Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year.
This new Storm attack platform can exfiltrate passwords and session data, enabling 2FA bypass. Google Chrome, Microsoft Edge ...
With Anthropic rushing to wipe out the Claude Code leak, hackers are posting malware-laden files on GitHub that they claim are special, unlocked versions of the AI tool.