Everything SecOps Monitor has reported about Account Takeover: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in Netherman Portal’s password recovery allows attackers to hijack accounts by exploiting distinct error messages and missing rate limits.
A critical flaw in PHPNuxBill allows unauthenticated attackers to guess password reset codes without limits, risking full account takeover for customers.
Attackers bypass perimeter defenses by stealing session tokens and identity assertions, rendering traditional network security controls irrelevant.