GoKawiil - Tech News

31.

Pact: Anonymous Credentials for the Web (news.ycombinator.com)

2026-06-23 | get Yubico YubiKey 5 NFC → | tags: pact, anonymous credentials, distillation

32.

FortiBleed Attackers Turn Firewalls Into Credentials Stealers as Heist Persists (darkreading.com)

2026-06-23 | get Fortinet Firewall Security Badge → | tags: fortigate, fortibleed, golang

33.

FortiBleed campaign used custom FortiGate sniffer to steal credentials (bleepingcomputer.com)

2026-06-22 | get Fortinet FortiGate Sniffer Tool → | tags: fortinet, fortigate, fortigatesniffer

34.

A Glimpse into the “Search Your Target” Market for Stolen Credentials (bleepingcomputer.com)

2026-06-22 | get Password Manager Security Kit → | tags: infostealer, malware-as-a-service, credential brokers

35.

Massive breach spills credentials for thousands of sensitive networks (arstechnica.com)

2026-06-17 | get Cybersecurity Password Vault → | tags: fortinet, oracle, lenovo

36.

FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices. (bleepingcomputer.com)

2026-06-17 | get Fortinet VPN Security Kit → | tags: fortinet, fortigate, vpn

37.

Fileless Phantom Stealer Targets Browser Credentials (darkreading.com)

2026-06-16 | get Cybersecurity USB Data Blocker → | tags: phantom stealer, browser credentials, fileless malware

38.

Rust-Written IronWorm Hits NPM Supply Chain (darkreading.com)

2026-06-04 | get Rust Programming Book → | tags: campaign, campaign targets, channel

39.

Password manager Dashlane says hackers stole some customers’ password vaults (techcrunch.com)

2026-06-02 | by Zack Whittaker | get Dashlane Password Vault Backup → | tags: dashlane, password vaults, two-factor authentication

40.

Red Hat npm packages compromised to steal developer credentials (bleepingcomputer.com)

2026-06-01 | get Red Hat Developer Security Kit → | tags: red hat, npm packages, shai-hulud

41.

Chrome stops hackers from stealing your browser cookies now - how its new security feature works (zdnet.com)

2026-06-01 | by Lance Whitney | get Chrome Cookie Security Extension → | tags: chrome, google workspace, device bound session credentials

42.

The Chrome browser is getting a big safety upgrade — if you use Windows (androidauthority.com)

2026-05-28 | get Chrome Security Extension → | tags: chrome, google meet, device bound session credentials

43.

CISA Exposes Secrets, Credentials in 'Private' Repo (darkreading.com)

2026-05-19 | get GitHub Security Monitoring Tool → | tags: cisa, github, private-repo

44.

Claude agents can finally connect to enterprise APIs without leaking credentials (venturebeat.com)

2026-05-19 | get API Credential Manager → | tags: claude, anthropic, openai

45.

In stunning display of stupid, secret CISA credentials found in public GitHub repo (arstechnica.com)

2026-05-19 | get GitHub Security Badge → | tags: cisa, github, amazon web services

46.

CISA Admin Leaked AWS GovCloud Keys on GitHub (news.ycombinator.com)

2026-05-19 | get AWS Security Badge → | tags: cisa, aws govcloud, github

47.

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments (darkreading.com)

2026-05-18 | get Cybersecurity Hardware Lock → | tags: openclaw, vulnerabilities, ai agent

48.

Popular node-ipc npm package compromised to steal credentials (bleepingcomputer.com)

2026-05-15 | get Node.js Security Toolkit → | tags: node-ipc, npm, supply chain attack

49.

Show HN: Agentic interface for mainframes and COBOL (news.ycombinator.com)

2026-05-12 | get Mainframe COBOL Programming Book → | tags: mainframes, cobol, hopper

50.

Compromised Mistral AI and TanStack packages may have exposed GitHub, cloud and CI/CD credentials in 'mini Shai Hulud' malware infection — supply-chain campaign spreads across npm and AI developer ecosystems like wildfire (tomshardware.com)

2026-05-12 | by Etiido Uko | get Cybersecurity Credential Protection Kit → | tags: compromised, malicious, microsoft

51.

Chinese grey market sells Claude API access at 90% off by using stolen credentials, model substitution, and harvesting users' prompts and outputs for resale as AI training data — 'transfer stations' operate through proxy networks that harvest user data (tomshardware.com)

2026-05-09 | by Luke James | tags: anthropic, claude, proxy networks

52.

New PCPJack worm steals credentials, cleans TeamPCP infections (bleepingcomputer.com)

2026-05-07 | get Cybersecurity USB Data Block → | tags: pcpjack, teampcp, docker

53.

Official SAP npm packages compromised to steal credentials (bleepingcomputer.com)

2026-04-29 | get SAP Security Toolkit → | tags: sap npm packages, teampcp attack, cloud application programming model

54.

Google Wallet may finally add Aadhaar card support (Updated: Rolling out) (androidauthority.com)

2026-04-28 | get Google Wallet Aadhaar Card Adapter → | tags: google wallet, aadhaar card, samsung wallet

55.

Open source package with 1 million monthly downloads stole user credentials (arstechnica.com)

2026-04-27 | get Open Source Security Audit Tool → | tags: element-data, github actions, python package index

56.

Android wants to replace email verification codes with one-tap credentials (techspot.com)

2026-04-24 | get Yubico YubiKey 5 NFC → | tags: android, credential manager, google

57.

Bitwarden CLI npm package compromised to steal developer credentials (bleepingcomputer.com)

2026-04-23 | get Bitwarden CLI Security Badge → | tags: bitwarden, npm, github action

58.

Anonymous credentials: an illustrated primer (Part 2) (news.ycombinator.com)

2026-04-20 | by Matthew Green | tags: anonymous credentials, issuer, credential cloning

59.

5 Ways Zero Trust Maximizes Identity Security (bleepingcomputer.com)

2026-04-14 | get Zero Trust Identity Security Kit → | tags: zero trust, identity security, least privilege

60.

FBI announces takedown of phishing operation that targeted thousands of victims (techcrunch.com)

2026-04-13 | by Lorenzo Franceschi-Bicchierai | get Phishing Awareness Security Kit → | tags: fbi, phishing, w3ll