Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.ie is one of the many independent Mastodon servers you can use to participate in the fediverse.
Irish Mastodon - run from Ireland, we welcome all who respect the community rules and members.

Administered by:

Server stats:

1.6K
active users

mastodon.ie: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.2

#authorization

0 posts0 participants0 posts today
Alvin Ashcraft 🐿️<p>OAuth 2.0 Access Tokens and the Principle of Least Privilege | by Andrea Chiarelli.</p><p><a href="https://auth0.com/blog/oauth2-access-tokens-and-principle-of-least-privilege/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">auth0.com/blog/oauth2-access-t</span><span class="invisible">okens-and-principle-of-least-privilege/</span></a> </p><p><a href="https://hachyderm.io/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://hachyderm.io/tags/oauth" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>oauth</span></a> <a href="https://hachyderm.io/tags/auth0" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>auth0</span></a></p>
Bill<p>Here's a new-to-me password spray tool that looks a hell of a lot more functional that Burp Intruder.</p><p><a href="https://github.com/blacklanternsecurity/TREVORspray" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.com/blacklanternsecurit</span><span class="invisible">y/TREVORspray</span></a></p><p><a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>pentest</span></a> <a href="https://infosec.exchange/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a></p>
|7eter l-|. l3oling 🧰<p>Ann: Launched Open Collective for Ruby OAuth gems (oauth, oauth2, &amp; others)</p><p>I've been the primary maintainer of OAuth tools in Ruby since 2017. In this move toward supporting myself with open source work I need your help!<br><a href="https://opencollective.com/ruby-oauth" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">opencollective.com/ruby-oauth</span><span class="invisible"></span></a> <a href="https://ruby.social/tags/Ruby" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Ruby</span></a> <a href="https://ruby.social/tags/OAuth" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OAuth</span></a> <a href="https://ruby.social/tags/Authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Authorization</span></a> <a href="https://ruby.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Security</span></a> <a href="https://ruby.social/tags/OIDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OIDC</span></a></p>
Alvin Ashcraft 🐿️<p>Please Don't Write Your Own MCP Authorization Code | by Den Delimarsky.</p><p><a href="https://den.dev/blog/mcp-prm-auth/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">den.dev/blog/mcp-prm-auth/</span><span class="invisible"></span></a> </p><p><a href="https://hachyderm.io/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ai</span></a> <a href="https://hachyderm.io/tags/mcp" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>mcp</span></a> <a href="https://hachyderm.io/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://hachyderm.io/tags/modelcontextprotocol" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>modelcontextprotocol</span></a> <a href="https://hachyderm.io/tags/aiagents" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>aiagents</span></a></p>
beSpacific<p>Trump’s effort, combined thrust of his other <a href="https://newsie.social/tags/constitutional" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>constitutional</span></a> transgressions, uniquely dangerous. No indication he gave any thought to seeking <a href="https://newsie.social/tags/congressional" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>congressional</span></a> <a href="https://newsie.social/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a>. As self-concerned, immature a commander-in-chief as country has had, he likely acted, as always, out of crass self-interest. <a href="https://newsie.social/tags/Israel" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Israel</span></a> surprisingly successful <a href="https://newsie.social/tags/bombardment" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bombardment</span></a> of last week put him in position to be a winner by finishing off the job—very possibly the only thing that was in his <a href="https://newsie.social/tags/lizard" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>lizard</span></a> <a href="https://newsie.social/tags/brain" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>brain</span></a>. <a href="https://harrylitman.substack.com/p/trumps-strike-on-iran-and-the-constitution" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">harrylitman.substack.com/p/tru</span><span class="invisible">mps-strike-on-iran-and-the-constitution</span></a></p>
beSpacific<p><a href="https://newsie.social/tags/Trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Trump</span></a> faces <a href="https://newsie.social/tags/bipartisan" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bipartisan</span></a> blowback in <a href="https://newsie.social/tags/Congress" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Congress</span></a> on <a href="https://newsie.social/tags/Iran" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Iran</span></a> strikes Why it matters: While most <a href="https://newsie.social/tags/congressional" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>congressional</span></a> <a href="https://newsie.social/tags/Republicans" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Republicans</span></a> some pro-Israel <a