Critical Golang XML parser bugs can cause SAML authentication bypass
This week, Mattermost, in coordination with Golang has disclosed 3 critical vulnerabilities within Go language’s XML parser. If exploited, these vulnerabilities, also impacting multiple Go-based SAML implementations, can lead to a complete bypass of SAML authentication which powers prominent web applications today. […]
US govt, FireEye breached after SolarWinds supply-chain attack
Trojanized versions of SolarWinds’ Orion IT monitoring and management software have been used in a supply chain attack leading to the breach of government and high-profile companies after attackers deployed a backdoor dubbed SUNBURST or Solorigate. […]
Samsung fixes critical Android bugs in December 2020 updates
This week Samsung has started rolling out Android’s December security updates to mobile devices to patch critical security vulnerabilities in the operating system. This comes after Android had published their December 2020 security updates bulletin, which includes patches for critical bugs. […]
