idp – PossibleThreat Articles

MalwareBytes Security

Microsoft Azure AD flaw can lead to account takeover

June 23, 2023 0 Comments Azure, Exploits and vulnerabilities, idp, login with, Microsoft, news, noauth, oauth

Categories: Exploits and vulnerabilities

Categories: News

Tags: OAuth

Tags: nOAuth

Tags: IdP

Tags: Azure

Tags: Microsoft

Tags: login with

Researchers have found a flaw in Microsoft Azure AD which they claim can be used to take over accounts that rely on pre-established trust.

(Read more…)

The post Microsoft Azure AD flaw can lead to account takeover appeared first on Malwarebytes Labs.

MalwareBytes Security

Hackers can take over accounts you haven’t even created yet

June 7, 2022 0 Comments account takeover, andrew paverd, avinash sudhodanan, cfm, classic-federated merge, Hacking, identity provider, idp, Microsoft, non-verifying identity provider, nv, pre-hijacking attack, single sign-on, sso, tid, trojan identifier, uec, unexpired email change, unexpired session

Credit to Author: Jovi Umawing| Date: Tue, 07 Jun 2022 15:50:10 +0000

It’s called pre-hijacking, and it’s a new class of attack against online accounts.

The post Hackers can take over accounts you haven’t even created yet appeared first on Malwarebytes Labs.