Grok Unauthorized Uploads, 85 Crypto Wallet Leaks, OAuth ID Spoofing and Salesforce Attack Paths

THN Daily Updates AI Coding and Open Source Risk: What the Data Actually Shows About Remediation Debt Join ActiveState to learn how to manage unvetted open-source code from AI tools. Get peer benchmarks, new survey data, and proven governance frameworks. Download Now Sponsored LATEST NEWS Jul 14, 2026 Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the wallets themselves leak enough to link and track the people using them. The way these wallets talk... Read More How Pentera Turns AI Security Workflows into Validation Engines AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: sc... Read More Where AI Security Is Actually Hiring in 2026 10 AI security roles with active listings, salary ranges, and the companies hiring now. Free Guide. Read More OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and ... Read More Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher publishing as cerebla... Read More AuthNContext and AMR, We Remember What MFA You Provided Last Summer! AuthNContext and AMR, We Remember What MFA You Provided Last Summer! | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities. Read More U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors' and other cybercriminals' malicious activities, including ... Read More Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw in the platform. The way in ... Read More AI Coding and Open Source Risk: What the Data Actually Shows About Remediation Debt Join ActiveState to learn how to manage unvetted open-source code from AI tools. Get peer benchmarks, new survey data, and proven governance frameworks. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi