Account Archives - Ady DeeJay

Wherever There’s Ransomware, There’s Service Account Compromise. Are You Protected?

September 19, 2024

by Ady DeeJay

Comments (0)

Until just a couple of years ago, only a handful of IAM pros knew what service accounts are. In the last years, these silent Non-Human-Identities (NHI) accounts have become one of the most targeted and compromised attack surfaces. Assessments report that compromised service accounts play a key role in lateral

January 24, 2024

by Ady DeeJay

Comments (0)

Jan 24, 2024NewsroomCloud Security / Kubernetes Cybersecurity researchers have discovered a loophole impacting Google Kubernetes Engine (GKE) that could be potentially exploited by threat actors with a Google account to take control of a Kubernetes cluster. The critical shortcoming has been codenamed Sys:All by cloud security firm Orca. As many

June 21, 2023

by Ady DeeJay

Comments (0)

Jun 21, 2023Ravie LakshmananAuthentication / Vulnerability A security shortcoming in Microsoft Azure Active Directory (AD) Open Authorization (OAuth) process could have been exploited to achieve full account takeover, researchers said. California-based identity and access management service Descope, which discovered and reported the issue in April 2023, dubbed it nOAuth. “nOAuth

May 27, 2023

by Ady DeeJay

Comments (0)

May 27, 2023Ravie LakshmananAPI Security / Vulnerability A critical security vulnerability has been disclosed in the Open Authorization (OAuth) implementation of the application development framework Expo.io. The shortcoming, assigned the CVE identifier CVE-2023-28131, has a severity rating of 9.6 on the CVSS scoring system. API security firm Salt Labs said

April 13, 2023

by Ady DeeJay

Comments (0)

Apr 13, 2023Ravie LakshmananMobile Security / Privacy Popular instant messaging app WhatsApp on Thursday announced a new account verification feature that ensures that malware running on a user’s mobile device doesn’t impact their account. “Mobile device malware is one of the biggest threats to people’s privacy and security today because

April 6, 2023

by Ady DeeJay

Comments (0)

Apr 06, 2023Ravie LakshmananPrivacy / Mobile Security Google is enacting a new data deletion policy for Android apps that allow account creation to also offer users with a setting to delete their accounts in an attempt to provide more transparency and control over their data. “For apps that enable app

Wherever There’s Ransomware, There’s Service Account Compromise. Are You Protected?

Google Kubernetes Misconfig Lets Any Gmail Account Control Your Clusters

Critical ‘nOAuth’ Flaw in Microsoft Azure AD Enabled Complete Account Takeover

Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks

Google Mandates Android Apps to Offer Easy Account Deletion In-App and Online

Recent Posts

Recent Comments

Categories

Archives

Wherever There’s Ransomware, There’s Service Account Compromise. Are You Protected?

Google Kubernetes Misconfig Lets Any Gmail Account Control Your Clusters

Critical ‘nOAuth’ Flaw in Microsoft Azure AD Enabled Complete Account Takeover

Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks

Google Mandates Android Apps to Offer Easy Account Deletion In-App and Online

Recent Posts

Recent Comments

Categories

Archives

Tags