Topic

SSO and identity security

Attacks and defences around single sign-on, OAuth grants and connected third-party integrations, where a trusted login relationship can extend the reach of one compromised service.

Current clusters

build1 publisher

Hacktron chained a libheif bug on OpenAI's forum into internal GitHub repositories

Hacktron's report puts the vulnerable code in libheif, two dependency steps below an ImageMagick call on OpenAI's Discourse forum, and says the upstream fix never went through the usual security advisory process.

Publishers:dev.to

Reality

Evidence38
Adoption28
Hype gap+15
Incentives55
Confidence42