Skip to content
Threat Feed
Subscribe

Tag

Account_takeover

4 briefs RSS
medium advisory

Ech0 OAuth Redirect URI Validation Bypass Vulnerability

Ech0's OAuth redirect URI validation ignores the path component, allowing attackers to craft malicious redirect URIs for exchange-code theft and potential account takeover.

github.com/lin-snow/Ech0 oauth redirect_bypass account_takeover web_application
2r 1t
high advisory

AWS Virtual MFA Device Registration Attempt

An adversary attempts to register a virtual MFA device to an AWS account, potentially leading to account takeover and unauthorized access to resources.

AWS Identity and Access Management aws persistence mfa account_takeover
2r 1t
high advisory

Okta Successful Login After Credential Attack

Detection of successful Okta logins following a potential credential compromise, indicating successful account takeover.

Okta Identity and Access Management okta credential_access account_takeover
2r 1t
high advisory

Okta API Token Creation Detection

Detection of new Okta API token creation, potentially indicating account compromise or unauthorized access leading to persistence and administrative control.

Okta Identity Cloud okta api_token account_takeover persistence
2r 1t