GoKawiil - Tech News

1.

Zero-Touch OAuth for MCP (news.ycombinator.com)

2026-06-18 | by Paul Carleton | tags: oauth, microsoft, okta

2.

Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks (bleepingcomputer.com)

2026-06-18 | get Salesforce Security Badge → | tags: klue, oauth, salesforce

3.

VS Code zero-day lets hackers steal GitHub tokens in one click (bleepingcomputer.com)

2026-06-03 | get VS Code Security Extension → | tags: vs code, github, github.dev

4.

Why the browser is now the front line for AI security (bleepingcomputer.com)

2026-06-02 | get AI Security Browser Extension → | tags: ai security, browser extensions, phishing kits

5.

The attack dominating financial services doesn't steal passwords. It resets MFA and steals the token. (venturebeat.com)

2026-05-26 | get YubiKey Security Key → | tags: mutant spider, microsoft teams, kali365

6.

FBI warns of Kali365 phishing service targeting Microsoft 365 accounts (bleepingcomputer.com)

2026-05-25 | get Microsoft 365 Security Bundle → | tags: fbi, kali365, microsoft 365

7.

5 Steps to Managing Shadow AI Tools Without Slowing Down Employees (bleepingcomputer.com)

2026-05-18 | get AI Management Software → | tags: shadow ai, generative ai, oauth tokens

8.

Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing (bleepingcomputer.com)

2026-05-17 | get Microsoft 365 Security Kit → | tags: tycoon2fa, microsoft 365, trustifi

9.

Composer leaks contents of tokens configured as GitHub OAuth tokens (news.ycombinator.com)

2026-05-13 | get OAuth Token Security Kit → | tags: composer, github, oauth

10.

Running Claude Code or Claude in Chrome? Here's the audit matrix for every blind spot your security stack misses (venturebeat.com)

2026-05-12 | get Claude AI Chrome Extension → | tags: claude, chrome, anthropic

11.

ConsentFix v3 attacks target Azure with automated OAuth abuse (bleepingcomputer.com)

2026-05-02 | get OAuth Security Toolkit → | tags: consentfix, azure, oauth

12.

Learning from the Vercel breach: Shadow AI & OAuth sprawl (bleepingcomputer.com)

2026-04-29 | get OAuth Security Toolkit → | tags: vercel, shadow ai, oauth

13.

Carrot Disclosure: Forgejo (news.ycombinator.com)

2026-04-28 | get Forgejo GitHub Repository → | tags: forgejo, pagure, gitea

14.

Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain (venturebeat.com)

2026-04-21 | get OAuth Security Monitoring Tool → | tags: vercel, oauth, next.js

15.

The Vercel breach: OAuth attack exposes risk in platform environment variables (news.ycombinator.com)

2026-04-21 | by Peter Girnus | get OAuth Security Toolkit → | tags: vercel, oauth, google workspace

16.

Vercel Employee's AI Tool Access Led to Data Breach (darkreading.com)

2026-04-20 | get Cybersecurity USB Data Block → | tags: vercel, oauth tokens, data breach

17.

Cloud development platform Vercel was hacked (theverge.com)

2026-04-19 | by Terrence O'Brien | get Vercel Cloud Security Guide → | tags: vercel, google workspace, oauth

18.

Scan your website to see how ready it is for AI agents (news.ycombinator.com)

2026-04-17 | get AI Website Readiness Scanner → | tags: robots.txt, oauth, agent skills

19.

Is Your Site Agent-Ready? (By Cloudflare) (news.ycombinator.com)

2026-04-17 | get Cloudflare Website Security Bundle → | tags: cloudflare, robots.txt, oauth

20.

Over 100 Chrome Web Store extensions steal user accounts, data (bleepingcomputer.com)

2026-04-14 | get Chrome Web Store Security Tool → | tags: chrome web store, google oauth2, socket security

21.

Over 100 Chrome extensions in Web Store target users accounts and data (bleepingcomputer.com)

2026-04-14 | get Chrome Extension Security Bundle → | tags: chrome web store, google oauth2, socket security

22.

Claude Code is locking people out for hours (news.ycombinator.com)

2026-04-07 | get Claude AI Access Blocker → | tags: claude code, anthropic api, google login

23.

Claude Code Down (news.ycombinator.com)

2026-04-06 | get Claude AI Assistant → | tags: claude, oauth, reddit

24.

Device code phishing attacks surge 37x as new kits spread online (bleepingcomputer.com)

2026-04-04 | get Phishing Awareness Security Kit → | tags: oauth 2.0, device code, push security

25.

New EvilTokens service fuels Microsoft device code phishing attacks (bleepingcomputer.com)

2026-04-01 | get Microsoft Security Key → | tags: eviltokens, microsoft, oauth 2.0

26.

Microsoft fixes bug causing Classic Outlook sync issues with Gmail (bleepingcomputer.com)

2026-03-24 | get Outlook Email Sync Adapter → | tags: microsoft, outlook, gmail

27.

Digs: iOS app that syncs your Discogs collection and lets you browse it offline (news.ycombinator.com)

2026-03-23 | by Raphaël Lustin | get Discogs Collection Manager App → | tags: discogs, ios, react native

28.

OpenClaw can bypass your EDR, DLP and IAM without triggering a single alert (venturebeat.com)

2026-03-16 | get Cybersecurity Penetration Testing Kit → | tags: openclaw, edr, dlp

29.

Apideck CLI – An AI-agent interface with much lower context consumption than MCP (news.ycombinator.com)

2026-03-16 | get AI Assistant Developer Kit → | tags: mcp, apideck, claude

30.

Ask HN: Is Claude Down Again? (news.ycombinator.com)

2026-03-11 | get Cloudflare → | tags: rust, iphone, oauth