Tag: authentication bypass
A teenager and his AI bot cracked Microsoft’s Titan analytics service
A 16-year-old used a homemade AI bot to find an auth flaw that opened Microsoft's analytics backend.
Attackers bypass authentication in Cisco’s SD-WAN manager console
CISA has ordered federal agencies to patch a critical Cisco SD-WAN Manager flaw that attackers are already exploiting.
Attackers breach Cisco ISE management interface through an API blind spot
Cisco's identity appliance is being hit through an API endpoint that never checked who was asking.
JFrog Artifactory auth bypass already abused for admin tokens
WatchTowr reports attackers are minting admin tokens through the critical JFrog Artifactory auth bypass patched August 28.
SAML plugin bugs hand WordPress admin access to strangers
Two unauthenticated bugs in the miniOrange SAML plugin let attackers log in as any WordPress user.
Rapid7 urges emergency patching of Citrix NetScaler login bypass
Citrix fixed a CVSS 9.3 authentication bypass in NetScaler ADC and Gateway that attackers are expected to exploit quickly.
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.
Pass-ta-key attacks turn endpoint malware into passkey account takeover
Unit 42 details three ways malware can abuse Chrome's synced passkey flows to hijack accounts.