href="https://newsie.social/tags/Democrats" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Democrats</span></a> are praising President Trump's strikes on <a href="https://newsie.social/tags/Iranian" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Iranian</span></a> <a href="https://newsie.social/tags/nuclear" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>nuclear</span></a> facilities, pockets of <a href="https://newsie.social/tags/opposition" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>opposition</span></a> are already emerging over whether he needed congressional <a href="https://newsie.social/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> for such a <a href="https://newsie.social/tags/provocative" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>provocative</span></a> use of <a href="https://newsie.social/tags/military" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>military</span></a> <a href="https://newsie.social/tags/force" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>force</span></a>. Yes, he did need Congressional <a href="https://newsie.social/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a>..why is there even a question. <a href="https://newsie.social/tags/warpowers" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>warpowers</span></a> <a href="https://newsie.social/tags/foreign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>foreign</span></a> <a href="https://newsie.social/tags/policy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>policy</span></a> <a href="https://newsie.social/tags/retaliation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>retaliation</span></a> <a href="https://newsie.social/tags/democracy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>democracy</span></a> <a href="https://newsie.social/tags/war" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>war</span></a></p>
MineEyesDazzle<p><a href="https://mas.to/tags/USpolitics" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>USpolitics</span></a> <a href="https://mas.to/tags/Hegseth" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Hegseth</span></a> <a href="https://mas.to/tags/mass" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>mass</span></a> <a href="https://mas.to/tags/protesters" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>protesters</span></a> <a href="https://mas.to/tags/protests" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>protests</span></a> <a href="https://mas.to/tags/protest" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>protest</span></a> <a href="https://mas.to/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://mas.to/tags/authorize" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorize</span></a> <a href="https://mas.to/tags/UseOfForce" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>UseOfForce</span></a></p><p><a href="https://www.reddit.com/r/Astuff/comments/1lexjw3/hegseth_refuses_to_answer_whether_he_has_given/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">reddit.com/r/Astuff/comments/1</span><span class="invisible">lexjw3/hegseth_refuses_to_answer_whether_he_has_given/</span></a></p>
🤘 The Metal Dog 🤘<p><a href="https://mastodon.themetaldog.net/tags/TheMetalDogArticleList" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>TheMetalDogArticleList</span></a><br><a href="https://mastodon.themetaldog.net/tags/Blabbermouth" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Blabbermouth</span></a><br>NANCY WILSON Says TRUMP's Military Parade Used HEART's 'Barracuda' 'Without Permission Or Authorization'</p><p><a href="https://blabbermouth.net/news/nancy-wilson-says-trumps-military-parade-used-hearts-barracuda-without-permission-or-authorization" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">blabbermouth.net/news/nancy-wi</span><span class="invisible">lson-says-trumps-military-parade-used-hearts-barracuda-without-permission-or-authorization</span></a></p><p><a href="https://mastodon.themetaldog.net/tags/NancyWilson" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NancyWilson</span></a> <a href="https://mastodon.themetaldog.net/tags/Trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Trump</span></a> <a href="https://mastodon.themetaldog.net/tags/HEART" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HEART</span></a> <a href="https://mastodon.themetaldog.net/tags/Barracuda" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Barracuda</span></a> <a href="https://mastodon.themetaldog.net/tags/MilitaryParade" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MilitaryParade</span></a> <a href="https://mastodon.themetaldog.net/tags/WashingtonDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WashingtonDC</span></a> <a href="https://mastodon.themetaldog.net/tags/USArmy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>USArmy</span></a> <a href="https://mastodon.themetaldog.net/tags/DonaldTrump" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DonaldTrump</span></a> <a href="https://mastodon.themetaldog.net/tags/MusicLicensing" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MusicLicensing</span></a> <a href="https://mastodon.themetaldog.net/tags/Authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Authorization</span></a></p>
