FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity

May 15, 2024 at 02:51PM Law enforcement agencies, including the FBI and international partners, have seized control of the BreachForums website and its associated Telegram channel, known for illicit activity such as selling stolen data. The administrators of the forum, including Baphomet and ShinyHunters, are under FBI control, and the public is encouraged to report … Read more

‘Log in with…’ Feature Allows Full Online Account Takeover for Millions

October 24, 2023 at 08:05AM Flaws in the OAuth standard implementation across Grammarly, Vidio, and Bukalapak may have allowed attackers to take over user accounts and engage in fraudulent activities. The Salt Labs researchers discovered API misconfigurations, which could potentially affect other compromised sites. This issue, referred to as a “Pass-The-Token” flaw, allows attackers to … Read more