#tokens


Over 16,000 Supabase databases expose PII, passwords, auth tokens

Sep 29, 2026 // 13:17

Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. Based on the analysis of table […]

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Sep 16, 2026 // 11:41

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as […]

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Sep 15, 2026 // 22:01

Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the […]

Twitch extension with 30K installs exposes users’ OAuth tokens

Sep 14, 2026 // 23:43

A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users’ Twitch OAuth session tokens to a […]

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Sep 14, 2026 // 11:51

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. […]

US says Chinese firms extracted billions of tokens from frontier AI models

Sep 9, 2026 // 19:56

U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024. […]

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Sep 9, 2026 // 17:29

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create “stolen keys” that grant illicit access to tools from model providers […]

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

Sep 3, 2026 // 00:17

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. The flaw is present […]

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Aug 5, 2026 // 14:55

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive […]

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Aug 5, 2026 // 13:38

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive […]

1 2 3 Next