all InfoSec news
Researchers Find 3,200 Apps Exposing Twitter API Keys, Cite ‘BOT Army’ Threat
Aug. 3, 2022, 5:48 p.m. | brooke.crothers
Security Boulevard securityboulevard.com
Researchers Find 3,200 Apps Exposing Twitter API Keys, Cite ‘BOT Army’ Threat
brooke.crothers
Wed, 08/03/2022 - 10:48
- 17 views
Key Findings:
CloudSEK* researchers said key findings include:
- Discovered 3,207 apps were leaking valid consumer key and consumer secret information
- 230 apps were leaking all four 0Auth authentication credentials and could be used to fully take over Twitter accounts to perform critical/sensitive actions.
Some of those sensitive actions include reading Direct Messages, retweeting, deleting messages, liking messages, and getting account settings. …
api api keys apps army bot exposing find keys researchers threat twitter twitter api keys
More from securityboulevard.com / Security Boulevard
What Makes Containers Vulnerable?
10 hours ago |
securityboulevard.com
Randall Munroe’s XKCD ‘Eclipse Path Maps’
12 hours ago |
securityboulevard.com
Jobs in InfoSec / Cybersecurity
SOC 2 Manager, Audit and Certification
@ Deloitte | US and CA Multiple Locations
Information Security Engineers
@ D. E. Shaw Research | New York City
Cloud Security Engineer
@ Pacific Gas and Electric Company | Oakland, CA, US, 94612
Penetration Tester (Level 2)
@ Verve Group | Pune, Mahārāshtra, India
Senior Security Operations Engineer (Azure)
@ Jamf | US Remote
(Junior) Cyber Security Consultant IAM (m/w/d)
@ Atos | Berlin, DE, D-13353