Researchers Uncover RCE Attack Chains in HashiCorp Vault and CyberArk Conjur(csoonline.com)

17 points by GavCo 1 year ago | 2 comments

Foreign hackers breached a US nuclear weapons plant via SharePoint flaws(csoonline.com)

394 points by zdw 1 year ago | 317 comments

CSO Online news analysis reporting that foreign hackers breached the NNSA's Kansas City nuclear weapons plant by exploiting Microsoft SharePoint vulnerabilities.

CVE program faces swift end after DHS fails to renew contract(csoonline.com)

1827 points by healsdata 1 year ago | 972 comments

CSO Online news analysis on the CVE program facing an abrupt end after DHS failed to renew MITRE's contract, leaving vulnerability tracking uncertain.

Hackers stole access tokens from Okta's support unit(krebsonsecurity.com)

279 points by todsacerdoti 3 years ago | 137 comments

Microsoft Gave FBI Keys to Unlock Encrypted Data, Exposing Major Privacy Flaw(forbes.com)

17 points by _____k 9 months ago | 3 comments

Microsoft has released software updates to plug at least 570 security holes(krebsonsecurity.com)

173 points by robin_reala 3 months ago | 107 comments

Google Authenticator now supports Google Account synchronization(security.googleblog.com)

412 points by ortusdux 3 years ago | 297 comments

Google Security Blog post announcing that Google Authenticator can now back up and sync one-time codes across devices via Google Accounts.

Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App(eval.blog)

349 points by skilled 3 years ago | 102 comments

A security researcher's write-up on leaking Microsoft account OAuth tokens through an open redirect vulnerability in the Harvest time-tracking app.

I could've accessed 17T Microsoft records(blog.faav.net)

287 points by luispa 27 days ago | 120 comments

A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.

When MFA isn't MFA, or how we got phished(retool.com)

333 points by dvdhsu 3 years ago | 240 comments

Retool blog post describing a phishing attack on its employees and how Google Authenticator cloud sync undermined multi-factor authentication.

Microsoft breached antitrust rules by bundling Teams and Office, EU says(apnews.com)

669 points by cbg0 2 years ago | 734 comments

AP News article reporting that the European Union found Microsoft breached antitrust rules by bundling Teams with its Office software.

Security researcher says Microsoft built a Bitlocker backdoor, releases exploit(techspot.com)

523 points by nolok 5 months ago | 223 comments

TechSpot news article about a researcher's claim that Microsoft built a BitLocker backdoor, with a released YellowKey exploit that bypasses encryption via USB and WinRE.