Eaton Z. (@XeEaton) / X

Eaton Z.
@XeEaton
Aug 24
Happy Monday! "Tata to your OTP" is what you might say after you check out today's security disclosure involving @Tatanexarc! There was a vulnerability where they were sending back your OTP in the login API response, making account takeover easy. Check it out 👇
1
Eaton Z.
@XeEaton
Jul 27
My next automotive hack is here! This time I set my sights on @ETBIndia and their My Eicher fleet management platform. This is another example of how insecure APIs can be used to compromise an entire platform and gain control over hundreds of thousands of vehicles.
1
Eaton Z.
@XeEaton
Jul 16
Oh @postmarkapp, what has happened to your customer service? My ticket that I pleaded multiple times for urgency in has not received any updates for 1 week now. This is quite disappointing!
1
Eaton Z.
@XeEaton
Jul 8
A fancy, high-tech AI coal mine security camera network powered by plaintext passwords. What could go wrong? Check out today's vulnerability disclosure 👇
1
Eaton Z.
@XeEaton
Jun 24
My latest vulnerability disclosure impacts 2 wildly different Johnson & Johnson web apps! Read all about it 👇
1