Your Cart Is Empty
✖No products in the cart.
When it comes to guarding the online gates, even the best wordsmiths, streaming sites, and e-commerce platforms can have their flubs. Take Grammarly, Vidio, and Bukalapak. Their Open Authorization (OAuth) – a secure protocol for allowing applications to speak to each other – was found to have major cracks. You might think network security would be a no-brainer for such giants, but sometimes the brain does take a hiatus.
These flaws were uncovered and patched between February and April 2023 after responsible disclosure processes. As simple as upgrading your device’s software – and about as thrilling as watching paint dry – but it’s crucial in ensuring these platforms are less like Swiss cheese and more like Fort Knox.
So, what was the potential damage in the hands of malicious actors? Well, imagine giving your house keys to the neighborhood cat burglar – it ain’t pretty. These vulnerabilities could have granted unauthorized access to affected accounts.
Thankfully, these companies acted swiftly and responsibly to patch the issues. However, it’s like finding out your favorite superhero has fallen off the diet wagon – a little disappointing, yet somewhat understandable given the complexity of maintaining unfailing security.
Major security flaws were discovered in popular online services including Grammarly, Vidio, and Bukalapak’s OAuth implementations, potentially allowing malicious actors to gain unauthorized access. Thankfully, they’re now more secure than a paranoid squirrel hiding his nuts for winter, as the companies acted responsibly and patched the issues between February and April of 2023.
Original Article: https://thehackernews.com/2023/10/critical-oauth-flaws-uncovered-in.html
No products in the cart.