Serious Security: Verification is vital – examining an OAUTH login bug | allinfosecnews.com

May 30, 2023, 6:59 p.m. | Paul Ducklin

Naked Security nakedsecurity.sophos.com

What good is a popup asking for your approval if an attacker can bypass it simply by suppressing it?

asking bug bypass data loss expo login oauth popup security serious verification vulnerability

More from nakedsecurity.sophos.com / Naked Security

Update on Naked Security 7 months ago | nakedsecurity.sophos.com

intelligence location naked platform +4

Mom’s Meals issues “Notice of Data Event”: What to know and what to do 8 months ago | nakedsecurity.sophos.com

advice data data breach data loss +10

Using WinRAR? Be sure to patch against these code execution bugs… 8 months, 1 week ago | nakedsecurity.sophos.com

application bugs code code execution +3

Smart light bulbs could give away your password secrets 8 months, 1 week ago | nakedsecurity.sophos.com

care cryptography integrity isn +8

“Snakes in airplane mode” – what if your phone says it’s offline but isn’t? 8 months, 1 week ago | nakedsecurity.sophos.com

airplane airplane mode data leakage data loss +6

FBI warns about scams that lure you in as a mobile beta-tester 8 months, 2 weeks ago | nakedsecurity.sophos.com

app apps beta don +11

“Grab hold and give it a wiggle” – ATM card skimming is still a thing 8 months, 2 weeks ago | nakedsecurity.sophos.com

atm card chip criminals +9

Crimeware server used by NetWalker ransomware seized and shut down 8 months, 2 weeks ago | nakedsecurity.sophos.com

back bust crimeware doj +8

Microsoft Patch Tuesday: 74 CVEs plus 2 “Exploit Detected” advisories 8 months, 3 weeks ago | nakedsecurity.sophos.com

cves exploit exploitation fix +8

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

View on infosec-jobs.com

Senior Software Engineer, Security

@ Niantic | Zürich, Switzerland

View on infosec-jobs.com

Consultant expert en sécurité des systèmes industriels (H/F)

@ Devoteam | Levallois-Perret, France

View on infosec-jobs.com

Cybersecurity Analyst

@ Bally's | Providence, Rhode Island, United States

View on infosec-jobs.com

Digital Trust Cyber Defense Executive

@ KPMG India | Gurgaon, Haryana, India

View on infosec-jobs.com

Program Manager - Cybersecurity Assessment Services

@ TestPros | Remote (and DMV), DC

View on infosec-jobs.com