DEV Community

#identity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Token spraying: 200,000 sign-in attempts and 497 that worked, without a single password
bianliang profile

Token spraying: 200,000 sign-in attempts and 497 that worked, without a single password

#security #identity #bec
Comments
4 min read
Consented applications are the software supply chain nobody audits
stark_zhuang_df5076f35c68 profile

Consented applications are the software supply chain nobody audits

#security #microsoft365 #identity
Comments
3 min read
The Windows LAPS password history is a privilege boundary, and its ACL is the thing to review
andreagomez profile

The Windows LAPS password history is a privilege boundary, and its ACL is the thing to review

#windows #activedirectory #laps #identity
Comments
3 min read
35,111 responses contain the AD FS login path, and 20,623 of them answer on 443
jeffreyciend profile

35,111 responses contain the AD FS login path, and 20,623 of them answer on 443

#zoomeye #exposuremeasurement #identity
1
Comments
3 min read
Break-Glass Accounts: The Ones You Hope You Never Use, Done Properly
alanconlon profile

Break-Glass Accounts: The Ones You Hope You Never Use, Done Properly

#cybersecurity #azure #identity #entraid
Comments
5 min read
Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625
bianliang profile

Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625

#identity #leastprivilege #accesscontrol #arista
Comments
2 min read
1,089,053 LDAP Services: Directory Exposure as a Reconnaissance Surface
facilishz profile

1,089,053 LDAP Services: Directory Exposure as a Reconnaissance Surface

#zoomeye #identity #exposure
Comments
3 min read
The Web Stack You Cannot Ignore in 2026
khriztianmoreno profile

The Web Stack You Cannot Ignore in 2026

#webperf #identity #pwa #ai
Comments
3 min read
Ways to Generate IDs in JavaScript
ragul_kannadasan profile

Ways to Generate IDs in JavaScript

#javascript #identity #react #database
1
Comments
2 min read
MFA Fatigue and Number Matching: Why the Prompt Is the Control
onaeiuspkz profile

MFA Fatigue and Number Matching: Why the Prompt Is the Control

#identity #mfa #mitreattack
Comments
4 min read
DPoP makes a token sender-constrained, which changes what a stolen token is worth
stark_zhuang_df5076f35c68 profile

DPoP makes a token sender-constrained, which changes what a stolen token is worth

#oauth #tokensecurity #dpop #identity
Comments
3 min read
HashiCorp Boundary: 1,637 title matches for an access plane that brokers sessions
bianliang profile

HashiCorp Boundary: 1,637 title matches for an access plane that brokers sessions

#zoomeye #accesscontrol #identity
Comments
2 min read
Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account
serguey_shinder_4ab9b87b1 profile

Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

#sergueyshinder #cybersecurity #identity #hr
Comments
2 min read
She Changed Her Surname and Six of Our Systems Decided She Was Someone New
serguey_shinder_4ab9b87b1 profile

She Changed Her Surname and Six of Our Systems Decided She Was Someone New

#sergueyshinder #data #identity #hr
Comments
2 min read
The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare
onaeiuspkz profile

The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare

#extortion #databreach #healthcare #identity
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.