Results for "Account takeover"

• Article

  How Broken Access Controls in Cal.com Leaked Millions of Bookings and Enabled Complete Account Takeover

  Gecko’s AI security engineer discovered critical chained vulnerabilities in Cal.com Cloud that allowed complete account takeover and exposed all booking data.

  26 January 2026
• Article

  n8n Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints

  Authorization bypass in n8n’s dynamic-credentials OAuth endpoints allows any authenticated user to operate on another user’s OAuth credential by supplying its I…

  13 May 2026
• Article

  Best AI-Powered Application Security Testing Tools

  Compare the best AI-powered application security testing tools. Find which tools detect business logic flaws and broken access control.

  14 April 2026
• Article

  Gecko Security vs ZeroPath: Which Is Better?

  Gecko Security vs ZeroPath, compared. See which SAST tool finds authorization bugs, handles microservices, and reduces false positives better.

  10 April 2026