CVE-2018-20555

CVE-2018-20555 Плагин для WordPress под названием Social Network Tabs, созданный компанией Design Chemical, дважды раскрывает Twitter accesstoken, accesstokensecret, consumerkey и consumersecret своего пользователя, что приводит к захвату его учётной записи Twitter. Это вызвано следующими строкам...

Over 1,800 Android and iOS Apps Found Leaking Hard-Coded AWS Credentials

Researchers have identified 1,859 apps across Android and iOS containing hard-coded Amazon Web Services AWS credentials, posing a major security risk. "Over three-quarters 77% of the apps contained valid AWS access tokens allowing access to private AWS cloud services," Symantec's Threat Hunter...

Researchers Discover Nearly 3,200 Mobile Apps Leaking Twitter API Keys

Researchers have uncovered a list of 3,207 mobile apps that are exposing Twitter API keys in the clear, some of which can be utilized to gain unauthorized access to Twitter accounts associated with them. The takeover is made possible, thanks to a leak of legitimate Consumer Key and Consumer Secre...