Google OAuth is broken (sort of) - Truffle Security
A Google Oauth vulnerability that allows employees to maintain access to services after they're offboarded.
Source: trufflesecurity.com
📰 Truffle Security News
Truffle Security News Today
Fast, Ad-Free News Updates
Stay updated with breaking news from Truffle Security. Real-time updates on events, politics, business and more.
Secrets exposed by thousands of leading websites
Secrets exposed by thousands of leading websites SecurityWeek reports that exposed Git directories containing code commits, file paths, source codes, and other secrets were observed across 4,500 websites in the Alexa Top 1 Million Websites list.
Source: scmagazine.com
This Firm Empowers Employees With Unrestricted Stipends
Truffle Security offers employees an experimental stipend to use for anything they think will help them work better.
Source: biztoc.com
Bug Bounty Radar // The latest bug bounty programs for March 2023
New web targets for the discerning hacker
Adam Bannister Justin Steven Peter Geissler Portswigger Ltd Centre For Cyber Security Belgium Cyber Security Belgium
Source: portswigger.net
Security Bug Hunters Could Expose Your Personal Data
White-hat hackers seeking to identify bugs before the bad guys do need to gather proof of their findings. When that proof includes your personal information, there’s a chance for exposure.
Source: pcmag.com