Rogue external MFA providers can steal passwords during logins
Teaser from the source
Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputer →More on providers
Other advisories
- osv:CVE-2026-82040noneUTMStack < 11.2.16 SSRF via IdentityProviderService
- CVE-2026-81930highApache Airflow Providers: Mehrere Schwachstellen
- osv:CVE-2026-96740noneStreamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providers
- osv:MAL-2026-16427highMalicious code in @wizloft/harness-file-providers (npm)
- osv:MAL-2026-16507highMalicious code in @client-web-next/providers (npm)
- osv:CLEANSTART-2026-FD75876noneKeycloak provides a way to manage identity providers and organizations through its administrative API
- CVE-2026-86792highApache Airflow Providers (FAB, Keycloak, Kafka, Akeyless): Mehrere Schwachstellen
- osv:CVE-2026-92750noneHarness through 3.3.0 Missing Access Control via infraproviders endpoint
Other news entries
- Vulnerabilitybsi-cert-bund-wid2026-09-30Apache Airflow Providers: Mehrere Schwachstellen
- Vulnerabilitybsi-cert-bund-wid2026-09-29Apache Airflow Providers: Mehrere Schwachstellen
- Newstheregister-security2026-09-25Crooks use fake desktop apps to fool HR staff into giving them remote access
- Newsbleepingcomputer2026-09-24OpenAI hacked Australian Medicare govt site, probed data providers
- Newsthehackernews2026-09-23Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
- Newsthehackernews2026-09-22Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
- Newsthehackernews2026-09-22DORA Year Two: Can Your SOC Actually See the Attack?
- Vulnerabilitybsi-cert-bund-wid2026-09-17Apache Airflow Providers (FAB, Keycloak, Kafka, Akeyless): Mehrere Schwachstellen
ID