Latest posts tagged with #Oauth on Bluesky
Bearer tokens can be replayed.
Quarkus 3.32 introduces DPoPNonceProvider so you can enforce single-use nonces and stop replay attacks in your Java APIs.
I built the full challenge-response flow with Keycloak + Dev Services.
Here’s the guide:
buff.ly/mZX26pw
#Quarkus #Java #Security #OAuth
Now you can implement Just-In-Time #Authorization in #Claude #Code with Human-in-the-Loop (#HITL) #MCP #Elicitation
Demoing our implementation based #open #standards, where #OAuth native authz occurs real time, producing a cryptographic proof bound to that operation
www.linkedin.com/posts/embeso...
Cyber attackers are exploiting OAuth's Device Code Flow to hijack Microsoft 365 accounts without stealing passwords. Stay vigilant and implement robust security measures. #CyberSecurity #Phishing #OAuth Link: thedailytechfeed.com/phishing-att...
Error message from Claude Code when I didn't manage to copy the OAuth URL to another machine, paste it into my browser, get the response from their (very slow) server, copy that back to the first machine and paste it back into the session in under 15 seconds. Login OAuth error: timeout of 1500@ms exceeded
I hate it when people thing OAuth is the only way to do things. Fine, it you are a web app running in a browser and using a third party service where your users don't want to let you see their credentials.
But, for a first party CLI app, perhaps making me […]
[Original post on mastodon.social]
Spring forward—your “AI coworker” will happily approve-to-exfil. Watch NEW OAuth trust events + device-code logins; endpoint IOCs are for nostalgic people. 🔥🕵️
#AlphaHunt #CyberSecurity #AI #OAuth
DPoP: What It Is, How It Works, and Why Bearer Tokens Aren’t Enough
#bearer #cryptography #dpop #java #oauth #security #token
foojay.io/today/dpop-wh...
Working implementation 🚀 of Just-In-Time (#JIT) #Authorization for #AI #Agents
Our pattern, MCP-Native Authorization (MCP-NA), combines #OAuth 2.0 first-party interactive flows with #MCP #elicitation metadata to enable AI agents to orchestrate Human-In-The-Loop (#HITL) steps
Copilot MCP App demo👇
Bearer tokens have a security problem - they can be stolen and replayed. DPoP offers a better approach by binding tokens to cryptographic keys. Hüseyin Akdoğan explains how it works and why you should care.
foojay.io/today/dpop-w...
#security #oauth #java
Blogged: Invite Guest users in a Entra ID Multi-tenant setup
damienbod.com/2026/03/09/i...
#graph #entra #mau #identity #iam #entraid #oauth #openidconnect #oidc #security
LaraFoundry supports 3 OAuth providers out of the box:
Google, Facebook, Twitter.
One controller. One callback. Remember me works across all of them.
No Auth0. No Firebase. Pure Laravel Socialite.
#LaraFoundry #Laravel #OAuth #SaaS
Telegram-бот вместо Excel-рутины: как я автоматизировал рутину с помощью Python Как я заменил Excel-сводные на Telegram-бота ...
#python #telegrambot #google #sheets #api #oauth #yandex #disk #pandas #etl #devops
Origin | Interest | Match
OAuth redirect abuse in Entra ID is worth watching.
New post with 4 Sentinel detections, hunting queries, and hardening steps:
nineliveszerotrust.com/blog/oauth-r...
#EntraID #OAuth #MicrosoftSentinel
DEEP RESEARCH: Who’s Most Likely to Abuse MCP Integrations? #UNC3944, #TraderTraitor, #UNC6293 ?
MCP-era risk isn’t exploits—it’s authorized tool/integration abuse (OAuth consent, device codes, app passwords). We ranked who’s best positioned..
#AlphaHunt #OAuth #MCP
📰 Microsoft: Peretas Manfaatkan Alur Error OAuth untuk Sebarkan Malware
👉 Baca artikel lengkap di sini: ahmandonk.com/2026/03/05/penyalahgunaa...
