Salt Labs

Salt Labs researchers identified generative AI ecosystems as a new interesting attack vector. vulnerabilities found during this research on ChatGPT ecosystem could have granted access to accounts of users, including GitHub repositories, including 0-click attacks.

It’s extremely important to make sure your OAuth implementation is secure. The fix is just one line of code away. We sincerely hope the information shared in our blog post series will help prevent major online breaches and help web service owners better protect their customers and users.

Salt Security releases its first industry-specific report on API security: the 2023 “State of API Security for Financial Services and Insurance.”

On May 29, 2023, a critical security vulnerability, identified as CVE-2023-34362, was published. Learn the details of this vulnerability, its implications, and recommendations for users to mitigate the risk.

This post details issues identified in a popular framework used by many online services to implement OAuth (as well as other functionality). Salt Labs findings show that services using this framework are susceptible to credentials leakage.

Dada a ampla utilização do OAuth, quaisquer vulnerabilidades encontradas nos seus componentes ou nas suas implementações podem levar a um impacto de segurança considerável nas aplicações e serviços que os utilizam.