Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account.Read More ...

Continue Reading
CVE-2023-24428

A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account.Read More ...

Continue Reading
CVE-2023-24427

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.Read More ...

Continue Reading
2023 identity security trends and solutions from Microsoft

Welcome to 2023! I wanted to kick this year off by having a quick look at the trends in [identity security](), what you can do about it, and what Microsoft is doing to help you. One of the things we t ...

Continue Reading
2023 identity security trends and solutions from Microsoft

Welcome to 2023! I wanted to kick this year off by having a quick look at the trends in [identity security](), what you can do about it, and what Microsoft is doing to help you. One of the things we t ...

Continue Reading
Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.7 Multiple Vulnerabilities (CloudBees Security Advisory 2023-01-24)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.7. It is, therefore, affected by multiple vulnerabilities including the f ...

Continue Reading
A week in security (January 16—22)

Last week on Malwarebytes Labs: * [Google to support the use of Rust in Chromium]() * [Law enforcement app SweepWizard leaks data on crime suspects]() * [Accountant ordered to pay ex-employer af ...

Continue Reading
CircleCI: Malware stole GitHub OAuth keys, bypassing 2FA

Software development service company CircleCI has published its [incident report]() on a breach that happened in December. CircleCI revealed an engineer's laptop was successfully infected with a yet-t ...

Continue Reading

Back to Main

Subscribe for the latest news: