Broken Authentication in Microservices and Service-to-Service APIs
Microservices multiply authentication attack surfaces, and most teams aren't securing them.
Tariq Osei-Mensah
Section
Authentication Flaws
5 stories in Authentication Flaws.
Password Reset Flow Vulnerabilities in SaaS Applications
How attackers exploit weak password reset flows to bypass MFA and take over accounts.
Svetlana Prochazka
Multi-Factor Authentication Bypass Techniques
Attackers now steal session tokens instead of breaking past MFA itself.
Svetlana Prochazka
OAuth 2.0 Misconfiguration in SaaS Authorization Flows
Non-expiring tokens and redirect flaws leave millions exposed to account takeover.
Tariq Osei-Mensah
JWT Algorithm Confusion Attacks in Production APIs
Attackers can choose how your API verifies tokens by controlling unverified header fields.
Svetlana Prochazka