Over 80% of security incidents stem from browser-based apps, with Scattered Spider exploiting sessions and APIs.

watchTowr Labs researcher Piotr Bazydlo said the newly uncovered bugs could be fashioned into an exploit chain by bringing together the pre-auth HTML cache poisoning vulnerability with a ...