Search: “improper authentication”

54 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 530 Exploit / PoC 261 Ransomware 67 Data breach 49 Advisory 29 Malware 26 Phishing & fraud 14 Industry 11 Policy & legal 10 Threat actor 9 AI safety & security 4 Research 1 AI research 1 Model release 1

SeverityAll critical 673 high 227 medium 89 low 17 info 7

Eight vulnerabilities in Open Automation Software Platform could lead to information disclosure, improper authentication

Cisco TalosSep 6, 16:47 UTC · Sep 6, 2023Vulnerability CVE-2023-35124 CVE-2023-34353 CVE-2023-32271+5 CVEs

35

Vulnerability Spotlight: Multiple vulnerabilities in Schneider Electric Modicon M580

Cisco TalosJun 10, 18:08 UTC · Jun 10, 2019Vulnerability CVE-2018-7846 CVE-2018-7849 CVE-2018-7843+8 CVEs

35

Zyxel fixed tens of flaws in Firewalls, Access Points, and NAS

Security AffairsDec 4, 06:06 UTC · Dec 4, 2023Vulnerability CVE-2023-35136 CVE-2023-35139 CVE-2023-37925+12 CVEs

35

Flaws in the Bosch Drivelog Connector dongle could allow hackers to halt the engine

Security AffairsApr 16, 13:01 UTC · Apr 16, 2017Vulnerability

30

Notepad++ fixed updater bugs that allowed malicious update hijacking

Security AffairsDec 12, 22:16 UTC · Dec 12, 2025Vulnerability

30

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2023Vulnerability

30

Experts found multiple flaws in AudioCodes desk phones and Zoom's Zero Touch Provisioning (ZTP)

Security AffairsAug 14, 17:30 UTC · Aug 14, 2023Vulnerability CVE-2023-22957 CVE-2023-22956 CVE-2023-22955

35

ASUS routers with AiCloud vulnerable to auth bypass exploit

Security AffairsApr 18, 19:26 UTC · Apr 18, 2025Vulnerability CVE-2025-2492

35

QNAP fixed 3 flaws in its NAS devices, including an auth bypass

Security AffairsMar 8, 21:20 UTC · Mar 8, 2024Vulnerability CVE-2024-21899 CVE-2024-21900 CVE-2024-21901

35

Flaws in Medtronic MyCareLink can allow attackers to take over implanted cardiac devices

Security AffairsDec 15, 21:25 UTC · Dec 15, 2020Vulnerability CVE-2020-25183 CVE-2020-25187 CVE-2020-27252

35

Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2022Vulnerability CVE-2019-12255 CVE-2019-12264 CVE-2016-9355+7 CVEs

35

The many vulnerabilities Talos discovered in SOHO and industrial wireless routers post

Cisco TalosAug 2, 12:00 UTC · Aug 2, 2023Vulnerability

30

The emergence of trinity attacks on APIs

Help Net SecurityFeb 2, 00:00 UTC · Feb 2, 2023Vulnerability

30

Palo Alto Networks fixed multiple privilege escalation flaws

Security AffairsJun 14, 09:57 UTC · Jun 14, 2025Vulnerability CVE-2025-4233 CVE-2025-4232 CVE-2025-4231+2 CVEs

35

Swiss BPC banking software SmartVista is vulnerable to SQL Injection attacks

Security AffairsOct 12, 11:24 UTC · Oct 12, 2017Vulnerability

30

WordPress Plugin Facebook Widget affected by Authenticated XSS

Security AffairsJul 29, 20:43 UTC · Jul 29, 2019Vulnerability

30

Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection

Okta patched three flaws in Auth0 AD/LDAP Connector and Access Gateway, including a CVSS 9.0 stored XSS tracked as CVE-2026-85982.

Okta disclosed and patched three vulnerabilities on September 8, 2026 affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. CVE-2026-85982 is a CVSS 9.0 stored XSS in the connector's admin panel caused by improper HTML encoding of directory search results and updater logs; CVE-2026-78626 is a CVSS 8.1 authorization bypass in Access Gateway Protected Rules; CVE-2026-78623 is a CVSS 7.7 SQL injection in advanced-mode datastores via unsanitized SAML assertion attributes. Fixes ship in connector version 8.0.0 and Access Gateway 2026.9.1; no exploitation has been reported.

