Cybersecurity articles tagged #Session Hijacking on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/zimbra-classic-web-client-stored-xss-leads-to-session-hijackinghttps://runtimerebel.com/blog/zimbra-classic-web-client-stored-xss-leads-to-session-hijackingZimbra warns of a critical stored XSS vulnerability in the Classic Web Client allowing attackers to execute malicious code via crafted emails.Sat, 11 Jul 2026 09:39:05 GMTZimbraStored XssWebmail SecuritySession Hijackinghttps://runtimerebel.com/blog/mongobleed-unauthenticated-credential-theft-via-server-memoryhttps://runtimerebel.com/blog/mongobleed-unauthenticated-credential-theft-via-server-memoryAnalysis of MongoBleed, a critical vulnerability enabling unauthenticated credential and session token extraction from server memory, highlighting attack surface…Wed, 17 Jun 2026 13:27:52 GMTMongoBleedAttack Surface ManagementCredential TheftSession HijackingUnauthenticated AccessMemory DisclosureMongoDBhttps://runtimerebel.com/blog/google-chrome-dbsc-preventing-account-takeover-via-cookie-thefthttps://runtimerebel.com/blog/google-chrome-dbsc-preventing-account-takeover-via-cookie-theftGoogle Chrome rolls out Device Bound Session Credentials (DBSC) to protect users from session hijacking by cryptographically binding cookies to hardware.Fri, 29 May 2026 13:17:47 GMTGoogle ChromeDBSCSession HijackingIdentity TheftTPMhttps://runtimerebel.com/blog/cve-2021-22291-abb-eibport-v3-3-9-2-session-hijacking-vulnerabilityhttps://runtimerebel.com/blog/cve-2021-22291-abb-eibport-v3-3-9-2-session-hijacking-vulnerabilityABB EIBPORT V3 devices are vulnerable to CVE-2021-22291 (XSS/session hijacking), allowing unauthenticated access and configuration changes. Patch immediately.Thu, 28 May 2026 17:27:09 GMTCVE-2021-22291ABB EIBPORTXSSSession HijackingICSBuilding AutomationCritical Manufacturinghttps://runtimerebel.com/blog/italy-dismantles-cinemagoal-app-for-streaming-auth-token-thefthttps://runtimerebel.com/blog/italy-dismantles-cinemagoal-app-for-streaming-auth-token-theftItalian authorities dismantled the CINEMAGOAL piracy app, which harvested authentication tokens and session cookies from users to access streaming services.Sat, 23 May 2026 16:25:53 GMTCINEMAGOALPiracySession HijackingAuthentication TheftItalyhttps://runtimerebel.com/blog/zero-trust-why-device-security-is-essential-beyond-identityhttps://runtimerebel.com/blog/zero-trust-why-device-security-is-essential-beyond-identityIdentity-only security fails against stolen tokens and compromised devices. Learn why robust device security is critical for effective Zero Trust strategies.Wed, 20 May 2026 17:12:24 GMTZero TrustDevice SecurityIdentity and Access ManagementSession HijackingEndpoint Securityhttps://runtimerebel.com/blog/aitm-phishing-attacks-target-us-organizations-with-conduct-reportshttps://runtimerebel.com/blog/aitm-phishing-attacks-target-us-organizations-with-conduct-reportsMicrosoft warns of a sophisticated AitM phishing campaign using fake conduct reports to bypass MFA and hijack Microsoft 365 user sessions.Tue, 05 May 2026 16:40:58 GMTPhishingAitMMicrosoft 365Session HijackingCredential Thefthttps://runtimerebel.com/blog/telegram-tdata-credential-harvesting-risks-and-mitigation-strategieshttps://runtimerebel.com/blog/telegram-tdata-credential-harvesting-risks-and-mitigation-strategiesLearn how threat actors exploit Telegram Desktop tdata folders for session hijacking and credential harvesting, bypassing multi-factor authentication.Wed, 22 Apr 2026 08:47:07 GMTTelegram DesktopCredential HarvestingTdata ExploitationSession Hijackinghttps://runtimerebel.com/blog/oauth-token-hijacking-in-ai-tools-vercel-breach-analysishttps://runtimerebel.com/blog/oauth-token-hijacking-in-ai-tools-vercel-breach-analysisAn investigation into how stolen OAuth tokens from a Vercel employee's AI tool session led to unauthorized internal access and the risks of AI integration.Tue, 21 Apr 2026 05:03:55 GMTOAuthVercelAI