ThreatsDay: OAuth abuse, Signal hijacks, Zombie ZIP evasion, Teams malware, AI hack, RondoDox botnet, and more cyber stories.

A weakness in the configuration of OAuth credentials opens up a stored XSS vulnerability in the n8n automation platform, ...

Malicious Packagist Laravel packages install a cross-platform RAT enabling remote shell access and system reconnaissance via C2 server.

Hackers are abusing the legitimate OAuth redirection mechanism to bypass phishing protections in email and browsers to take ...

Microsoft has identified a phishing campaign using malformed links to legitimate OAuth services to redirect to malware ...

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...

A Godot plugin that provides a unified GDScript interface for OAuth 2.0 authentication flows on Android and iOS. It supports popular OAuth providers via presets (Google, Apple, GitHub, Discord, Auth0) ...

Abstract: This article presents a mutual authentication scheme for vehicle-to-grid (V2G) using physical unclonable functions (PUFs). Various security challenges exist during the transfer of ...

Next week, the Houston Texans will begin the playoffs as part of a rare group in NFL history. This season's Texans are just the seventh team since 1980 to overcome a 0-3 start to make the playoffs, ...

Abstract: The Metaverse has evolved into a transformative ecosystem, merging virtual and physical realities with consumer electronics and IoT to enable immersive experiences. However, vulnerabilities ...