Authentication Bypass

Everything tagged Authentication Bypass.

2 stories, newest first.

Latest

Jul 12, 2026Cybersecurity

ServiceNow's requires_authentication=false: The One Boolean That Exposed Enterprise Data Worldwide

ServiceNow shipped a REST endpoint with authentication disabled. Attackers queried customer data without credentials. The company knew since April.

Read the article

Jun 9, 2026Cybersecurity

Palo Alto GlobalProtect VPN Auth Bypass: When Your Security Vendor's Cookies Become the Attack Vector

Attackers are forging authentication cookies to bypass Palo Alto GlobalProtect VPN logins. CISA KEV listed, Rapid7 confirms active exploitation since May 17.