authentication-bypass

2 articles · newest first

Check Point SmartConsole security management interface on a monitor

Check Point sells firewalls for a living. hackers got admin on it before there was a patch

A broken identity check let attackers skip the login screen entirely — and Check Point found out because someone was already inside.

Priya Nair · Aug 1 · 6 min

Lines of code on a dark screen representing a security vulnerability

Software

there's a second WordPress bug this month — and this one has no patch, just a plugin you need to switch off tonight

While everyone patched the wp2shell core flaw, a 9.8-rated hole in a popular login plugin quietly went public with no fix available. If you run miniOrange's OAuth SSO, updating WordPress didn't save you.

Priya Nair · Jul 22 · 7 min