MAL-2024-6725 Malicious code in authenticator_client (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4787 Malicious code in authanticetor (PyPI)

--- -= Per source details. Do not edit below this line.=-...

HackerOne: Improper Authentication - 2FA OTP Reusable

Vulnerability description not provided...

Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)

Google on Monday announced that it's simplifying the process of enabling two-factor authentication 2FA for users with personal and Workspace accounts. Also called 2-Step Verification 2SV, it aims to add an extra layer of security to users' accounts to prevent takeover attacks in case the password...

Microsoft introduces passkeys for consumer accounts

Ten years ago, Microsoft envisioned a bold future: a world free of passwords. Every year, we celebrate World Password Day by updating you on our progress toward eliminating passwords for good. Today, we’re announcing passkey support for Microsoft consumer accounts, the next step toward our vision...

VeridiumID 安全漏洞

VeridiumID is an integrated passwordless platform from VeridiumID. A security vulnerability exists in VeridiumID versions prior to 3.5.0. An attacker exploited the vulnerability to take over a victim's account by registering its FIDO authenticator to that account...

CVE-2023-44039

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker who can pass enrollment verifications and is allowed to enroll a FIDO key to register their FIDO authenticator to a victim’s account and consequently take over the account...

The vulnerability of the Microsoft Authenticator multi-factor authentication application lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Patch Tuesday, March 2024 Edition

Apple and Microsoft recently released software updates to fix dozens of security holes in their operating systems. Microsoft today patched at least 60 vulnerabilities in its Windows OS. Meanwhile, Apples new macOS Sonoma addresses at least 68 security weaknesses, and its latest update for iOS fix...

CVE-2024-21390

Microsoft Authenticator Elevation of Privilege Vulnerability...

CVE-2024-21390

Microsoft Authenticator Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Authenticator Elevation of Privilege Vulnerability...

CVE-2024-21390

CVE-2024-21390 concerns a local elevation-of-privilege in the Microsoft Authenticator app. The available sources consistently identify the affected software as the Microsoft Authenticator (MSA) mobile app and describe an attacker needing prior access on the device to exploit the issue. Microsoft’...

CVE-2024-21390 Microsoft Authenticator Elevation of Privilege Vulnerability

...

CVE-2024-21390 Microsoft Authenticator Elevation of Privilege Vulnerability

...

Microsoft Authenticator Elevation of Privilege Vulnerability

...

Microsoft Authenticator Security Vulnerability

Microsoft Authenticator is an application for multi-factor authentication MFA from Microsoft Corporation USA. A security vulnerability exists in Microsoft Authenticator. An attacker could exploit the vulnerability to elevate privileges...

PT-2024-2298 · Microsoft · Authenticator

Name of the Vulnerable Software and Affected Versions: Microsoft Authenticator affected versions not specified Description: The issue is related to insufficient access controls in the Microsoft Authenticator application, which can be exploited to elevate privileges. Recommendations: At the moment...

KLA65129 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Skype for Consumer can be...

[SECURITY] Fedora 38 Update: wpa_supplicant-2.10-7.fc38

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...