beSpacific<p>Vial military.com - Guard troops unpaid and in limbo: Over 4,000 <a href="https://newsie.social/tags/California" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>California</span></a> <a href="https://newsie.social/tags/NationalGuard" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NationalGuard</span></a> <a href="https://newsie.social/tags/soldiers" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>soldiers</span></a> deployed to <a href="https://newsie.social/tags/LosAngeles" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>LosAngeles</span></a> remain unpaid due to delays in official activation orders, leaving their pay, benefits, and legal status uncertain. <a href="https://newsie.social/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://newsie.social/tags/orders" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>orders</span></a> <a href="https://newsie.social/tags/pentagon" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>pentagon</span></a> <a href="https://newsie.social/tags/DHS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DHS</span></a> <a href="https://newsie.social/tags/immigration" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>immigration</span></a> <a href="https://newsie.social/tags/civilliberties" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>civilliberties</span></a> <a href="https://newsie.social/tags/logistics" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>logistics</span></a> <a href="https://newsie.social/tags/hegseth" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>hegseth</span></a> Poor planning &amp; conditions: Troops report chaotic logistics w some sleeping outdoors on cots, facing inconsistent access to <a href="https://newsie.social/tags/food" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>food</span></a>, <a href="https://newsie.social/tags/fuel" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fuel</span></a>, hastily organized <a href="https://newsie.social/tags/mission" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>mission</span></a> <a href="https://newsie.social/tags/trump" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>trump</span></a></p>
Pyrzout :vm:<p>Best Practices for User Authentication and Authorization in Web Applications: A Comprehensive Security Framework – Source: securityboulevard.com <a href="https://ciso2ciso.com/best-practices-for-user-authentication-and-authorization-in-web-applications-a-comprehensive-security-framework-source-securityboulevard-com/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">ciso2ciso.com/best-practices-f</span><span class="invisible">or-user-authentication-and-authorization-in-web-applications-a-comprehensive-security-framework-source-securityboulevard-com/</span></a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>rssfeedpostgeneratorecho</span></a> <a href="https://social.skynetcloud.site/tags/SecurityBloggersNetwork" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityBloggersNetwork</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurityNews</span></a> <a href="https://social.skynetcloud.site/tags/SecurityBoulevard" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityBoulevard</span></a> <a href="https://social.skynetcloud.site/tags/DigitalIdentity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DigitalIdentity</span></a> <a href="https://social.skynetcloud.site/tags/Identity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Identity</span></a>&amp;Access <a href="https://social.skynetcloud.site/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authentication</span></a> <a href="https://social.skynetcloud.site/tags/infrastructure" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>infrastructure</span></a> <a href="https://social.skynetcloud.site/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://social.skynetcloud.site/tags/BestPractices" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BestPractices</span></a> <a href="https://social.skynetcloud.site/tags/CIAM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CIAM</span></a></p>
Cybernews<p>Hackers can craft a request, send it to the Asus router, and execute functions without authorization.</p><p><a href="https://infosec.exchange/tags/hack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>hack</span></a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> <a href="https://infosec.exchange/tags/Asus" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Asus</span></a> <a href="https://infosec.exchange/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> </p><p><a href="https://cnews.link/asus-routers-affected-by-critical-vulnerability-1/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">cnews.link/asus-routers-affect</span><span class="invisible">ed-by-critical-vulnerability-1/</span></a></p>
Alvin Ashcraft 🐿️<p>An Introduction to MCP and Authorization | Auth0.</p><p><a href="https://auth0.com/blog/an-introduction-to-mcp-and-authorization/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">auth0.com/blog/an-introduction</span><span class="invisible">-to-mcp-and-authorization/</span></a> </p><p><a href="https://hachyderm.io/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ai</span></a> <a href="https://hachyderm.io/tags/mcp" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>mcp</span></a> <a href="https://hachyderm.io/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://hachyderm.io/tags/aimodels" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>aimodels</span></a></p>
