Search: “oauth”

187 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 52 Data breach 47 Vulnerability 41 Threat actor 27 Ransomware 23 Phishing & fraud 14 Malware 10 AI safety & security 2

SeverityAll critical 187 high 20 medium 9 low 0 info 0

How to Investigate an OAuth Grant for Suspicious Activity or Overly Permissive Scopes

The Hacker NewsAug 21, 11:12 UTC · Aug 21, 2023Data breach

60

The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed

The Hacker NewsMay 5, 11:58 UTC · May 5, 2026Threat actor

60

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Security AffairsJul 3, 10:34 UTC · Jul 3, 2026Ransomware

60

Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

The Hacker NewsMay 2, 03:42 UTC · May 2, 2024Data breach

60

OAuth-based phishing campaign gives Gmail users a scare

CyberScoopMay 3, 20:17 UTC · May 3, 2017Threat actor in the wild

60

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-57219 CVE-2026-57221

60

OAuth, guest accounts, and weak MFA drive SaaS risk

Help Net SecurityJul 6, 00:00 UTC · Jul 6, 2026Data breach

60

China-Linked TA416 Targets European Governments with PlugX and OAuth

The Hacker NewsApr 3, 17:34 UTC · Apr 3, 2026Vulnerability CVE-2025-31324 CVE-2025-0994

60

ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More

The Hacker NewsMar 12, 15:00 UTC · Mar 12, 2026Phishing & fraud in the wild

60

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174 CVE-2025-43529 CVE-2025-6218+43 CVEs

60

Salesloft Drift security incident started with undetected GitHub access

CyberScoopSep 8, 22:44 UTC · Sep 8, 2025Exploit / PoC in the wild

60

Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms

The Hacker NewsOct 25, 13:04 UTC · Oct 25, 2023Threat actor

60

API Security Flaw Impacted Grammarly, Vidio and Bukalapak

Infosecurity MagazineOct 24, 17:00 UTC · Oct 24, 2023Data breach

60

API Security Flaw Found in Booking.com Allowed Full Account Takeover

Infosecurity MagazineMar 2, 17:30 UTC · Mar 2, 2023Exploit / PoC in the wild

60

Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

Help Net SecurityJul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409 CVE-2026-15410 CVE-2026-56155+2 CVEs

60

Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast

Help Net SecurityMar 8, 00:00 UTC · Mar 8, 2026Vulnerability CVE-2025-14500 CVE-2026-28289 CVE-2026-20128+1 CVEs

60

Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors

Help Net SecurityOct 26, 00:00 UTC · Oct 26, 2025Malware in the wildCVE-2025-59287 CVE-2025-61932 CVE-2025-54236+2 CVEs

60

Email Security Is Stuck in the Antivirus Era: Why It Needs a Modern Approach

The Hacker NewsJul 28, 11:25 UTC · Jul 28, 2025Ransomware2

60

Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

The Hacker NewsMay 27, 07:45 UTC · May 27, 2023Vulnerability CVE-2023-28131 CVE-2023-28438

60

Week in review: Rail transport cybersecurity, “verified” OAuth apps used to infiltrate organizations

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2023Data breach CVE-2022-27596 CVE-2023-20076 CVE-2023-225011

60

Toxic Combinations: When Cross

The Hacker NewsJul 9, 15:37 UTC · Jul 9, 2026Exploit / PoC

60

What is Nudge Security and How Does it Work?

The Hacker NewsDec 12, 05:43 UTC · Dec 12, 2024Data breach

60

Klue Breach Enables Hackers to Compromise Cybersecurity Firms

Infosecurity MagazineJun 22, 10:15 UTC · Jun 22, 2026Ransomware

60

Vercel breached via compromised third-party AI tool

Help Net SecurityApr 20, 00:00 UTC · Apr 20, 2026Data breach

60

Avoid These 5 IT Offboarding Pitfalls

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2023Threat actor1

60

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-44747 CVE-2026-27690 CVE-2026-44761

60

⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens

The Hacker NewsOct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287 CVE-2025-54957 CVE-2025-6950+21 CVEs

60

How to Prevent API Breaches: A Guide to Robust Security

The Hacker NewsSep 11, 11:14 UTC · Sep 11, 2023Data breach

60

GSA watchdog to 18F: Stop using Slack

CyberScoopMay 13, 17:32 UTC · May 13, 2016Data breach in the wild

60

Week in review: Accenture data breach, great open-source cybersecurity tools

Help Net SecurityJul 12, 00:00 UTC · Jul 12, 2026Data breach in the wildCVE-2026-48282 CVE-2026-55255 CVE-2026-506561

60

A Browser Extension Risk Guide After the ShadyPanda Campaign

The Hacker NewsJul 9, 15:37 UTC · Jul 9, 2026Threat actor

60

Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure Process

Security AffairsJun 4, 09:13 UTC · Jun 4, 2026Exploit / PoC in the wild1

60

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

The Hacker NewsMay 28, 13:33 UTC · May 28, 2026Phishing & fraud in the wildCVE-2026-83981

60

FBI warns about fast-growing phishing kit targeting Microsoft 365 users

CyberScoopMay 22, 20:41 UTC · May 22, 2026Phishing & fraud in the wild1

60

⚡ Weekly Recap: NFC Fraud, Curly COMrades, N

The Hacker NewsNov 20, 10:46 UTC · Nov 20, 2025Phishing & fraud in the wildCVE-2025-8875 CVE-2025-8876 CVE-2025-26633+36 CVEs

60

Is Your Google Workspace as Secure as You Think it is?

The Hacker NewsOct 28, 10:30 UTC · Oct 28, 2025Data breach

60

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

The Hacker NewsSep 24, 10:50 UTC · Sep 24, 2025Vulnerability in the wildCVE-2025-55241 CVE-2025-537861

60

Hundreds of Salesforce customers impacted by attack spree linked to third

CyberScoopAug 27, 01:22 UTC · Aug 27, 2025Exploit / PoC in the wild

60

Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise

The Hacker NewsJun 9, 11:00 UTC · Jun 9, 2025Data breach

60

DoubleClickjacking allows clickjacking on major websites

Security AffairsJan 2, 17:34 UTC · Jan 2, 2025Exploit / PoC

60