#keamananSiber #malware #microsoft #oauth #phishing
Your “AI coworker” didn’t hack you—someone got it to hit “Approve” 🙃 New OAuth trust events + device-code logins = silent SaaS loot. 🔥
Read the telltales + subscribe: blog.alphahunt.io/if-your-ai-c...
#AlphaHunt #CyberSecurity #OAuth #AI
#Microsoft: Hackers abuse #OAuth error flows to spread #malware
www.bleepingcomputer.com/news/security/microsoft-...
#cybersecurity
SIGNALS WEEKLY:
Cisco Catalyst SD-WAN Exploitation + OAuth Redirect Abuse + Prompt Injection Observed in the Wild
blog.alphahunt.io/signals-week...
#AlphaHunt #SDWAN #OAuth #AISecurity #ThreatIntel
Microsoft warns of a new phishing attack exploiting OAuth in Entra ID to evade detection. Stay vigilant and implement recommended security measures. #CyberSecurity #Phishing #OAuth #EntraID Link: thedailytechfeed.com/microsoft-di...
Microsoft warns of sophisticated phishing campaigns exploiting OAuth redirection to target government entities. Stay vigilant and review app permissions. #CyberSecurity #Phishing #OAuth Link: thedailytechfeed.com/microsoft-wa...
Агентность на практике: Codex CLI и российский AI-ландшафт После знакомства с Codex CLI от OpenAI я решил провести практ...
#LLM #агентные #системы #Codex #CLI #Responses #API #OAuth #tool #API #reasoning
Origin | Interest | Match
OAuth détourné pour contourner filtres anti-phishing et #MFA : les attaques visent désormais les mécanismes d’authentification eux-mêmes.. #Cybersécurité #OAuth
This research by Microsoft is:
1) timely and actionable vulnerability analysis
2) the most Microsoft vulnerability chain I've ever seen, I swear to holy hell.
thehackernews.com/2026/03/microsoft-warns-...
#microsoft #oauth
"Building Secure Token-Based Authentication with AWS and OmniToken" by Kalyana Krishna Kondapalli
#ai #authentication #authorization #oauth #aws-api
Should you add rate limiting to your Duende IdentityServer deployment? 🤔
Our new article breaks down the why (and why not), plus 3 implementation options.
Read the full article 👉 duende.link/87wrkjh
#dotnet #ASPNETCore #OAuth #OpenIDConnect
Il link sembrava serio. OAuth ha detto: “Ops, errore!” e ti ha spedito dal truffatore
📌 Link all'articolo : www.redhotcyber.com/post/qua...
#redhotcyber #news #cybersecurity #hacking #malware #phishing #oauth #microsoft #google #sicurezzainformatica
Threat actors weaponize OAuth redirection logic to deliver malware
📖 Read more:
www.helpnetsecurity.com/2026/03/03/a...
#CyberSecurity #CyberSecurityNews #OAuth
Microsoft warns of OAuth redirect abuse hitting government networks.
Attackers hijack redirect URIs, use EvilProxy AiTM phishing, steal session tokens & bypass MFA.
Identity governance is critical.
Have you audited your OAuth apps lately?
#CyberSecurity #OAuth #ZeroTrust
In LaraFoundry, a single OAuth callback does 5 things:
1. Create/update user
2. Auto-verify email
3. Pull Gravatar or generate avatar
4. Record session + device info
5. Auto-accept team invitations
All via Laravel Socialite. Zero manual wiring.
#Laravel #OAuth #PHP
Ever wonder what’s actually happening when you log into a site with your Gmail, Facebook, Apple, or Microsoft account?
It’s called OAuth. Here’s how it works — and whether it’s safe.
#Android #Apple #Bluesky #Community #Cyber #Facebook #Google #Internet #iPhone #Microsoft #OAuth #Samsung #Security
Your “AI coworker” won’t pop calc.exe. It’ll sweet-talk you into an OAuth consent grant, then quietly API-drain SaaS. First clue? New trust event. 🤖☠️
Get the tripwires (device-code + token telemetry) + subscribe: blog.alphahunt.io/if-your-ai-c...
#AlphaHunt #CyberSecurity #AI #OAuth
