ZDNet

Critical CSRF vulnerability found on Glassdoor company review platform

Glassdoor, a website for job hunting and posting anonymous company reviews, has resolved a critical issue that could be exploited to take over accounts. Bug bounty researcher "Tabahi" (ta8ahi) found ...
latesthackingnews.com

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

A practitioner's breakdown of the CSRF attack: how the forged request works, two documented exploits, a manual test, and the ...
Bleeping Computer

TikTok fixes bugs allowing account takeover with one click

TikTok has addressed two vulnerabilities that could have allowed attackers to take over accounts with a single click when chained together for users who signed-up via third-party apps. The social ...
Threat Post

Tencent Ups Top Bug-Bounty Award to $15K

The Chinese ISP has expanded its program via HackerOne. The Tencent Security Response Center (TSRC) is launching an expanded bug-bounty program, via the HackerOne white-hat platform – and the company ...
ZDNet

TikTok patches reflected XSS bug, one-click account takeover exploit

TikTok has patched a reflected XSS security flaw and a bug leading to account takeover impacting the firm's web domain. Reported via the bug bounty platform HackerOne by researcher Muhammed "milly" ...