Rod2ik 🇪🇺 🇨🇵 🇪🇸 🇺🇦 🇨🇦 🇩🇰 🇬🇱<p>Le <a href="https://mastodon.social/tags/Royaume" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Royaume</span></a>-Uni <a href="https://mastodon.social/tags/UK" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>UK</span></a> impose une taxe d’entrée aux <a href="https://mastodon.social/tags/Europ%C3%A9ens" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Européens</span></a>, une <a href="https://mastodon.social/tags/ETA" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ETA</span></a> <a href="https://mastodon.social/tags/Electronic" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Electronic</span></a> <a href="https://mastodon.social/tags/Travel" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Travel</span></a> <a href="https://mastodon.social/tags/Authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Authorization</span></a> , ou <a href="https://mastodon.social/tags/Autorisation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Autorisation</span></a> <a href="https://mastodon.social/tags/Electronique" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Electronique</span></a> de <a href="https://mastodon.social/tags/Voyage" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Voyage</span></a></p><p>Ça mériterait bien un petit <a href="https://mastodon.social/tags/Liberation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Liberation</span></a> <a href="https://mastodon.social/tags/Day" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Day</span></a> et des <a href="https://mastodon.social/tags/taxes" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>taxes</span></a> <a href="https://mastodon.social/tags/r%C3%A9ciproques" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>réciproques</span></a> pour les <a href="https://mastodon.social/tags/citoyens" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>citoyens</span></a> <a href="https://mastodon.social/tags/britanniques" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>britanniques</span></a>.. (sorry guys..)</p><p><a href="https://www.ouest-france.fr/europe/royaume-uni/le-royaume-uni-impose-une-taxe-dentree-aux-europeens-88acf66e-0fd7-11f0-a359-3785f88c9270" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">ouest-france.fr/europe/royaume</span><span class="invisible">-uni/le-royaume-uni-impose-une-taxe-dentree-aux-europeens-88acf66e-0fd7-11f0-a359-3785f88c9270</span></a></p>
Pyrzout :vm:<p>Next.js Middleware Flaw Lets Attackers Bypass Authorization <a href="https://hackread.com/next-js-middleware-flaw-bypass-authorization/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">hackread.com/next-js-middlewar</span><span class="invisible">e-flaw-bypass-authorization/</span></a> <a href="https://social.skynetcloud.site/tags/Authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Authorization</span></a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Vulnerability</span></a> <a href="https://social.skynetcloud.site/tags/Middleware" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Middleware</span></a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Security</span></a> <a href="https://social.skynetcloud.site/tags/Nextjs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Nextjs</span></a> <a href="https://social.skynetcloud.site/tags/React" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>React</span></a></p>
Pyrzout :vm:<p>Next.js Middleware Flaw Lets Attackers Bypass Authorization – Source:hackread.com <a href="https://ciso2ciso.com/next-js-middleware-flaw-lets-attackers-bypass-authorization-sourcehackread-com/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">ciso2ciso.com/next-js-middlewa</span><span class="invisible">re-flaw-lets-attackers-bypass-authorization-sourcehackread-com/</span></a> <a href="https://social.skynetcloud.site/tags/1CyberSecurityNewsPost" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>1CyberSecurityNewsPost</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurityNews</span></a> <a href="https://social.skynetcloud.site/tags/Authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Authorization</span></a> <a href="https://social.skynetcloud.site/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Vulnerability</span></a> <a href="https://social.skynetcloud.site/tags/Middleware" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Middleware</span></a> <a href="https://social.skynetcloud.site/tags/Hackread" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Hackread</span></a> <a href="https://social.skynetcloud.site/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>security</span></a> <a href="https://social.skynetcloud.site/tags/Nextjs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Nextjs</span></a> <a href="https://social.skynetcloud.site/tags/React" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>React</span></a></p>
Dan 🌈<p>👋 Very stoked to announce that I will be speaking at <a href="https://hachyderm.io/tags/OWASP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OWASP</span></a> <a href="https://hachyderm.io/tags/Snowfroc" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Snowfroc</span></a> this Friday at 11:00 in the Great Hall. The talk is entitled "Patterns of failure in modern <a href="https://hachyderm.io/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a>" and it's mostly about why <a href="https://hachyderm.io/tags/authz" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authz</span></a> is getting harder (instead of easier). I'll be citing some academic research but also looking at some interesting examples of authz failure at some fairly large, well-known brands. Hope to see you there! 🎤</p><p>p.s. I've never been to <a href="https://hachyderm.io/tags/Denver" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Denver</span></a> so looking forward to checking the city out a bit too. If you have suggestions for things to do (read: eat), let me know! 