πNew WriteupβοΈ
βββββββββββββββ
πDate: Sun, 30 Apr 2023 05:58:54 GMT
βββββββββββββββ
βοΈTitle: Secure Your Microservices Communication: Implementing machine-to-machine authentication with AWSβ¦
βββββββββββββββ
πLink: https://medium.com/p/4f3e0578d73
βββββββββββββββ
Tags: #api_security #aws_alb #oidc
βββββββββββββββ
πDate: Sun, 30 Apr 2023 05:58:54 GMT
βββββββββββββββ
βοΈTitle: Secure Your Microservices Communication: Implementing machine-to-machine authentication with AWSβ¦
βββββββββββββββ
πLink: https://medium.com/p/4f3e0578d73
βββββββββββββββ
Tags: #api_security #aws_alb #oidc
Medium
Secure Your Microservices Communication: Implementing machine-to-machine authentication with AWSβ¦
What? And Why?
πNew WriteupβοΈ
βββββββββββββββ
πDate: Thu, 27 Jul 2023 16:45:13 GMT
βββββββββββββββ
βοΈTitle: Enhanced SecurityβββSafeguarding AWS Access in GitHub Actions
βββββββββββββββ
πLink: https://medium.com/p/4b33d043f24e
βββββββββββββββ
Tags: #terraform #github #oidc #github_actions #security
βββββββββββββββ
πDate: Thu, 27 Jul 2023 16:45:13 GMT
βββββββββββββββ
βοΈTitle: Enhanced SecurityβββSafeguarding AWS Access in GitHub Actions
βββββββββββββββ
πLink: https://medium.com/p/4b33d043f24e
βββββββββββββββ
Tags: #terraform #github #oidc #github_actions #security
Medium
Enhanced SecurityβββSafeguarding AWS Access in GitHub Actions πͺͺ
The fastest way to access AWS infrastructure from a GitHub Actions workflow is by utilizing AWS_ACCESS_KEY and AWS_SECRET_ACCESS_KEY. Thisβ¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Tue, 15 Aug 2023 04:45:53 GMT
βββββββββββββββ
βοΈTitle: Demystifying OpenID Connect and Comparing it with OAuth 2.0
βββββββββββββββ
πLink: https://medium.com/p/160f772482db
βββββββββββββββ
Tags: #authorisation #oidc #oauth2 #cybersecurity #authentication
βββββββββββββββ
πDate: Tue, 15 Aug 2023 04:45:53 GMT
βββββββββββββββ
βοΈTitle: Demystifying OpenID Connect and Comparing it with OAuth 2.0
βββββββββββββββ
πLink: https://medium.com/p/160f772482db
βββββββββββββββ
Tags: #authorisation #oidc #oauth2 #cybersecurity #authentication
Medium
Demystifying OpenID Connect and Comparing it with OAuth 2.0
Overview
πNew WriteupβοΈ
βββββββββββββββ
πDate: Fri, 27 Oct 2023 16:45:12 GMT
βββββββββββββββ
βοΈTitle: Embracing Cloud Technologies: Infrastructure Deployment and Management Best Practices
βββββββββββββββ
πLink: https://medium.com/p/3717e220c4a5
βββββββββββββββ
Tags: #ci_cd_pipeline #cybersecurity #bitbucket_pipelines #oidc
βββββββββββββββ
πDate: Fri, 27 Oct 2023 16:45:12 GMT
βββββββββββββββ
βοΈTitle: Embracing Cloud Technologies: Infrastructure Deployment and Management Best Practices
βββββββββββββββ
πLink: https://medium.com/p/3717e220c4a5
βββββββββββββββ
Tags: #ci_cd_pipeline #cybersecurity #bitbucket_pipelines #oidc
Medium
Embracing Cloud Technologies: Infrastructure Deployment and Management Best Practices
The rapid rise in cloud adoption has revolutionized the IT industry (and all other business areas that may rely on IT as a support tool) inβ¦
β€· Title: Understanding the Differences Between OAuth2 and OpenID Connect (OIDC)
ββββββββββββββββββββββββ
πͺ Author: Igor Venturelli
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 31 Dec 2024 15:02:22 GMT
ββββββββββββββββββββββββ
β Tags: #oauth2 #oidc #api_security #token #jwt
ββββββββββββββββββββββββ
πͺ Author: Igor Venturelli
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 31 Dec 2024 15:02:22 GMT
ββββββββββββββββββββββββ
β Tags: #oauth2 #oidc #api_security #token #jwt
Medium
Understanding the Differences Between OAuth2 and OpenID Connect (OIDC)
OAuth2 authorizes access and OIDC authenticates users. Learn their key differences and use cases
β€· Title: OAuth2 Scopes and Claims: Fine-Grained Access Control
ββββββββββββββββββββββββ
πͺ Author: Igor Venturelli
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 14 Jan 2025 15:02:10 GMT
