A critical security vulnerability has been disclosed in the Open Authorization (OAuth) implementation of the application development framework Expo.io.
The shortcoming, assigned the CVE identifier CVE-2023-28131, has a severity rating of 9.6 on the CVSS scoring system. API security firm Salt Labs said the issue rendered services using the framework susceptible to credential leakage, which could
Related Post
- November 21, 2024
Secret Service Tracking People’s Locations without Warrant
This feels important: The Secret Service has used a technology called Locate X which uses location data harvested from ordinary
- November 21, 2024
Smashing Security podcast #394: Digital arrest scams and
In our latest episode we discuss how a woman hid under the bed after scammers told her she was under
- November 20, 2024
Steve Bellovin’s Retirement Talk
Steve Bellovin is retiring. Here’s his retirement talk, reflecting on his career and what the cybersecurity field needs next.
- November 20, 2024
Ghost Tap: Hackers Exploiting NFCGate to Steal Funds
Threat actors are increasingly banking on a new technique that leverages near-field communication (NFC) to cash out victim’s funds at