⤷ Title: Easy $150: Misconfigured SSO Led to Account Takeover
════════════════════════
𐀪 Author: Clement 'Tino
════════════════════════
ⴵ Time: Thu, 13 Mar 2025 10:50:15 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty_writeup #account_takeover #single_sign_on #sso
════════════════════════
𐀪 Author: Clement 'Tino
════════════════════════
ⴵ Time: Thu, 13 Mar 2025 10:50:15 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty_writeup #account_takeover #single_sign_on #sso
Medium
Easy $150: Misconfigured SSO Led to Account Takeover
Akwaaba! once again my people. In this piece, I will quickly talk about a vulnerability I recently discovered and got paid for. SSO…
⤷ Title: NSA and Global Allies Declare Fast Flux a National Security Threat
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 04 Apr 2025 11:36:49 +0000
════════════════════════
⌗ Tags: #Security #CISA #Cybersecurity #Double Flux #Fast Flux #NSA #Single Flux
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 04 Apr 2025 11:36:49 +0000
════════════════════════
⌗ Tags: #Security #CISA #Cybersecurity #Double Flux #Fast Flux #NSA #Single Flux
Hackread
NSA and Global Allies Declare Fast Flux a National Security Threat
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: Fast Flux Alert: National Security Agencies Warn of Evasive Tactic
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Sat, 05 Apr 2025 00:44:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #bulletproof hosting #Double Flux #Fast Flux #Single Flux
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Sat, 05 Apr 2025 00:44:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #bulletproof hosting #Double Flux #Fast Flux #Single Flux
Daily CyberSecurity
Fast Flux Alert: National Security Agencies Warn of Evasive Tactic
Explore the threat of Fast Flux in cybersecurity. Learn how malicious actors evade defenses using this sophisticated technique.
⤷ Title: Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 02:39:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication #CVE_2025_47949 #SAML #samlify #security #Single Sign_On #SSO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 02:39:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication #CVE_2025_47949 #SAML #samlify #security #Single Sign_On #SSO
Daily CyberSecurity
Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library
Critical vulnerability (CVSS 9.9) in samlify! This flaw puts many SSO implementations at risk, affecting a library with 768,000+ monthly downloads.
⤷ Title: Top 3 Mistakes New Cyber Learners Make (and I Made Them All)
════════════════════════
𐀪 Author: CyberSamantha
════════════════════════
ⴵ Time: Wed, 28 May 2025 21:38:40 GMT
════════════════════════
⌗ Tags: #women_in_tech #ethical_hacking #single_moms #cybersecurity
════════════════════════
𐀪 Author: CyberSamantha
════════════════════════
ⴵ Time: Wed, 28 May 2025 21:38:40 GMT
════════════════════════
⌗ Tags: #women_in_tech #ethical_hacking #single_moms #cybersecurity
Medium
Top 3 Mistakes New Cyber Learners Make (and I Made Them All) 🚨
I’m a single mom learning cybersecurity. Most days, I study while my baby naps. Some days, no naps. 😅
⤷ Title: Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 28 Jul 2025 00:13:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_54369 #cybersecurity #Node_SAML #SAML #SAML 2.0 #Single Sign_On #SSO #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 28 Jul 2025 00:13:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_54369 #cybersecurity #Node_SAML #SAML #SAML 2.0 #Single Sign_On #SSO #Vulnerability
Daily CyberSecurity
Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass
A critical flaw (CVE-2025-54369) in Node-SAML allows attackers to bypass SAML 2.0 authentication by manipulating unsigned assertion data. Update to v5.1.0 immediately!
⤷ Title: Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 00:45:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #Node_SAML #Node.js #SAML 2.0 #Single Sign_On #SSO #Vulnerability #web applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 00:45:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #Node_SAML #Node.js #SAML 2.0 #Single Sign_On #SSO #Vulnerability #web applications
Daily CyberSecurity
Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps
A critical vulnerability (CVE-2025-54419, CVSS 10.0) in Node-SAML allows attackers to bypass SAML 2.0 authentication by manipulating unsigned assertion data.
⤷ Title: Critical Flaw in Wix’s New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 00:42:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Platform #Authentication Bypass #Base44 #cybersecurity #Single Sign_On #SSO #Vulnerability #Wix #Wiz Research
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 00:42:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Platform #Authentication Bypass #Base44 #cybersecurity #Single Sign_On #SSO #Vulnerability #Wix #Wiz Research
Daily CyberSecurity
Critical Flaw in Wix's New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps
Wiz Research uncovered a critical flaw in Wix's new AI platform, Base44, that allowed unauthorized access to private enterprise applications and sensitive data by bypassing SSO.
⤷ Title: Critical Flaw in Wix’s Base44 AI Platform Allowed Access to Private Enterprise Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 00:25:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Platform #authentication bypass #Base44 #cybersecurity #Single Sign_On #SSO #vulnerability #Wix #Wiz Research
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 00:25:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Platform #authentication bypass #Base44 #cybersecurity #Single Sign_On #SSO #vulnerability #Wix #Wiz Research
Penetration Testing Tools
Critical Flaw in Wix's Base44 AI Platform Allowed Access to Private Enterprise Apps
Wiz Research uncovered a critical vulnerability in Base44, Wix's AI-powered coding platform, that allowed unauthorized access to private enterprise applications by bypassing SSO.
⤷ Title: The Missing Piece of SSO: A Practical Guide to Single Logout (SLO)
════════════════════════
𐀪 Author: Kunal Sinha
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 17:09:04 GMT
════════════════════════
⌗ Tags: #information_security #single_logout #cybersecurity #authentication #session_management
════════════════════════
𐀪 Author: Kunal Sinha
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 17:09:04 GMT
════════════════════════
⌗ Tags: #information_security #single_logout #cybersecurity #authentication #session_management
Medium
The Missing Piece of SSO: A Practical Guide to Single Logout (SLO)
Have you ever logged out of your company’s email, only to realize you’re still signed into your internal chat application? This common…