Twitter Warns Developers of API Bug That Exposed App Keys, Tokens
Twitter has fixed a caching issue that could have exposed developers’ API keys and tokens. Continue reading Twitter Warns Developers of API Bug That Exposed App Keys, Tokens
Category Archives: tokens
Slack Fixes Cross-Origin Token Theft Bug
The cloud-based collaboration tool Slack was quick to fix a bug earlier this month that could have let an attacker steal a user’s private Slack token. Continue reading Slack Fixes Cross-Origin Token Theft Bug
PayPal Fixes OAuth Token Leaking Vulnerability
PayPal fixed an issue that could have allowed an attacker to hijack OAuth tokens associated with any PayPal OAuth application. The vulnerability was publicly disclosed on Monday by Antonio Sanso, a senior software engineer at Adobe, after he came across the issue while testing his own OAuth client. For its part, PayPal remedied the vulnerability about […] Continue reading PayPal Fixes OAuth Token Leaking Vulnerability
Hacking Slack accounts: As easy as searching GitHub
Bot tokens leaked on public sites expose firms’ most sensitive business secrets. Continue reading Hacking Slack accounts: As easy as searching GitHub
Your Friendly Slack Bot Might Be Exposing Your Company’s Conversations
Sloppy developers are leaving tokens in their public bot code that would let others listen in on company conversations and pull sensitive data. Continue reading Your Friendly Slack Bot Might Be Exposing Your Company’s Conversations