🧰 OAuth

The items that name it 84

• Kizuno18 (@Kizuno18) on X
  threadas classification.technologies2026-10-27
• cubillas (@cubillas888) on X
  threadas classification.technologies2026-10-27
• Brute (@BRuteLogic) on X
  toolas classification.technologies2026-10-26
• David Gutierrez | Eng (@david_x_ai) on X
  threadas classification.technologies2026-10-25
• China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
  articleas classification.technologies2026-10-23
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.technologies2026-10-22
• The Current Landscape of OAuth Attacks
  articleas classification.technologies2026-10-22
• ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
  articleas classification.technologies2026-10-22
• SecureChap (@SecureChap) on X
  threadas classification.technologies2026-10-22
• VibecodersHQ (@VibeCodrHQ) on X
  threadas classification.technologies2026-10-21
• AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
  writeupas classification.technologies2026-10-21
• Santhosh Patel (@santhosh_patell) on X
  threadas classification.technologies2026-10-19
• Microsoft Threat Intelligence (@MsftSecIntel) on X
  advisoryas classification.technologies2026-10-17
• ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks
  writeupas classification.technologies2026-10-16
• SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
  articleas classification.technologies2026-10-14
• Dark Web Intelligence (@DailyDarkWeb) on X
  advisoryas classification.technologies2026-10-13
• Phillip Shoemaker (@pbsIdentity) on X
  threadas classification.technologies2026-10-12
• I Found a $90k Remote Code Execution Vulnerability in Google
  writeupas classification.technologies2026-10-12
• GhostAction Phishing Campaign
  writeupas classification.technologies2026-10-11
• Ned Peterson (@NedPeterson99) on X
  threadas classification.technologies2026-10-09
• Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation
  articleas classification.technologies2026-10-06
• Jan Curn (@jancurn) on X
  threadas classification.technologies2026-10-03
• Python Hub (@PythonHub) on X
  toolas classification.technologies2026-10-02
• Identity Management for Agentic AI [pdf] (2025)
  paperas classification.technologies2026-10-01
• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  writeupas classification.technologies2026-09-30
• Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
  writeupas classification.technologies2026-09-23
• Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
  writeupas classification.technologies2026-09-23
• OAuth Token Theft Through Microsoft's Front Door | Huntress
  writeupas classification.technologies2026-09-23
• CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM
  advisoryas classification.technologies2026-09-23
• https://github.com/akha-security/akca
  repoas classification.technologies2026-09-23
• Threat Hunter's Guide to GitHub (Datadog Security Labs)
  writeupas classification.technologies2026-09-16
• Socket: "JeetBot" Twitch Extension Steals 31,000 Users' OAuth Tokens
  writeupas classification.technologies2026-09-12
• Inside Knight Office, a New M365 AiTM Phishing Kit
  writeupas classification.technologies2026-09-02
• Next-Gen Phishing Tactics Users Aren’t Ready For | Huntress
  articleas classification.technologies2026-08-28
• The New MCP Roadmap
  articleas classification.technologies2026-08-22
• JFrog: Propagating User Identity From AI Agents to Your Tools
  articleas classification.technologies2026-08-21
• Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia
  articleas classification.technologies2026-08-20
• CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower (CVE-2026-24301)
  writeupas classification.technologies2026-08-18
• Orca Security: Shadow AI Governance
  articleas classification.technologies2026-08-13
• Top MCP security resources — August 2026
  articleas classification.technologies2026-08-06
• Device Code Phishing Keeps Evolving. Here’s What to Watch For
  writeupas classification.technologies2026-07-31
• Recon-Skills
  repoas classification.technologies2026-07-29
• The risk hiding behind exposed MCP servers
  writeupas classification.technologies2026-07-28
