Microsoft Authenticator Android Flaw Lets Permissionless Apps Steal Work Tokens
A flaw in Microsoft Authenticator for Android allowed apps without permissions to impersonate Microsoft apps and retrieve work account tokens.
token theft
2 stories
LiteLLM Master Key Leak Enables GitHub Token Theft and Release Pipeline Hijack
A leaked LiteLLM master key exposed a GitHub OAuth token, enabling attackers to steal organization tokens and publish malicious releases.