Subscribe to the Salt blog

Privacy Policy

Subscribe to our blog.

Subscribe Now
Posts  by

Aviad Carmel

Security Researcher
Subscribe to Salt blog

Security Flaws within ChatGPT Ecosystem Allowed Access to Accounts On Third-Party Websites and Sensitive Data

Salt Labs researchers identified generative AI ecosystems as a new interesting attack vector. vulnerabilities found during this research on ChatGPT ecosystem could have granted access to accounts of users, including GitHub repositories, including 0-click attacks.

Aviad Carmel
March 13, 2024

Oh-Auth - Abusing OAuth to take over millions of accounts

It’s extremely important to make sure your OAuth implementation is secure. The fix is just one line of code away. We sincerely hope the information shared in our blog post series will help prevent major online breaches and help web service owners better protect their customers and users.

Aviad Carmel
October 24, 2023

Salt Labs exposes a new vulnerability in popular OAuth framework, used in hundreds of online services

This post details issues identified in a popular framework used by many online services to implement OAuth (as well as other functionality). Salt Labs findings show that services using this framework are susceptible to credentials leakage.

Aviad Carmel
May 24, 2023

Traveling with OAuth - Account Takeover on Booking.com

Given the widespread usage of OAuth, any vulnerabilities found in its components or their implementations may lead to considerable security impact in the applications and services using them.

Aviad Carmel
March 2, 2023

Tags

API Attack Analysis
API Attack Methodology
API Attack Prevention
API Posture Governance
API Security 101
API Security Strategy
API Vulnerability Analysis
Awards
CISO
Company Updates
Compliance
Customers
Events
Financial Services
Insurance
OWASP API Top 10
Product Updates
Research
Salt Labs
Technology Partners
Video
Webinar
eBook

More Posts Authors

Clear filters