CISA, Australia warn of IDOR vulnerabilities after major breaches
The Record published this July 28, 2023 news article on a joint CISA and Australian agency warning about IDOR vulnerabilities that let attackers alter or delete data. BugCrowd CTO Casey Ellis says changing a number in a URL can expose another user's data, and suggests the Optus breach likely prompted the advisory's timing.
Source description, as published
Cybersecurity agencies in the U.S. and Australia warned Thursday of a specific brand of vulnerabilities that allow hackers to change or delete data by using the identities of users allowed to access the information.