Web·
Cloudflare opened OAuth to every developer on its platform
Cloudflare now lets any developer build a real OAuth login against its API, ending a partner-only gate. Here's what that fixes and the catch.
#oauth
RSS
Security·
VS Code's webview sandbox leaks GitHub tokens that read and write every private repo
A disclosed VS Code zero-day lets one click on a malicious github.dev notebook steal a GitHub OAuth token with full read-write access to every private repo.
Security·
Vercel got breached through a third-party AI tool's OAuth app. Here's what leaked.
A Context.ai compromise let attackers take over a Vercel employee's Google Workspace. Non-sensitive env vars were exposed, and a ShinyHunters persona is asking $2M.