SecuritySession HijackingToken Thefthttps://runtimerebel.com/blog/storm-infostealer-bypassing-local-decryption-for-session-hijackinghttps://runtimerebel.com/blog/storm-infostealer-bypassing-local-decryption-for-session-hijackingStorm infostealer exfiltrates encrypted browser data for server-side decryption, allowing attackers to bypass MFA and hijack active user sessions.Mon, 13 Apr 2026 16:33:45 GMTStormInfostealerSession HijackingCredential TheftVaronishttps://runtimerebel.com/blog/chrome-dbsc-securing-session-cookies-with-device-binding-analysishttps://runtimerebel.com/blog/chrome-dbsc-securing-session-cookies-with-device-binding-analysisGoogle introduces Device Bound Session Credentials in Chrome to combat session hijacking by cryptographically linking authentication cookies to local hardware.Fri, 10 Apr 2026 08:38:17 GMTGoogle ChromeDBSCSession HijackingCookie TheftInfostealerhttps://runtimerebel.com/blog/google-chrome-146-dbsc-implementation-hardens-windows-against-session-hijackinghttps://runtimerebel.com/blog/google-chrome-146-dbsc-implementation-hardens-windows-against-session-hijackingGoogle releases Device Bound Session Credentials (DBSC) in Chrome 146 for Windows to mitigate cookie theft and session hijacking via hardware-backed security.Fri, 10 Apr 2026 08:37:21 GMTGoogle ChromeDBSCSession HijackingCookie TheftTPMWindows Securityhttps://runtimerebel.com/blog/identity-based-attacks-why-breach-monitoring-fails-to-stop-infostealershttps://runtimerebel.com/blog/identity-based-attacks-why-breach-monitoring-fails-to-stop-infostealersInfostealers are bypassing MFA by harvesting session cookies. Learn why traditional breach monitoring is insufficient and how to secure identity perimeters.Mon, 06 Apr 2026 16:21:46 GMTInfostealersSession HijackingCredential HarvestingMFA Bypasshttps://runtimerebel.com/blog/beyond-mfa-bridging-the-zero-trust-gap-in-session-securityhttps://runtimerebel.com/blog/beyond-mfa-bridging-the-zero-trust-gap-in-session-securityAuthentication alone does not equate to trust. Discover how session token hijacking bypasses MFA and why device health is critical for Zero Trust.Tue, 24 Mar 2026 16:29:03 GMTZero TrustMFA BypassSession HijackingIdentity SecurityDevice Trusthttps://runtimerebel.com/blog/cve-2023-4966-critical-citrix-netscaler-memory-leak-patching-guidehttps://runtimerebel.com/blog/cve-2023-4966-critical-citrix-netscaler-memory-leak-patching-guideCritical unauthenticated memory leak in Citrix NetScaler ADC and Gateway allows session hijacking. Learn to mitigate CVE-2023-4966 and secure your network.Tue, 24 Mar 2026 12:25:18 GMTCVE-2023-4966CitrixNetScalerSession HijackingCitrix Bleedhttps://runtimerebel.com/blog/2025-identity-threat-report-analyzing-the-infostealer-economyhttps://runtimerebel.com/blog/2025-identity-threat-report-analyzing-the-infostealer-economyRecorded Future's 2025 Identity Threat Landscape Report examines how infostealer malware and session cookie theft drive the modern credential threat economy.Mon, 16 Mar 2026 16:31:44 GMTInfostealerCredential TheftSession HijackingRecorded FutureMFA Bypasshttps://runtimerebel.com/blog/google-gemini-side-panel-bug-enables-session-hijacking-update-nowhttps://runtimerebel.com/blog/google-gemini-side-panel-bug-enables-session-hijacking-update-nowResearchers discovered a security flaw in the Google Gemini side panel that allows for unauthorized session hijacking and cross-origin data exfiltration.Mon, 02 Mar 2026 16:20:11 GMTGoogle GeminiChrome SecuritySession HijackingHiddenlayerAi Vulnerabilityhttps://runtimerebel.com/blog/token-theft-and-session-hijacking-mitigating-device-trust-failureshttps://runtimerebel.com/blog/token-theft-and-session-hijacking-mitigating-device-trust-failuresAn analysis of post-authentication attack vectors involving token theft and the technical requirement for continuous device posture verification within Zero Trust…Mon, 23 Feb 2026 16:23:45 GMTToken TheftSession HijackingZero TrustEndpoint Security