ββββββββββββββββββββββββ
β Tags: #token #api_security #oauth2 #cybersecurity #oidc
ββββββββββββββββββββββββ
πͺ Author: Igor Venturelli
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 14 Jan 2025 15:02:10 GMT
ββββββββββββββββββββββββ
β Tags: #token #api_security #oauth2 #cybersecurity #oidc
Medium
OAuth2 Scopes and Claims: Fine-Grained Access Control
Master OAuth2 scopes and claims to secure APIs with fine-grained access control and build trust
β€· Title: Secure OAuth2 (Part -2): Put it in a JAR (JWT-Secured Authorization Request)
ββββββββββββββββββββββββ
πͺ Author: Sagara Gunathunga
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 17 Apr 2025 11:02:06 GMT
ββββββββββββββββββββββββ
β Tags: #oauth2 #authorization #jwt #oidc #application_security
ββββββββββββββββββββββββ
πͺ Author: Sagara Gunathunga
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 17 Apr 2025 11:02:06 GMT
ββββββββββββββββββββββββ
β Tags: #oauth2 #authorization #jwt #oidc #application_security
Medium
Secure OAuth2 (Part -2): Put it in a JAR (JWT-Secured Authorization Request)
In my last postβββwhich I published almost a year agoβββI explored whether the authorization code grant type truly provides the highestβ¦
β€· Title: Secure OAuth2 (Part -3) : Push Authorization Request (PAR) to Rescue
ββββββββββββββββββββββββ
πͺ Author: Sagara Gunathunga
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 18 Apr 2025 03:30:18 GMT
ββββββββββββββββββββββββ
β Tags: #app_security #api_security #asgardeo #oauth2 #oidc
ββββββββββββββββββββββββ
πͺ Author: Sagara Gunathunga
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 18 Apr 2025 03:30:18 GMT
ββββββββββββββββββββββββ
β Tags: #app_security #api_security #asgardeo #oauth2 #oidc
Medium
Secure OAuth2 (Part -3) : Push Authorization Request (PAR) to Rescue
In the very first post of this series, I explored whether the authorization code grant type truly provides the highest level of security ββ¦
β€· Title: Secure OAuth2: A Simple Story of Two KeysβββPKCE
ββββββββββββββββββββββββ
πͺ Author: Sagara Gunathunga
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 23 Apr 2025 23:21:33 GMT
ββββββββββββββββββββββββ
β Tags: #oidc #authorization #api_security #oauth2 #application_security
ββββββββββββββββββββββββ
πͺ Author: Sagara Gunathunga
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 23 Apr 2025 23:21:33 GMT
ββββββββββββββββββββββββ
β Tags: #oidc #authorization #api_security #oauth2 #application_security
Medium
Secure OAuth2: A Simple Story of Two Keys β PKCE
This is the final post in my Secure OAuth2 blog series. I began this series by examining the security gaps in the OAuth2 authorizationβ¦
β€· Title: Learn Azure OIDC
ββββββββββββββββββββββββ
πͺ Author: Saikat Paul
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 14 Jun 2025 04:43:12 GMT
ββββββββββββββββββββββββ
β Tags: #azure #cybersecurity #information_technology #authentication #oidc
ββββββββββββββββββββββββ
πͺ Author: Saikat Paul
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 14 Jun 2025 04:43:12 GMT
ββββββββββββββββββββββββ
β Tags: #azure #cybersecurity #information_technology #authentication #oidc
Medium
Learn Azure OIDC in minutes
To implement OpenID Connect (OIDC) in Azure, you typically use Azure Entra ID (formerly Azure Active Directory). Azure supports OIDC outβ¦
β€· Title: Understanding OIDC in Minutes
ββββββββββββββββββββββββ
πͺ Author: Saikat Paul
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 14 Jun 2025 04:25:45 GMT
ββββββββββββββββββββββββ
β Tags: #oidc #cybersecurity #authentication #information_technology #azure
ββββββββββββββββββββββββ
πͺ Author: Saikat Paul
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 14 Jun 2025 04:25:45 GMT
ββββββββββββββββββββββββ
β Tags: #oidc #cybersecurity #authentication #information_technology #azure
Medium
Understanding OIDC in Minutes
OIDC stands for OpenID Connect.
