces 25 Years for $4 Billion Crypto Money Laundering

A 42-year-old Belarusian and Cypriot national with alleged connections to the now-defunct cryptocurrency exchange BTC-e is facing charges related to money laundering and operating an unlicensed money services business. Aliaksandr Klimenka, who was arrested in Latvia on December 21, 2023, was...

IBM Security Verify Access Denial of Service Vulnerability

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

thenissanpath.com Cross Site Scripting vulnerability OBB-3847596

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Stopping Credential Stuffing Attacks: We Need to Do Better

Do you know what 23andMe, Jason's Deli, North Face, and Hot Topic have in common? They've all been breached by successful credential stuffing attacks in the last year! An attack type that has gained prominence in recent years is credential stuffing. In this blog, we will explore what credential...

PingDirectory security vulnerability

Ping Identity PingDirectory is a fast, scalable directory for storing identity and rich profile data from Ping Identity. A security vulnerability exists in PingDirectory. An attacker can exploit the vulnerability to elevate privileges...

PT-2024-3070

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm Extreme Security NextGen affected versions not specified Check Point Identity Agent for Windows affected versions not specified Check Point Identity Agent for Windows Terminal Server affected versions not specified...

Malicious code in identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 172d924c44b4cff292645cf014382ea4d780ad62b2d7550d53d4825c83ac271f The OpenSSF Package Analysis project identified 'identity-auth' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-948 Malicious code in identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 172d924c44b4cff292645cf014382ea4d780ad62b2d7550d53d4825c83ac271f The OpenSSF Package Analysis project identified 'identity-auth' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

The Latest Identity Theft Methods: Essential Protection Strategies Revealed

By Waqas With the digital age in full swing, your personal information is more vulnerable than ever. Identity theft has… This is a post from HackRead.com Read the original post: The Latest Identity Theft Methods: Essential Protection Strategies Revealed...