Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Tue, 15 Aug 2023 04:45:53 GMT
———————————————
✏️Title: Demystifying OpenID Connect and Comparing it with OAuth 2.0
———————————————
📎Link: https://medium.com/p/160f772482db
———————————————
Tags: #authorisation #oidc #oauth2 #cybersecurity #authentication

Medium

Demystifying OpenID Connect and Comparing it with OAuth 2.0

Overview

18 views05:01

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 27 Oct 2023 16:45:12 GMT
———————————————
✏️Title: Embracing Cloud Technologies: Infrastructure Deployment and Management Best Practices
———————————————
📎Link: https://medium.com/p/3717e220c4a5
———————————————
Tags: #ci_cd_pipeline #cybersecurity #bitbucket_pipelines #oidc

Medium

Embracing Cloud Technologies: Infrastructure Deployment and Management Best Practices

The rapid rise in cloud adoption has revolutionized the IT industry (and all other business areas that may rely on IT as a support tool) in…

7 views17:02

Daily Writeups

⤷ Title: Understanding the Differences Between OAuth2 and OpenID Connect (OIDC)
════════════════════════
𐀪 Author: Igor Venturelli
════════════════════════
ⴵ Time: Tue, 31 Dec 2024 15:02:22 GMT
════════════════════════
⌗ Tags: #oauth2 #oidc #api_security #token #jwt

Medium

Understanding the Differences Between OAuth2 and OpenID Connect (OIDC)

OAuth2 authorizes access and OIDC authenticates users. Learn their key differences and use cases

11 views16:35

Daily Writeups

⤷ Title: OAuth2 Scopes and Claims: Fine-Grained Access Control
════════════════════════
𐀪 Author: Igor Venturelli
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 15:02:10 GMT
════════════════════════
⌗ Tags: #token #api_security #oauth2 #cybersecurity #oidc

Medium

OAuth2 Scopes and Claims: Fine-Grained Access Control

Master OAuth2 scopes and claims to secure APIs with fine-grained access control and build trust

48 views16:05

Daily Writeups

⤷ Title: Secure OAuth2 (Part -2): Put it in a JAR (JWT-Secured Authorization Request)
════════════════════════
𐀪 Author: Sagara Gunathunga
════════════════════════
ⴵ Time: Thu, 17 Apr 2025 11:02:06 GMT
════════════════════════
⌗ Tags: #oauth2 #authorization #jwt #oidc #application_security

Medium

Secure OAuth2 (Part -2): Put it in a JAR (JWT-Secured Authorization Request)

In my last post — which I published almost a year ago — I explored whether the authorization code grant type truly provides the highest…

30 views12:04

Daily Writeups

⤷ Title: Secure OAuth2 (Part -3) : Push Authorization Request (PAR) to Rescue
════════════════════════
𐀪 Author: Sagara Gunathunga
════════════════════════
ⴵ Time: Fri, 18 Apr 2025 03:30:18 GMT
════════════════════════
⌗ Tags: #app_security #api_security #asgardeo #oauth2 #oidc

Medium

Secure OAuth2 (Part -3) : Push Authorization Request (PAR) to Rescue

In the very first post of this series, I explored whether the authorization code grant type truly provides the highest level of security —…

49 views04:04

Daily Writeups

⤷ Title: Secure OAuth2: A Simple Story of Two Keys — PKCE
════════════════════════
𐀪 Author: Sagara Gunathunga
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:21:33 GMT
════════════════════════
⌗ Tags: #oidc #authorization #api_security #oauth2 #application_security

Medium

Secure OAuth2: A Simple Story of Two Keys — PKCE

This is the final post in my Secure OAuth2 blog series. I began this series by examining the security gaps in the OAuth2 authorization…

25 views00:03

Daily Writeups

⤷ Title: Learn Azure OIDC
════════════════════════
𐀪 Author: Saikat Paul
════════════════════════
ⴵ Time: Sat, 14 Jun 2025 04:43:12 GMT
════════════════════════
⌗ Tags: #azure #cybersecurity #information_technology #authentication #oidc

Medium

Learn Azure OIDC in minutes

To implement OpenID Connect (OIDC) in Azure, you typically use Azure Entra ID (formerly Azure Active Directory). Azure supports OIDC out…

20 views05:04

Daily Writeups

⤷ Title: Understanding OIDC in Minutes
════════════════════════
𐀪 Author: Saikat Paul
════════════════════════
ⴵ Time: Sat, 14 Jun 2025 04:25:45 GMT
════════════════════════
⌗ Tags: #oidc #cybersecurity #authentication #information_technology #azure

Medium

Understanding OIDC in Minutes

OIDC stands for OpenID Connect.