β€· Title: OAuth is not for AuthenticationβββA common misconception
ββββββββββββββββββββββββ
πͺ Author: Ayyappan Subramanian
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 30 Jul 2025 00:33:24 GMT
ββββββββββββββββββββββββ
β Tags: #soc_analyst #oauth #cybersecurity #identity_management #oidc
ββββββββββββββββββββββββ
πͺ Author: Ayyappan Subramanian
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 30 Jul 2025 00:33:24 GMT
ββββββββββββββββββββββββ
β Tags: #soc_analyst #oauth #cybersecurity #identity_management #oidc
Medium
OAuth is not for Authentication β A common misconception
OAuth has become so popular in a way that it is easy to forget what it was actually designed forβββand what it wasnβt. Youβve probablyβ¦
β€· Title: Solving the Performance vs Security Dilemma in .NET Core APIs with JWKS Caching
ββββββββββββββββββββββββ
πͺ Author: Okan Yurt
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 27 Oct 2025 05:31:51 GMT
ββββββββββββββββββββββββ
β Tags: #token_validation #oidc #cybersecurity #jwt #jwks
ββββββββββββββββββββββββ
πͺ Author: Okan Yurt
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 27 Oct 2025 05:31:51 GMT
ββββββββββββββββββββββββ
β Tags: #token_validation #oidc #cybersecurity #jwt #jwks
Medium
Solving the Performance vs Security Dilemma in .NET Core APIs with JWKS Caching
βThe weakest link in the security chain is the strongest link in the attackerβs chain.ββββBruce Schneier
β€· Title: The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 23 Feb 2026 03:15:17 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Cline CLI #GitHub Actions #npm security #OIDC #OpenClaw #package.json #software provenance #supply chain attack #Tech News 2026 #web shells
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 23 Feb 2026 03:15:17 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #Cline CLI #GitHub Actions #npm security #OIDC #OpenClaw #package.json #software provenance #supply chain attack #Tech News 2026 #web shells
Penetration Testing Tools
The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline
An incident has transpired within the npm registry involving the Cline CLI utility; for a duration of several
β€· Title: The 15-Second Takeover: How North Koreaβs UNC1069 Hijacked Axios and 100 Million Users
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 06 Apr 2026 10:10:47 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #axios #Cybersecurity 2026 #North Korea #npm #OIDC #plain_crypto_js #Remote Access Trojan #SILKBELL #Social Engineering #supply chain attack #UNC1069 #WAVESHAPER
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 06 Apr 2026 10:10:47 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #axios #Cybersecurity 2026 #North Korea #npm #OIDC #plain_crypto_js #Remote Access Trojan #SILKBELL #Social Engineering #supply chain attack #UNC1069 #WAVESHAPER
Penetration Testing Tools
The 15-Second Takeover: How North Koreaβs UNC1069 Hijacked Axios and 100 Million Users
The ubiquitous JavaScript library axios, a cornerstone utilized by millions of digital architectures, was transfigured for several hours
β€· Title: LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 13 Apr 2026 12:02:16 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_35029 #CVE_2026_35030 #cybersecurity #infosec #LiteLLM #LLM Proxy #OIDC #Python #rce
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 13 Apr 2026 12:02:16 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_35029 #CVE_2026_35030 #cybersecurity #infosec #LiteLLM #LLM Proxy #OIDC #Python #rce
Daily CyberSecurity
LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover
LiteLLM patches critical 9.4 CVSS flaws, including OIDC cache collisions and pass-the-hash attacks. Secure your AI infrastructureβupgrade to v1.83.0 now!
β€· Title: Critical 9.1 Bypass in OAuth2 Proxy Exposes Upstream Resources
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Apr 2026 13:05:19 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2026_34457 #infosec #Nginx auth_request #OAuth2_Proxy #OIDC #Patch Alert #User_Agent Spoofing
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Apr 2026 13:05:19 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2026_34457 #infosec #Nginx auth_request #OAuth2_Proxy #OIDC #Patch Alert #User_Agent Spoofing
Daily CyberSecurity
Critical 9.1 Bypass in OAuth2 Proxy Exposes Upstream Resources
A critical 9.1 CVSS flaw in OAuth2 Proxy allows unauthenticated users to bypass security via User-Agent spoofing. Secure your upstream appsβpatch v7.15.2 today.
β€· Title: Mini Shai-Hulud Alert: TeamPCP Hijacks @tanstack and PyPI to Poison 12 Million Weekly Downloads
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 14 May 2026 08:12:28 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #@tanstack #GitHub Actions #InfoSec 2026 #Mini Shai_Hulud #npm security #OIDC #PyPI malware #supply chain attack #tanstack_runner.js #TeamPCP #Trusted Publishing
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 14 May 2026 08:12:28 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #@tanstack #GitHub Actions #InfoSec 2026 #Mini Shai_Hulud #npm security #OIDC #PyPI malware #supply chain attack #tanstack_runner.js #TeamPCP #Trusted Publishing
Penetration Testing Tools
Mini Shai-Hulud Alert: TeamPCP Hijacks @tanstack and PyPI to Poison 12 Million Weekly Downloads
The Mini Shai-Hulud incursion has once again laid siege to the software supply chain. While the initial offensive
β€· Title: Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 20 May 2026 08:04:06 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #@antv Malicious Packages #atool Maintainer Account #CI/CD Secret Stealer #Claude Code Backdoor #OIDC Token Hijacking #Session P2P Network #Shai_Hulud npm Attack #Sigstore Provenance Forgery #Software Supply Chain Worm #Visual Studio Code Malware
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 20 May 2026 08:04:06 +0000
ββββββββββββββββββββββββ
β Tags: #Malware #@antv Malicious Packages #atool Maintainer Account #CI/CD Secret Stealer #Claude Code Backdoor #OIDC Token Hijacking #Session P2P Network #Shai_Hulud npm Attack #Sigstore Provenance Forgery #Software Supply Chain Worm #Visual Studio Code Malware
Penetration Testing Tools
Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
The npm ecosystem has been subjected to a massive, highly coordinated supply-chain assault. Within a compressed one-hour envelope,