Network Security News Summary for Monday October 23th, 2023
SANS Internet Storm Center's Daily Network Security News Podcast · Johannes B. Ullrich
October 22, 20236m 40s
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Base64Dump; OAUTH Redirect; Okta Breach; VMWare and Solarwinds Patches base64dump.py Handles More Encodings Than Just BASE64 https://isc.sans.edu/diary/base64dump.py%20Handles%20More%20Encodings%20Than%20Just%20BASE64/30332 Stealing OAuth Tokens via Open Redirects https://eval.blog/research/microsoft-account-token-leaks-in-harvest/ VMWare Patches https://www.vmware.com/security/advisories.html Solarwinds Patches https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm keywords: solarwinds, vmware, oauth, microsoft, harvest, oauth, base64