account takeover

Everything AppSec Scoop has reported about account takeover: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Course-Tencent-Cloud Users Face Critical Account Takeover Due to Unlimited SMS Brute Force in Versions Up to 2.0.1

Unauthenticated attackers can reset accounts in Course-Tencent-Cloud versions up to 2.0.1 by guessing six-digit codes without limit.

Oct 17, 2026

Cloud Security

SaaS Account Takeover Prevention Checklist for Identity Protection

Standard password policies fail to stop account takeover because attackers bypass them using stolen session tokens and compromised third-party authorisation flows.

Oct 14, 2026