😄</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://cyberplace.social/@GossiTheDog" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>GossiTheDog</span></a></span> the sheer fact that <a href="https://infosec.space/tags/MSPs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MSPs</span></a> &amp; <a href="https://infosec.space/tags/CSPs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CSPs</span></a> can access clients' setups without proper <a href="https://infosec.space/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> [including <a href="https://infosec.space/tags/KYC" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>KYC</span></a> / <a href="https://infosec.space/tags/KYB" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>KYB</span></a>, <a href="https://infosec.space/tags/AuthCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AuthCode</span></a>|s and proper authorization via contract] is already sickening.</p><ul><li><a href="https://cyberplace.social/@GossiTheDog/114104955818018205" rel="nofollow noopener" target="_blank">This</a> literally <em>begs to be abused</em> via <a href="https://infosec.space/tags/SocialEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SocialEngineering</span></a> / <a href="https://infosec.space/tags/SocialHacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SocialHacking</span></a> of <a href="https://infosec.space/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Microsoft</span></a> personnel or just blatant <em>"<a href="https://infosec.space/tags/PrivilegueEscalation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PrivilegueEscalation</span></a>"</em> through falsefully claiming to be a <a href="https://infosec.space/tags/MSP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MSP</span></a> / <a href="https://infosec.space/tags/CSP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CSP</span></a> contracted by the targeted company.</li></ul><p>Such fundamental <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ITsec</span></a> fuckups are reasons alone not to use <a href="https://infosec.space/tags/Azure" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Azure</span></a> or any <a href="https://infosec.space/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Microsoft</span></a> products &amp; services <em>at all</em>...</p><ul><li>I mean, it doesn't require <a href="https://infosec.space/tags/Mitnick" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Mitnick</span></a>-level skills to pull this off, since it doesn't necessitate <a href="https://infosec.space/tags/Lapsus" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Lapsus</span></a>-Style <a href="https://infosec.space/tags/SIMswap" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SIMswap</span></a> or other means to gain access...</li></ul>
Schneier on Security RSS<p>Device Code Phishing</p><p>This isn’t new, but it’s increasingly popular:<br>The technique is known as devic... <a href="https://www.schneier.com/blog/archives/2025/02/device-code-phishing.html" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">schneier.com/blog/archives/202</span><span class="invisible">5/02/device-code-phishing.html</span></a></p><p> <a href="https://burn.capital/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authentication</span></a> <a href="https://burn.capital/tags/Uncategorized" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Uncategorized</span></a> <a href="https://burn.capital/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://burn.capital/tags/phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>phishing</span></a> <a href="https://burn.capital/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Russia</span></a></p>
Pyrzout :vm:<p>Device Code Phishing – Source: www.schneier.com <a href="https://ciso2ciso.com/device-code-phishing-source-www-schneier-com/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">ciso2ciso.com/device-code-phis</span><span class="invisible">hing-source-www-schneier-com/</span></a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>rssfeedpostgeneratorecho</span></a> <a href="https://social.skynetcloud.site/tags/SchneierOnSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SchneierOnSecurity</span></a> <a href="https://social.skynetcloud.site/tags/SchneieronSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SchneieronSecurity</span></a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurityNews</span></a> <a href="https://social.skynetcloud.site/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authentication</span></a> <a href="https://social.skynetcloud.site/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://social.skynetcloud.site/tags/Uncategorized" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Uncategorized</span></a> <a href="https://social.skynetcloud.site/tags/Phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Phishing</span></a> <a href="https://social.skynetcloud.site/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Russia</span></a></p>
Pyrzout :vm:<p>Device Code Phishing <a href="https://www.schneier.com/blog/archives/2025/02/device-code-phishing.html" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">schneier.com/blog/archives/202</span><span class="invisible">5/02/device-code-phishing.html</span></a> <a href="https://social.skynetcloud.site/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authentication</span></a> <a href="https://social.skynetcloud.site/tags/Uncategorized" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Uncategorized</span></a> <a href="https://social.skynetcloud.site/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>authorization</span></a> <a href="https://social.skynetcloud.site/tags/phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>phishing</span></a> <a href="https://social.skynetcloud.site/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Russia</span></a></p>
TrendingLive feeds
About