Security News

Predictable CSRF tokens in Hak5 WiFi Pineapple firmware lt; 2.3.0 (CVE-2015-4624) (Reddit)
2015-08-14 13:08

Unpatched OS X, iOS flaws allow password, token theft from keychain, apps (Help Net Security)
2015-06-17 14:40

Six researchers from Indiana University Bloomington, Peking University and Georgia Tech have recently published a paper in which they detail the existence of critical security weaknesses in Apple's OS...

XARA Flaws: 0-days allowing to steal (keychain) passwords, tokens, IPC sniffing, etc. in OS X iOS (Reddit)
2015-06-17 12:11

HYPR Token fingerprint reader: Biometric authentication without the insecurity (TechRepublic)
2015-06-16 19:11

MasterCard doles out token service to store-branded cards, e-commerce merchants (ZDNet)
2015-06-15 18:11

Critical Vulnerabilities Affect JSON Web Token Libraries (Threatpost)
2015-04-01 18:58

Critical vulnerabilities exist in several JSON Web Token (JWT) libraries – namely the JavaScript and PHP versions – that could let an attacker bypass the verification step.

Critical vulnerabilities in JSON Web Token libraries (Reddit)
2015-04-01 07:38

CSRF Token Protection Bypass Methods (Reddit)
2015-03-01 02:19

RSA SecurID software token cloning: a new how-to
2012-05-22 06:39

http://arstechnica.com/security/2012/05/rsa-securid-software-token-cloning-attack/ by Dan Goodin Ars Technica May 21 2012