Tag: workflow automation
3 articles
n8n Flaw Exposes User Accounts to Unauthorized Login via Token Exchange
A security flaw in n8n's workflow automation platform allowed unauthorized users to log in to accounts due to a token exchange mishap, essentially handing out the wrong accounts at login. This vulnerability stemmed from a misimplementation of the Enterprise token exchange feature.
CISOs Tackle AI-Driven Code Sprawl
The line, "I spent the weekend burning through Claude tokens," set the tone for a discussion on the risks and opportunities of AI-driven code sprawl, a pressing concern for CISOs. How can security leaders maintain control when AI puts code-writing capabilities in every employee's hands?
Zapier Fixes Bug Chain That Exposed Millions to Account Takeover Risk
A security firm recently uncovered a chain of five weaknesses in popular workflow automation service Zapier that could have put millions of users at risk of account takeover - and thankfully, the issue has now been fixed. The vulnerabilities were surprisingly easy to exploit, requiring only a free Zapier account to potentially gain unauthorized access to user accounts.