GoKawiil
Authorize, don't authenticate
(news.ycombinator.com)
1.
2.
Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare
(bleepingcomputer.com)
3.
Show HN: OTP Inspired actor supervisor based full stack templates
(news.ycombinator.com)
4.
5.
Hackers target Microsoft 365 accounts with 81 million login attempts
(bleepingcomputer.com)
6.
OAuth for all
(news.ycombinator.com)
7.
Cloudflare launched self-managed OAuth for all
(news.ycombinator.com)
9.
Another LastPass security breach traces back to a compromised vendor
(androidauthority.com)
10.
Scope of Salesforce Attacks Expands as Icarus Leaks Data
(darkreading.com)
11.
12.
LastPass confirms data breach in Klue supply chain attack
(bleepingcomputer.com)
13.
Temporary Cloudflare accounts for AI agents
(news.ycombinator.com)
14.
Temporary Cloudflare Accounts for AI Agents
(news.ycombinator.com)
15.
Klue OAuth breach victim list grows as Icarus hackers claim attack
(bleepingcomputer.com)
16.
Zero-Touch OAuth for MCP
(news.ycombinator.com)
17.
Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks
(bleepingcomputer.com)
18.
VS Code zero-day lets hackers steal GitHub tokens in one click
(bleepingcomputer.com)
19.
Why the browser is now the front line for AI security
(bleepingcomputer.com)
20.
21.
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
(bleepingcomputer.com)
22.
5 Steps to Managing Shadow AI Tools Without Slowing Down Employees
(bleepingcomputer.com)
23.
Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing
(bleepingcomputer.com)
24.
Composer leaks contents of tokens configured as GitHub OAuth tokens
(news.ycombinator.com)
25.
26.
ConsentFix v3 attacks target Azure with automated OAuth abuse
(bleepingcomputer.com)
27.
Learning from the Vercel breach: Shadow AI & OAuth sprawl
(bleepingcomputer.com)
28.
Carrot Disclosure: Forgejo
(news.ycombinator.com)
29.
30.
The Vercel breach: OAuth attack exposes risk in platform environment variables
(news.ycombinator.com)