• The 2026-07-28 MCP Specification: Stateless Core, MRTR, Header-Based Routing
  articleas classification.technologies2026-07-28
• How the LSHIY Password-Spraying Attack Abuses OAuth’s ROPC Grant
  articleas classification.technologies2026-07-22
• Socket: npm v12 Ships With Install Scripts Off by Default
  articleas classification.technologies2026-07-15
• Conditional Access Misconfigurations Exposed 55 Orgs with MFA On
  articleas classification.technologies2026-07-09
• ThinkWatch
  repoas classification.technologies2026-07-04
• Authentication Bypass in the default configuration phpBB
  writeupas classification.technologies2026-07-03
• Orca Security: ITDR for the Cloud
  articleas classification.technologies2026-07-03
• No (Bad) CAP: Inside an Ongoing LSHIY Password Spray Attack
  writeupas classification.technologies2026-06-30
• The Hacker's 2026 Playbook: Dark Web Tactics Targeting You
  articleas classification.technologies2026-06-29
• Vulnerability-Lookup
  advisoryas classification.technologies2026-06-29
• When a vendor's breach becomes yours: lessons from the Klue incident
  articleas classification.technologies2026-06-23
• We Need to Talk About Device Code Phishing
  articleas classification.technologies2026-06-22
• Vulnerability-Lookup
  advisoryas classification.technologies2026-06-18
• Cybercrime Breaches Klue: Salesforce Data Impacted for Many Victims, including Huntress
  writeupas classification.technologies2026-06-18
• Inside Kali365, a Device Code Phishing Ecosystem | Huntress
  writeupas classification.technologies2026-06-11
• Orca Security: Securing Shadow AI: How to Detect Unapproved LLMs in Your Cloud
  articleas classification.technologies2026-06-01
• AWS MCP Server (GA)
  articleas classification.technologies2026-05-24
• elementalsouls/Claude-BugHunter
  repoas classification.technologies2026-05-22
• Orca Security: Critical Coder Signature Bypass Exposes Developer Keys and Tokens
  advisoryas classification.technologies2026-05-22
• The 2026-07-28 MCP Specification Release Candidate
  articleas classification.technologies2026-05-21
• Protocol Soup
  toolas classification.technologies2026-05-12
• Alice and Bob Learn Secure Coding: Chapter 2
  videoas technologies2026-05-11
• Octelium
  repoas classification.technologies2026-05-05
• Salesforce Connected Apps Audit Guide
  articleas classification.technologies2026-05-05
• Social Engineering Leveled Up. Has Your Security Program?
  articleas classification.technologies2026-05-01
• OpenClaw, Rogue Agents, and Application Hygiene
  writeupas classification.technologies2026-04-01
• Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure
  writeupas classification.technologies2026-03-23
• Why BEC Is Now an Identity Problem
  articleas classification.technologies2026-03-05
• 6 Months of Researching OAuth Application Attacks | Huntress
  writeupas classification.technologies2025-02-10
• Device Code Phishing: OAuth 2.0 Attacks in Google & Azure
  writeupas classification.technologies2025-02-06
• Android deep link vulnerabilities: how intent filters lead to account takeover | Oversecured Blog
  articleas classification.technologies
• Vulnerabilities that lead to account takeover in banking and fintech mobile apps | Oversecured Blog
  articleas classification.technologies
• ETDI: Comprehensive MCP Security Framework
  writeupas classification.technologies
• MCP Python SDK v2.2.0
  otheras classification.technologies
• ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation
  advisoryas classification.technologies
• CVE-2026-49291: mcp-memory-service is a semantic memory layer for AI applications
  advisoryas classification.technologies
• CVE-2026-14541: An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mc
  advisoryas classification.technologies
• Insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default
  advisoryas classification.technologies
• A First Measurement Study on Authentication Security in Real-World Remote MCP Servers
  paperas classification.technologies
• Solving the Identity Crisis for AI Agents (Uber)
  articleas classification.technologies
• CVE-2026-49291 | THREATINT
  advisoryas classification.technologies