FreeIPA Anonymous-to-Admin Chain - Linux Identity
FreeIPA exploit chain gives anonymous users admin access to Linux domains. ChatGPT OAuth exfiltration and autonomous AI credential harvesting raise the bar.
Posts tagged: Oauth
Dropbox Breached via Lenovo SSO - OAuth Trust Chains Fail
Dropbox accounts breached through Lenovo SSO trust-chain flaw. Plus CVE-2026-83548 SonicWall CVSS 10 pre-auth RCE and 153M stolen driver's licenses.
Entra ID CVSS 10.0 RCE - CVE-2026-69836 Exploited
CVE-2026-69836 CVSS 10.0 RCE in Microsoft Entra ID exploited in the wild. Russian APTs abuse OAuth consent flows. Phishing moves inside Slack and Teams.
Password Spraying Surges 155x - Legacy Auth Bypasses MFA
81M password-spray attempts exploit legacy auth protocols that bypass MFA. Plus CVE-2026-65400 macOS auth bypass on CISA KEV and TWINLOOT C2 inside M365.
OAuth Token Theft: Hijacking App Permissions Without Stealing Passwords
OAuth 2.0 attack vectors - device code phishing, open redirects, illicit consent grants - with curl examples, Microsoft Graph detection queries, and defense …