Stolen OAuth tokens used to download data from dozens of orgs, GitHub warnsSecurity Affairs·Apr 17, 14:58 UTC · Apr 17, 2022Threat actor45
GitHub: Nearly 100K NPM credentials stolen in April OAuth token attackSecurity Affairs·May 28, 11:01 UTC · May 28, 2022Threat actor145
UNC6395 targets Salesloft in Drift OAuth token theft campaignSecurity Affairs·Aug 28, 07:56 UTC · Aug 28, 2025Threat actor45
Salesforce-owned Heroku faces backlash over handling of stolen user credentialsThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Threat actor45
Heroku Forces User Password Resets Following GitHub OAuth Token TheftThe Hacker News·May 9, 04:57 UTC · May 9, 2022Threat actor145
Hackers Stole Access Tokens from Okta’s Support UnitKrebs on Security·Oct 20, 19:29 UTC · Oct 20, 2023Threat actor45
GitHub Says Recent Attack Involving Stolen OAuth Tokens Was "Highly Targeted"The Hacker News·May 28, 08:22 UTC · May 28, 2022Threat actor45
Spoutible API exposed encrypted password reset tokens, 2FA secrets of usersHelp Net Security·Feb 6, 00:00 UTC · Feb 6, 2024Threat actor45
New York Times source code compromised via exposed GitHub tokenSecurity Affairs·Jun 8, 20:34 UTC · Jun 8, 2024Threat actor145
Microsoft AI Researchers Accidentally Expose 38 Terabytes of Confidential DataThe Hacker News·Sep 19, 12:24 UTC · Sep 19, 2023Threat actor45
Nearly 100,000 NPM Users' Credentials Stolen in GitHub OAuth BreachThe Hacker News·May 31, 04:12 UTC · May 31, 2022Threat actor145
Threat actors stole more than $150 million worth of cryptocurrency tokens from BitMart platformSecurity Affairs·Dec 6, 11:40 UTC · Dec 6, 2021Threat actor45
Threat actors stole $29 million worth of crypto assets from Cream FinanceSecurity Affairs·Aug 31, 22:42 UTC · Aug 31, 2021Threat actor45
$611 million stolen in Poly Network crossSecurity Affairs·Aug 10, 21:09 UTC · Aug 10, 2021Threat actor45
Salesloft: GitHub Account Breach Was Ground Zero in Drift CampaignInfosecurity Magazine·Sep 9, 10:00 UTC · Sep 9, 2025Threat actor145
Friday Squid Blogging: Catching Humboldt SquidSchneier on Security·Aug 29, 21:04 UTC · Aug 29, 2025Threat actor145
A "cascade" of errors let Chinese hackers into US government inboxesHelp Net Security·Apr 3, 00:00 UTC · Apr 3, 2024Threat actor145
Chinese threat actors stole around 60,000 emails from U.S. State Department in Microsoft breachSecurity Affairs·Sep 29, 11:08 UTC · Sep 29, 2023Threat actor45
Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistakeSecurity Affairs·Sep 7, 05:44 UTC · Sep 7, 2023Threat actor145
How a cloud flaw gave Chinese spies a key to Microsoft’s kingdomArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2023Threat actor45
Nearly 13 Million Secrets Spilled Via Public GitHub RepositoriesInfosecurity Magazine·Mar 13, 09:30 UTC · Mar 13, 2024Threat actor45
Okta breach post mortem reveals weaknesses exploited by attackersHelp Net Security·Nov 6, 00:00 UTC · Nov 6, 2023Threat actor45
Okta Reveals Breach Via Stolen CredentialInfosecurity Magazine·Oct 23, 10:00 UTC · Oct 23, 2023Threat actor45
US seizes $3.6 billion worth of cryptocurrency stolen in 2016 Bitfinex hackSecurity Affairs·Aug 4, 15:31 UTC · Aug 4, 2023Threat actor45
Thanks Storm-0558! Microsoft to expand default access to cloud logsHelp Net Security·Jul 20, 00:00 UTC · Jul 20, 2023Threat actor45
Threat actors stole $97 million from Liquid cryptocurency exchangeSecurity Affairs·Aug 19, 17:10 UTC · Aug 19, 2021Threat actor45
Hacker stole $2 million worth of Dai cryptocurrency from AkropolisSecurity Affairs·Nov 13, 21:27 UTC · Nov 13, 2020Threat actor45
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra CredentialsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Threat actor145
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users DownloadedThe Hacker News·Jun 5, 06:40 UTC · Jun 5, 2026Threat actor45
Attackers obtained encrypted password vaults from some Dashlane user accountsHelp Net Security·Jun 5, 00:00 UTC · Jun 5, 2026Threat actor45
North Korean Blamed for $290m KelpDAO Crypto HeistInfosecurity Magazine·Apr 21, 08:30 UTC · Apr 21, 2026Threat actor45
Cloudflare and Palo Alto Networks Victimized in Salesloft Drift BreachInfosecurity Magazine·Sep 3, 11:45 UTC · Sep 3, 2025Threat actor45
Microsoft: Russians are using stolen information to breach company’s systemsThe Record·Mar 8, 15:54 UTC · Mar 8, 2024Threat actor145
Microsoft details a chain of mishaps leading to Outlook hack on government officialsThe Record·Sep 6, 19:51 UTC · Sep 6, 2023Threat actor45
3 Reasons SaaS Security is the Imperative First Step to Ensuring Secure AI UsageThe Hacker News·Jun 30, 14:04 UTC · Jun 30, 2023Threat actor45
F5 protects digital services with AI-powered app and API security capabilitiesHelp Net Security·Apr 5, 00:00 UTC · Apr 5, 2023Threat actor45
Lowe’s Market chain leaves client data up for grabsSecurity Affairs·Mar 19, 17:54 UTC · Mar 19, 2023Threat actor45
Crunch Time for Liquid as Cryptocurrency Exchange Loses $97m to HackersInfosecurity Magazine·Aug 20, 09:23 UTC · Aug 20, 2021Threat actor45
Threat actors behind the Poly Network hack are returning stolen fundsSecurity Affairs·Aug 12, 06:33 UTC · Aug 12, 2021Threat actor45