OAuth Token Theft Through Microsoft's Front Door | Huntress
15 min
Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Microsoft Warns of EvilTokens AI Phishing Service Hijacking Thousands of Accounts
Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
2 sources 3 min
MFA Won't Save You From OAuth Consent Abuse
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
in the wild 3 min2
In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
in the wild 5 min2
GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds
in the wild 6 min5
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
in the wild 6 min5
NIST and CISA finalize playbook to stop token theft and forgery
2 sources 4 min
Mapping out your unknown: A threat hunter’s guide to GitHub
in the wild 15 min1
Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users
in the wild 6 min
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
in the wild 4 min
New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs
in the wild 6 min1
Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories
in the wild 4 min2
Doubloon Dredger Abuses Notion to Harvest Authentication Tokens
in the wild1