31.iOS App Secret Management: Best Practices for Keeping Your Data Secureblog | 2024-02-09 08:37 | hackerone.com | Original ↗ | .md | #appsec | #secrets-management | #mobile-security
32.Midnight Blizzard attack on Microsoft corporate environment: a detailed analysis, detections and recommendationsblog | 2024-02-08 18:00 | wiz.io | Original ↗ | .md | #threat-detection | #microsoft | #oauth
33.Security flaws in an SSO plugin for Caddyblog | 2023-09-18 12:00 | blog.trailofbits.com | Original ↗ | .md | #cloud | #security-audit | #xss
34.Detecting web message misconfigurations for cross-domain credential theftresearch | 2022-11-09 14:13 | portswigger.net | Original ↗ | .md | #burp-suite | #credential-theft | #dom-invader
35.Kiteworks’ New Program Promotionblog | 2022-03-03 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #rce | #sql-injection
36.Hidden OAuth attack vectorsresearch | 2021-03-25 14:49 | portswigger.net | Original ↗ | .md | #user-enumeration | #ssrf | #oauth
37.Taking over Azure DevOps Accounts with 1 Clickresearch | 2020-06-28 00:00 | slcyber.io | Original ↗ | .md | #cloud | #vulnerability-research | #account-takeover
38.Gathering Bearer Tokens from Azure Servicesblog | 2020-04-16 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #privilege-escalation
39.Every Sign Has a Storyblog | 2019-08-12 00:00 | bishopfox.com | Original ↗ | .md | #appsec | #best-practices | #secure-development
40.Why I didn’t catch any Pokemon todayblog | 2016-07-12 03:37 | blog.trailofbits.com | Original ↗ | .md | #mobile-security | #privacy | #oauth