Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud

Okta is warning that a cross-origin authentication feature in Customer Identity Cloud CIC is susceptible to credential stuffing attacks orchestrated by threat actors. "We observed that the endpoints used to support the cross-origin authentication feature being attacked via credential stuffing for...

Microsoft Warns of Uptick in Hackers Leveraging Publicly-Disclosed 0-Day Vulnerabilities

Microsoft is warning of an uptick among nation-state and criminal actors increasingly leveraging publicly-disclosed zero-day vulnerabilities for breaching target environments. The tech giant, in its 114-page Digital Defense Report, said it has "observed a reduction in the time between the...

bitshares (>=0.1.0, <=0.1.5), geoffrey (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2021-33880 via websockets (2.0.0)

websockets PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on websockets and may be impacted: - bitshares =0.1.0, =0.1.0, =0.1.1 - golos 0.2.3 - uptick 0.1.2 Source cves: CVE-2021-33880 Source advisory: OSV:GHSA-8CH4-58QP-G3MP...