Vulnerabilities
Patch Better Auth to 1.7.7 to Stop OAuth Account Takeover
Attackers can forge encrypted profiles in vulnerable Better Auth versions to hijack user accounts via the OAuth Proxy plugin without credentials.
Authentication Bypass
Everything Malware Chronicle has reported about Authentication Bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Update Neo4j GraphQL to 7.6.4 to Block Unauthenticated Cypher Access in Critical Vulnerability
Developers using @neo4j/graphql must update to version 7.6.4 immediately to stop unauthenticated access to protected Cypher fields.