21 views05:04

Daily Writeups

⤷ Title: OAuth is not for Authentication — A common misconception
════════════════════════
𐀪 Author: Ayyappan Subramanian
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 00:33:24 GMT
════════════════════════
⌗ Tags: #soc_analyst #oauth #cybersecurity #identity_management #oidc

Medium

OAuth is not for Authentication — A common misconception

OAuth has become so popular in a way that it is easy to forget what it was actually designed for — and what it wasn’t. You’ve probably…

12 views01:04

Daily Writeups

⤷ Title: Solving the Performance vs Security Dilemma in .NET Core APIs with JWKS Caching
════════════════════════
𐀪 Author: Okan Yurt
════════════════════════
ⴵ Time: Mon, 27 Oct 2025 05:31:51 GMT
════════════════════════
⌗ Tags: #token_validation #oidc #cybersecurity #jwt #jwks

Medium

Solving the Performance vs Security Dilemma in .NET Core APIs with JWKS Caching

“The weakest link in the security chain is the strongest link in the attacker’s chain.” — Bruce Schneier

25 views06:04

Daily Writeups

⤷ Title: The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Cline CLI #GitHub Actions #npm security #OIDC #OpenClaw #package.json #software provenance #supply chain attack #Tech News 2026 #web shells

Penetration Testing Tools

The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline

An incident has transpired within the npm registry involving the Cline CLI utility; for a duration of several

4 views05:04

Daily Writeups

⤷ Title: The 15-Second Takeover: How North Korea’s UNC1069 Hijacked Axios and 100 Million Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:10:47 +0000
════════════════════════
⌗ Tags: #Malware #axios #Cybersecurity 2026 #North Korea #npm #OIDC #plain_crypto_js #Remote Access Trojan #SILKBELL #Social Engineering #supply chain attack #UNC1069 #WAVESHAPER

Penetration Testing Tools

The 15-Second Takeover: How North Korea’s UNC1069 Hijacked Axios and 100 Million Users

The ubiquitous JavaScript library axios, a cornerstone utilized by millions of digital architectures, was transfigured for several hours

13 views11:04

Daily Writeups

⤷ Title: LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:02:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_35029 #CVE_2026_35030 #cybersecurity #infosec #LiteLLM #LLM Proxy #OIDC #Python #rce

Daily CyberSecurity

LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover

LiteLLM patches critical 9.4 CVSS flaws, including OIDC cache collisions and pass-the-hash attacks. Secure your AI infrastructure—upgrade to v1.83.0 now!

14 views13:04

Daily Writeups

⤷ Title: Critical 9.1 Bypass in OAuth2 Proxy Exposes Upstream Resources
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 13:05:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2026_34457 #infosec #Nginx auth_request #OAuth2_Proxy #OIDC #Patch Alert #User_Agent Spoofing

Daily CyberSecurity

Critical 9.1 Bypass in OAuth2 Proxy Exposes Upstream Resources

A critical 9.1 CVSS flaw in OAuth2 Proxy allows unauthenticated users to bypass security via User-Agent spoofing. Secure your upstream apps—patch v7.15.2 today.

7 views15:04

Daily Writeups

⤷ Title: Mini Shai-Hulud Alert: TeamPCP Hijacks @tanstack and PyPI to Poison 12 Million Weekly Downloads
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 08:12:28 +0000
════════════════════════
⌗ Tags: #Malware #@tanstack #GitHub Actions #InfoSec 2026 #Mini Shai_Hulud #npm security #OIDC #PyPI malware #supply chain attack #tanstack_runner.js #TeamPCP #Trusted Publishing

Penetration Testing Tools

Mini Shai-Hulud Alert: TeamPCP Hijacks @tanstack and PyPI to Poison 12 Million Weekly Downloads

The Mini Shai-Hulud incursion has once again laid siege to the software supply chain. While the initial offensive

15 views09:04

Daily Writeups

⤷ Title: Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:04:06 +0000
════════════════════════
⌗ Tags: #Malware #@antv Malicious Packages #atool Maintainer Account #CI/CD Secret Stealer #Claude Code Backdoor #OIDC Token Hijacking #Session P2P Network #Shai_Hulud npm Attack #Sigstore Provenance Forgery #Software Supply Chain Worm #Visual Studio Code Malware

Penetration Testing Tools

Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages

The npm ecosystem has been subjected to a massive, highly coordinated supply-chain assault. Within a compressed one-hour envelope,

34 views09:03

Daily Writeups

⤷ Title: SimpleHelp Authentication Bypass Exploited to Hijack Remote Endpoints
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 03:55:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_48558 #Horizon3.ai #OIDC #SimpleHelp

Daily CyberSecurity

SimpleHelp Authentication Bypass Exploited to Hijack Remote Endpoints

A critical SimpleHelp authentication bypass flaw leaves servers open. Attackers exploit the OIDC authentication flow to gain technician control.

9 views04:03

Daily Writeups

⤷ Title: SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 01:43:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_48558 #Djinn Stealer #information stealer #MSP Security #OIDC #RMM security #SimpleHelp #TaskWeaver

Daily CyberSecurity

SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer

On 29 June 2026, CISA added CVE-2026-48558 to its Known Exploited Vulnerabilities catalog. The flaw is a critical SimpleHelp authentication bypass in the OIDC login flow. Attackers now use it in t…

30 views02:03

Daily Writeups

⤷ Title: Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 01:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Better Auth #CVE_2026_53513 #OIDC #SSO #ssrf #TypeScript Authentication

Daily CyberSecurity

Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library

TL;DR A critical Better Auth SSRF flaw, tracked as CVE-2026-53513, lets any logged-in user reach internal services. The bug carries a CVSS score of 9.6 and sits in the @better-auth/sso plugin. Mai…

23 views02:03

About

Blog

Apps

Platform