Cyber Security Newsupdated Sep 11, 09:42 UTC · 5d agofirst Sep 11, 08:13 UTC · 5d agoVulnerability 2 sources CVE-2026-85982 CVE-2026-78626 CVE-2026-786231

45

OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer Protection

Troy HuntNov 28, 00:00 UTC · Nov 28, 2011Vulnerability

30

Medtronic's implantable heart defibrillators vulnerable to hack

Security AffairsMar 22, 20:54 UTC · Mar 22, 2019Vulnerability CVE-2019-6538 CVE-2019-6540

35

Cisco Identifies Multiple Vulnerabilities in Network Time Protocol daemon (ntpd)

Cisco TalosOct 21, 18:26 UTC · Oct 21, 2015Vulnerability CVE-2015-7871 CVE-2015-7849 CVE-2015-7852+5 CVEs

35

Cisco Issues Warning for Unpatched Vulnerabilities in EoL Business Routers

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2023Vulnerability CVE-2023-20025 CVE-2023-20026

35

Serverless security market size to reach $5.1 billion by 2026

Help Net SecurityAug 30, 00:00 UTC · Aug 30, 2021Vulnerability

30

ATM makers fix flaws allowing illegal cash withdrawals

Help Net SecurityAug 21, 00:00 UTC · Aug 21, 2020Vulnerability CVE-2020-9062 CVE-2020-10124 CVE-2020-10125+3 CVEs

35

Exploited: Vulnerability in software for managing Samsung digital displays (CVE-2024-7399)

Help Net SecurityMay 15, 11:26 UTC · May 15, 2025Vulnerability CVE-2024-7399 CVE-2025-4632

35

Zyxel addresses four flaws affecting APs, AP controllers, and firewalls

Security AffairsMay 26, 19:28 UTC · May 26, 2022Vulnerability CVE-2022-26532 CVE-2022-0734 CVE-2022-26531+1 CVEs

35

Cisco ASA is affacted by a privilege escalation flaw. Patch it now!

Security AffairsDec 23, 08:33 UTC · Dec 23, 2018Vulnerability CVE-2018-15465

35

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

The Hacker NewsOct 23, 05:48 UTC · Oct 23, 2024Vulnerability CVE-2024-8260 CVE-2024-43532

35

GitHub's Secret Scanning Feature Now Covers AWS, Microsoft, Google, and Slack

The Hacker NewsOct 6, 09:19 UTC · Oct 6, 2023Vulnerability

30

Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet

Security AffairsJun 25, 19:20 UTC · Jun 25, 2026Vulnerability CVE-2026-8932 CVE-2026-8926 CVE-2026-8925+3 CVEs

35

Whatsup Gold, Observium and Offis vulnerabilities

Cisco TalosJan 29, 16:45 UTC · Jan 29, 2025Vulnerability CVE-2024-47140 CVE-2024-47002 CVE-2024-45061+7 CVEs

35

Action1 RMM platform updates empower IT teams to secure their remote and hybrid workforce

Help Net SecurityDec 9, 00:00 UTC · Dec 9, 2021Vulnerability

30

Examining security process maturity in 400 organizations

Help Net SecurityOct 30, 00:00 UTC · Oct 30, 2019Vulnerability

30

Phillips clinical imaging solution plagued by vulnerabilities

Help Net SecurityFeb 28, 00:00 UTC · Feb 28, 2018Vulnerability

30

WordPress ASE Plugin Vulnerability Threatens Site Security

Infosecurity MagazineFeb 6, 16:30 UTC · Feb 6, 2025Vulnerability CVE-2025-24648 CVE-2024-43333

35

Product Walkthrough: Securing Microsoft Copilot with Reco

The Hacker NewsJul 9, 15:37 UTC · Jul 9, 2026Vulnerability1

30

GitHub Desktop Vulnerability Risks Credential Leaks via Malicious Remote URLs

The Hacker NewsJan 28, 03:11 UTC · Jan 28, 2025Vulnerability CVE-2025-23040 CVE-2024-50338 CVE-2024-53263+4 CVEs

35

Analyzing the security properties of a ZKTeco biometric terminal

Kaspersky SecurelistJun 11, 08:00 UTC · Jun 11, 2024Vulnerability CVE-2023-3938 CVE-2023-3939 CVE-2023-3940+3 CVEs

35

Zyxel warns of vulnerabilities in a wide range of its products

Ars Technica · SecuritySep 4, 18:57 UTC · Sep 4, 2024Vulnerability CVE-2024-7261 CVE-2024-6343 CVE-2024-7203+1 CVEs

35

Using Cisco Webex for your video conferencing needs? Go patch!

Help Net SecurityJun 18, 00:00 UTC · Jun 18, 2020Vulnerability CVE-2020-3361 CVE-2020-3263 CVE-2020-3342+1 CVEs

35

Germany hands Vodafone $51 million fine over data privacy violations

The RecordJun 3, 19:08 UTC · Jun 3, 2025Vulnerability

30