Back Issues/Search Home → Archive → Popular →

Rapid7 — Archive · Vol 330 Issue 1

2 articles that week

Rapid7, Thursday, September 4th, 2025

InsightAppSec: Time-based One-Time Passwords, MFA Automation Using Macros

Vol 330 · Issue 1 · 2025-09-04

Automated security scanners can be stopped in their tracks by Multi-Factor Authentication (MFA). While this is great for security, it poses a challenge for scanning. Luckily, Rapid7's InsightAppSec makes it easy to handle Time-based One-Time Passwords (TOTP), a six-digit code that refreshes every 30 seconds.

more →

Rapid7, Wednesday, September 3rd, 2025

Safeguarding Salesforce: What You Need to Know About the OAuth Token Compromise

Vol 330 · Issue 1 · 2025-09-03

Google Cloud Threat Intelligence recently reported a data theft campaign targeting Salesforce customers through compromised OAuth tokens. In this case, attackers stole Salesforce OAuth and refresh tokens from a third-party integration (Salesloft Drift) and used them to access and exfiltrate sensitive data including AWS access keys, passwords, and Snowflake tokens.

more →